Office365 integration

[RenatoGoncalves]

We are trying to configure Office365 in NW to start receiving the logs and start monitoring eventual alerts and incidents.

One of our doubts is:

What do we put in source address?

We also tried to follow the pdf in https://community.rsa.com/docs/DOC-79883 but the become block in page 5 in: Sign-On URL. What do we put in Sign-On URL??

Anyone with the same problem?

[AhteshamPatel]

Source Address field is used to specify a custom ip address for the event source. Since cloud event sources do not have a device ip this value is used to populate device.ip meta. Any ip address can be used based on convenience.

The value of Sign-On URL is ignored. Since this is a mandatory field any value like "https://madeupwebsite.com" or "https://localhost.com" can be used.