With the MS Powershell Sensor you are able to trigger any Get- cmdlet within your Office 365 tenant by default (Exchange and Security / Compliance)
By default we have restricted the cmdlets in a way, that only GET- and TEST- cmdlets are allowed. However you can adjust this by modifying the following file on the GL filesystem level.
for Exchange:
open ssh console and issue the following commands:
for Security and Compliance
vim /opt/panagenda/appdata/volumes/gl/scripts/gl_powershell/o365_sec_and_compliance_ps_commands.txt
The following kbase article explains two simple examples for Exchange
First of all you have to add portal.office.com as a server to your GL server list. Just add the server without selecting any OS type or Role
Scenario 1: Get-Mailbox for a specific user
Create a MS Powershell Sensor with the following Settings
Output:
Scenario 2: Get-MailTrafficReport for a single day
Create a MS Powershell Sensor with the following Settings
Output:
Of course all this output can be further used for charting/alerting
example: inbound e-mails