Microsoft Graph API Beat
Version 6.1.1
Microsoft Graph is a RESTful web API that enables you to access Microsoft Cloud service resources. After you register your app and get authentication tokens for a user or service, you can make requests to the Microsoft Graph API. This includes getting log data for Directory Audits, Sign Ins, and Security Alerts for the registered application.
In April 2026, Microsoft deprecated the reportingwebservice/reporting.svc/MessageTrace endpoint, which was used by LogRhythm System Monitor Agents to collect Office 365 Message Tracking logs using the API.
Starting with Open Collector version 2026.05, released in April 2026, the Microsoft Graph API Beat can be used to collect these Microsoft Office 365 Message Tracking logs. The necessary configuration, including privileges and endpoint URLs, can be found in the topics below.