Not able to see all record types with O365 data connector

[jjbhavsar]

Describe the bug
We are not able to see all record types while using O365 data connector. We are not able to see RecordType 31, please see below screenshot.

Ref: https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/O365%20Data

To Reproduce
We have to generate an event in o365 and we can see it in Sentinel

Expected behavior
To see all record types

Screenshots

[jjbhavsar]

Hello,
Can you please provide an update here @v-rusraut @v-sudkharat

[v-sudkharat]

Hi @jjbhavsar, We are reaching out to appropriate team to check on this issue, once we get some information from them will update you. Thanks!

[v-sudkharat]

Adding @sreedharande for visibility

[v-sudkharat]

Hi @jjbhavsar, We have received the response from our concern team for this issue, Could you please check the record type in source itself? and confirm it.
If the record types are not available in unified audit logging (UAL), then connector will not ingest those record types, So, kindly please verify the configuration at your Office 365 side and let us know.
Thanks!

[jjbhavsar]

Hello @v-sudkharat

It is in Source. I am able to see in other SIEM but not in Sentinel.

[v-sudkharat]

@jjbhavsar, Thanks for response, we will share this with connector team and get back to you. Thanks!