cancel
Showing results for 
Search instead for 
Did you mean: 

Meraki Logs into Office 365 Cloud App Security

SOLVED
Highlighted
Here to help

Meraki Logs into Office 365 Cloud App Security

I am trying to pull the Meraki logs into Microsoft's Cloud App Security dashboard. Does anyone have experience with this? Each time we have tried, we get the below error message. 

 

Failed
Parsing failed for all logs.
Event_log.csv
  •  Log format does not match the expected format for Meraki - URLs log.

 

Microsoft provides an example log but there is not much instruction past this. 

 

Here is the Microsoft Help Article...

https://support.office.com/en-us/article/Web-traffic-logs-and-data-sources-for-Office-365-Cloud-App-...

1 ACCEPTED SOLUTION

Accepted Solutions
Kind of a big deal

Re: Meraki Logs into Office 365 Cloud App Security

According to the MS page you supplied it only supports Merakis URLs Log not the Event log that you are trying to import. You probably need to set it up as a Syslog connection and select URLs as the role.

 

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Over...

Meraki CMNO, Ruckus WISE, Sonicwall CSSA, Allied Telesis CASE & CAI
6 REPLIES
Kind of a big deal

Re: Meraki Logs into Office 365 Cloud App Security

According to the MS page you supplied it only supports Merakis URLs Log not the Event log that you are trying to import. You probably need to set it up as a Syslog connection and select URLs as the role.

 

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Over...

Meraki CMNO, Ruckus WISE, Sonicwall CSSA, Allied Telesis CASE & CAI
Here to help

Re: Meraki Logs into Office 365 Cloud App Security

Thank you, this worked for us! 

Kind of a big deal

Re: Meraki Logs into Office 365 Cloud App Security

Excellent glad to hear it.

Meraki CMNO, Ruckus WISE, Sonicwall CSSA, Allied Telesis CASE & CAI
Here to help

Re: Meraki Logs into Office 365 Cloud App Security

@BRYANQ1234Did you just send the syslogs to a receiver and then export, and manually import into CAS, or did you setup the log receiver VM/docker image to handle the syslog directly?

Here to help

Re: Meraki Logs into Office 365 Cloud App Security

@KarbonX1 So we setup an Linux VM on Azure and this is sending logs directly to CAS. Let me know if you have specific questions. I had to task one of our contractors to help with this but I can get further details if needed. 

 

thank you! 

New here

Re: Meraki Logs into Office 365 Cloud App Security

@BRYANQ1234 I was wondering if you could help out with a question i have. I have setup an VM Ubuntu with docker and linked it to the CAS but i am getting an error:

 

"Failed
Parsing failed for all logs.
  •  
     
    SyslogCatchAll-2018-04-23.txt
     
    Log format does not match the expected format for Meraki - URLs log."