O365 Microsoft Message Trace Reports

About Microsoft Message Trace Report

Table name: microsoft-message-trace-report

Message Trace Reports for various actions over your Office 365 outlook (Microsoft Exchange email). These include received, rejected, deferred, or delivered messages’ reports / traces . Message trace also shows what actions were taken on the message before it reached its final status.

Learn more here.

Important Note Regarding Setting up Message-Trace ingestion

This integration requires its own Client Secret when registering the app (a different one from the audit-logs).

1. In the Hunters Data Types section:

2. Enable Microsoft Message Trace Report

3. Disable O365 Audit Logs (since a separate integration exists for O365 Audit Logs)

4. To configure this, go to:

5. Data Sources → Connect Data Sources → More Integrations under Office 365:

 Sending Data To Hunters

📘 Note

To complete the steps below you’ll need an Azure admin user.

To set up ingestion from Microsoft 365, perform the following steps:

• STEP 1: Register application - Register a new application on Azure with appropriate permissions, create client secrets and gather information in your notepad for the next steps.

• STEP 2: Retrieve authorization code - Use the information gathered in step 1 to retrieve an authorization code, required to complete the next step.

• STEP 3: Get a refresh token - Generate a refresh token using the information gathered in step 1 and the authorization code retrieved in step 2.

• STEP 4: Enable auditing - Make sure Azure is keeping the logs.

• STEP 5: Start subscriptions - Start subscriptions to receive logs from Office 365 Management Activity API.

• STEP 6: Deliver keys to Hunters - Set up the connection in the Hunters platform.

Sample Data

{
  "EndDate": "/Date(1742491887000)/",
  "FromIP": "1.1.1.1",
  "Index": 111,
  "MessageId": "<CONFLUENCE.111@111>",
  "MessageTraceId": "1111-ff31-4dc8-1111-0811111508f0",
  "Organization": "hunters.onmicrosoft.com",
  "Received": "/Date(1742491883215)/",
  "RecipientAddress": "dan.shan@hunters.mail.onmicrosoft.com",
  "SenderAddress": "confluence@hunters.com",
  "Size": 2300433,
  "StartDate": "/Date(1742490087000)/",
  "Status": "Resolved",
  "Subject": "[confluence] HUNTERS Connect Product > GGG Product Testing for Customization projects",
  "ToIP": null,
  "__metadata": {
    "id": "https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/MessageTrace(111)",
    "type": "TenantReporting.MessageTrace",
    "uri": "https://reports.office365.com/ecp/ReportingWebService/Reporting.svc/MessageTrace(111)"
  }
}