Installing the Package in LogScale

Find the repository where you want to send the Microsoft 365 logs, or Create a Repository.

  1. Navigate to your repository in the LogScale interface, click Settings and then Packages on the left.

  2. Click Marketplace and install the LogScale package for Microsoft 365 (i.e., microsoft/microsoft365).

  3. When the package has finished installing, click Ingest tokens on the left (still under the Settings, see Figure 294, “Ingest Token”).

  4. In the right panel, click + Add Token to create a new token. Give the token an appropriate name (e.g. the name of the Event Hub it will collect logs from), and assign the parser that was installed with the package `microsoft365`

    Ingest token

    Figure 294. Ingest Token


    Before leaving this page, view the ingest token and copy it to your clipboard — to save it temporarily elsewhere.

    Now that you have a repository set up in LogScale along with an ingest token you're ready to send logs to LogScale.