Alerts
With M365 Manager Plus you can create custom alerts for all the user and admin activities under the Alerts tab. Once created, the admin will receive real-time email alerts with details on the action that triggered the alert. With M365 Manager Plus, you can create alerts for the following Microsoft 365 services:
- Azure Active Directory
- Exchange Online
- Microsoft Streams
- Microsoft Forms
- Microsoft Teams
- OneDrive for Business
- Power Apps
- Power Automate
- Power BI
- SharePoint Online
- Yammer
How to
Prerequisite: Before adding an alert profile, please ensure that auditing is enabled with respect to the alert profile.
To create an alert profile
- Go to the Settings tab.
- Select Configuration → Audit Configuration → Alert Profiles in the left pane.
- Click Add profile.
- In the profile configuration page,
- Provide a Profile Name, and a Description that describes the alert profile.
- Select the Microsoft 365 service and the Category from the respective drop-down lists.
- Select the activities that must be audited. Multiple actions can be selected.
- Choose the Severity level of the profile.
- Provide an Alert Message that must be displayed in the product.
- Click on Advanced Configuration to configure the email notification, and Filter Settings.
- Under the Notification tab, choose the Email every alerts corresponding to this profile option, and select the notification template to be used.
- Under the Filter Settings tab, select Alerts Threshold, and specify the minimum number of events that will trigger the alert and the time interval within which these events should occur. You can also group events by attributes such as country, status, and operation.
For example, to receive an alert for each user who fails to log in five times within three minutes, the entries should be:
- Number of events: 5
- Time in minutes: 3
- Grouped by: User
- Under the Filter Settings tab, select the Business Hours Filter option, to choose whether the the alert must be triggered for event happening during business or non-business hours. If you haven't configured your business hours in the tool, you will be prompted to configure before using this feature. Click here to know how to configure your business hours.
- Select the Filter By Column option to set attribute-based conditions based on which the audit logs must be filtered. Use the + option to add multiple conditions.
- Check the Alerts Threshold checkbox to set the threshold limit for alerts. You can select the threshold to be at least a particular number of events that occur within a limited time. You can also group these events based on certain options provided such as Workload, Record Type, Activity etc.
- Click Add.
- Now you will be taken to the Configure Profile page, where you can see the alert profile you created listed on the table along with the other profiles. Click View Report in the Reports column to view the consolidated report.
Note: In the Filter section, the attribute Target refers to the object on which the action must be performed, and Caller refers to the object which performs the action.
To Generate alert data
- Go to the Alerts tab.
- Choose the profile and action for which you want to view the data, from the left pane.
- The alert data will be generated for the last 30 days, by default. You can alter the timeline under Period and also choose the duration in Business Hours drop-down.
- You can search for a specific alert using the search tab, found at the top of the alert data table.
To delete alerts
- To delete a single alert, click the corresponding icon, found under the Action column.
- To delete multiple alerts, select the checkbox corresponding to the alerts you want to delete, and select the icon found at the top of the table.
To export alerts
- Select the checkbox corresponding to the alert you want to export.
- Select Export As option found at the top right corner of the page.
- On choosing the file type from the drop-down, the alerts will be exported to the chosen format.
- If the alerts aren't chosen manually, all alerts will be exported. You can also customize your export settings under More.
Generate print view
- Select More found in the top corner of the Alerts page.
- Select Printable View.
- The printable version will be displayed in a pop-up.
- Select Print, if you want to print the report.
Email alert data
- Select the More option found in the top corner of the Alerts page.
- Select Send Mail
- Select the Notification Template and the Attachment Type of your choice.
- Click on Send
Customize export data
- Select More found in the top corner of the Alerts page.
- Select Export Settings.
- Enter a Description to be included in the exported report and click Save.
Note: Choose alert reports manually before an operation. If not, all the alert reports will be chosen, by default.