# Email trace logs in the Microsoft Office 365 integration

**URL:** <https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649>\
**Category:** SIEM\
**Tags:** fleet, integrations\
**Created:** [April 5, 2022, 2:38pm UTC](https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649 "2022-04-05T14:38:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dsv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dsv/32/47173_2.png) [@dsv](https://discuss.elastic.co/u/dsv)\
**Post date:** [April 5, 2022, 2:38pm UTC](https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649/1 "2022-04-05T14:38:51Z")

</div>

Hello,

Is it possible to get the email trace logs (delivery status, sender, recipient, subject and attachments fields) in the Microsoft Office 365 integration in the Kibana 7.16.3?

Some of these fields are presented at creation/deleteion moments but it's impossible to determine answer for questions

- is the email delivered and to whom?
- is it opened for reading or not?

It seems the corresponding functionality is absent.

Best regards,  
Sergiy

---

<div class="post-metadata">

**Author:** ![dsv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dsv/32/47173_2.png) [@dsv](https://discuss.elastic.co/u/dsv)\
**Post date:** [April 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649/2 "2022-04-14T08:17:05Z")

</div>

I've looked around and realized the many other SIEM products (for example Qradar, Splunk) have this functionality.  
Because the one of the primary attack vector is email delivery such the functionality is obviously a basic primary need.  
And very strange for me to find a SIEM product without ability to analyze emails traces.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 12, 2022, 8:17am UTC](https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649/3 "2022-05-12T08:17:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
