Skip to content

Commit 9bc2e20

Browse files
authored
[O365_metrics] Enable Agentless Deployment (#18776)
1 parent 39852e1 commit 9bc2e20

4 files changed

Lines changed: 47 additions & 2 deletions

File tree

packages/o365_metrics/_dev/build/docs/README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,22 @@ The following data can be collected with the Microsoft Office 365 Metrics integr
3737
| Entra Agent | [agent](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-aadc-admin-agent) | Microsoft 365 Entra Agent metrics | No aggregation | RBAC role
3838
| Entra Alerts | [alerts](https://learn.microsoft.com/en-us/entra/permissions-management/ui-triggers) | Microsoft 365 Entra Alerts metrics | No aggregation | RBAC role
3939

40+
41+
42+
## How do I deploy this integration?
43+
44+
### Agent-based deployment
45+
46+
Elastic Agent must be installed. For more details, check the Elastic Agent [installation instructions](https://www.elastic.co/docs/reference/fleet/install-elastic-agents). You can install only one Elastic Agent per host.
47+
48+
Elastic Agent is required to collect data from Microsoft O365 and ship the data to Elastic, where the events will then be processed via the integration's ingest pipelines.
49+
50+
### Agentless deployment
51+
52+
Agentless integrations allow you to collect data without having to manage Elastic Agent in your cloud. They make manual agent deployment unnecessary, so you can focus on your data instead of the agent that collects it. For more information, refer to [Agentless integrations](https://www.elastic.co/guide/en/serverless/current/security-agentless-integrations.html)
53+
54+
Agentless deployments are only supported in Elastic Serverless and Elastic Cloud environments. This functionality is in beta and is subject to change. Beta features are not subject to the support SLA of official GA features.
55+
4056
## What do I need to use this integration?
4157

4258
To use this package you need to enable datastreams you want to collect metrics for and register an application in [Microsoft Entra ID (formerly known as Azure Active Directory)](https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id).

packages/o365_metrics/changelog.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "1.2.0"
3+
changes:
4+
- description: Enable Agentless deployment.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/18776
27
- version: "1.1.1"
38
changes:
49
- description: Remove duplicate security-solution-default tag references

packages/o365_metrics/docs/README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,22 @@ The following data can be collected with the Microsoft Office 365 Metrics integr
3737
| Entra Agent | [agent](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-aadc-admin-agent) | Microsoft 365 Entra Agent metrics | No aggregation | RBAC role
3838
| Entra Alerts | [alerts](https://learn.microsoft.com/en-us/entra/permissions-management/ui-triggers) | Microsoft 365 Entra Alerts metrics | No aggregation | RBAC role
3939

40+
41+
42+
## How do I deploy this integration?
43+
44+
### Agent-based deployment
45+
46+
Elastic Agent must be installed. For more details, check the Elastic Agent [installation instructions](https://www.elastic.co/docs/reference/fleet/install-elastic-agents). You can install only one Elastic Agent per host.
47+
48+
Elastic Agent is required to collect data from Microsoft O365 and ship the data to Elastic, where the events will then be processed via the integration's ingest pipelines.
49+
50+
### Agentless deployment
51+
52+
Agentless integrations allow you to collect data without having to manage Elastic Agent in your cloud. They make manual agent deployment unnecessary, so you can focus on your data instead of the agent that collects it. For more information, refer to [Agentless integrations](https://www.elastic.co/guide/en/serverless/current/security-agentless-integrations.html)
53+
54+
Agentless deployments are only supported in Elastic Serverless and Elastic Cloud environments. This functionality is in beta and is subject to change. Beta features are not subject to the support SLA of official GA features.
55+
4056
## What do I need to use this integration?
4157

4258
To use this package you need to enable datastreams you want to collect metrics for and register an application in [Microsoft Entra ID (formerly known as Azure Active Directory)](https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id).

packages/o365_metrics/manifest.yml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
name: o365_metrics
22
title: Microsoft Office 365 Metrics
3-
version: "1.1.1"
3+
version: "1.2.0"
44
description: Collect metrics from Microsoft Office 365 with Elastic Agent.
55
type: integration
6-
format_version: "3.0.2"
6+
format_version: "3.3.2"
77
categories:
88
- observability
99
- security
@@ -56,6 +56,14 @@ policy_templates:
5656
- name: o365
5757
title: Office 365 metrics
5858
description: Collect metrics from Office 365
59+
deployment_modes:
60+
default:
61+
enabled: true
62+
agentless:
63+
enabled: true
64+
organization: observability
65+
division: engineering
66+
team: obs-infraobs-integrations
5967
inputs:
6068
- type: cel
6169
title: "Collect Office 365 metrics via Microsoft Graph API using CEL Input"

0 commit comments

Comments
 (0)