Source: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/app/ms365_http?at=release/7.4
Microsoft 365 reports by HTTP
Overview
- This template is designed to monitor Microsoft 365 by HTTP. It works without any external scripts and uses script items.
 - The template uses endpoints in the Microsoft Graph API to gather daily metrics from weekly reports.
 - The template is meant to be used as a long-term trend monitoring tool.
 
Requirements
Zabbix version: 7.4 and higher.
Tested versions
This template has been tested on:
- Microsoft 365
 
Configuration
Zabbix should be configured according to the instructions in the Templates out of the box section.
Setup
- Register the app with your Microsoft Entra ID.
 - Configure Microsoft Graph application permissions on the app ID:
Reports.Read.All- required for app usage and activity metricsServiceHealth.Read.All- required for service discovery and service status metrics
 - Request administrator consent.
 - Configure the macros: 
{$MS365.APP.ID},{$MS365.PASSWORD},{$MS365.TENANT.ID}. 
Macros used
| Name | Description | Default | 
|---|---|---|
| {$MS365.APP.ID} | Microsoft application ID.  | 
|
| {$MS365.PASSWORD} | The secret for the registered Microsoft application.  | 
|
| {$MS365.TENANT.ID} | Microsoft tenant ID.  | 
|
| {$MS365.SERVICE.NAME.MATCHES} | This macro is used in the Microsoft cloud service discovery rule.  | 
.* | 
| {$MS365.SERVICE.NAME.NOT.MATCHES} | This macro is used in the Microsoft cloud service discovery rule.  | 
CHANGE_IF_NEEDED | 
| {$MS365.HTTP.PROXY} | Sets the HTTP proxy value. If this macro is empty, then no proxy is used.  | 
|
| {$MS365.API.TIMEOUT} | API response timeout.  | 
15s | 
Items
| Name | Description | Type | Key and additional info | 
|---|---|---|---|
| Services: Get services | The list of Microsoft cloud services and their health statuses subscribed by a tenant. More information: https://learn.microsoft.com/en-us/graph/api/servicehealth-get?view=graph-rest-beta&tabs=http  | 
Script | ms365.services.get | 
| Teams: Get reports | Accumulated data from the Microsoft Graph API "reports" endpoints. More information: https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-beta  | 
Script | ms365.teams.reports.get | 
| Outlook: Get reports | Accumulated data from the Microsoft Graph API "reports" endpoints. More information: https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-beta  | 
Script | ms365.outlook.reports.get | 
| OneDrive: Get reports | Accumulated data from the Microsoft Graph API "reports" endpoints. More information: https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-beta  | 
Script | ms365.onedrive.reports.get | 
| SharePoint: Get reports | Accumulated data from the Microsoft Graph API "reports" endpoints. More information: https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-beta  | 
Script | ms365.sharepoint.reports.get | 
| Apps: Get reports | Accumulated data from the Microsoft Graph API "reports" endpoints. More information: https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-beta  | 
Script | ms365.apps.reports.get | 
| Services: Get errors | A list of errors from API requests for Services metrics.  | 
Dependent item | ms365.services.errors Preprocessing 
  | 
| Teams: Get errors | A list of errors from API requests for Teams metrics.  | 
Dependent item | ms365.teams.errors Preprocessing 
  | 
| Outlook: Get errors | A list of errors from API requests for Outlook metrics.  | 
Dependent item | ms365.outlook.errors Preprocessing 
  | 
| OneDrive: Get errors | A list of errors from API requests for OneDrive metrics.  | 
Dependent item | ms365.onedrive.errors Preprocessing 
  | 
| SharePoint: Get errors | A list of errors from API requests for SharePoint metrics.  | 
Dependent item | ms365.sharepoint.errors Preprocessing 
  | 
| Apps: Get errors | A list of errors from API requests for Apps metrics.  | 
Dependent item | ms365.apps.errors Preprocessing 
  | 
| Teams: Device usage (users), web client | The number of unique licensed Microsoft Teams users recorded via the Teams web client over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.web Preprocessing 
  | 
| Teams: Device usage (users), Android | The number of unique licensed Microsoft Teams users recorded via the Teams mobile client for Android over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.android Preprocessing 
  | 
| Teams: Device usage (users), iOS | The number of unique licensed Microsoft Teams users recorded via the Teams mobile client for iOS over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.ios Preprocessing 
  | 
| Teams: Device usage (users), Mac | The number of unique licensed Microsoft Teams users recorded via the Teams desktop client on a macOS computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.mac Preprocessing 
  | 
| Teams: Device usage (users), Windows | The number of unique licensed Microsoft Teams users recorded via the Teams desktop client on a Windows-based computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.windows Preprocessing 
  | 
| Teams: Device usage (users), Chrome OS | The number of unique licensed Microsoft Teams users recorded via the Teams desktop client on a ChromeOS computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.chromeos Preprocessing 
  | 
| Teams: Device usage (users), Linux | The number of unique licensed Microsoft Teams users recorded via the Teams desktop client on a Linux computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.users.linux Preprocessing 
  | 
| Teams: Device usage (total), report date | The date of the report of device usage of both licensed and non-licensed users.  | 
Dependent item | ms365.teams.device.total.report_date Preprocessing 
  | 
| Teams: Device usage (total), web client | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams web client over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.web Preprocessing 
  | 
| Teams: Device usage (total), Android | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams mobile client for Android over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.android Preprocessing 
  | 
| Teams: Device usage (total), iOS | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams mobile client for iOS over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.ios Preprocessing 
  | 
| Teams: Device usage (total), Mac | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams desktop client on a macOS computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.mac Preprocessing 
  | 
| Teams: Device usage (total), Windows | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams desktop client on a Windows-based computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.windows Preprocessing 
  | 
| Teams: Device usage (total), Chrome OS | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams desktop client on a ChromeOS computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.chromeos Preprocessing 
  | 
| Teams: Device usage (total), Linux | The number of unique Microsoft Teams users (licensed or non-licensed) recorded via the Teams desktop client on a Linux computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.total.linux Preprocessing 
  | 
| Teams: Device usage (guests), web client | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams web client over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.web Preprocessing 
  | 
| Teams: Device usage (guests), Android | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams mobile client for Android over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.android Preprocessing 
  | 
| Teams: Device usage (guests), iOS | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams mobile client for iOS over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.ios Preprocessing 
  | 
| Teams: Device usage (guests), Mac | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams desktop client on a macOS computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.mac Preprocessing 
  | 
| Teams: Device usage (guests), Windows | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams desktop client on a Windows-based computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.windows Preprocessing 
  | 
| Teams: Device usage (guests), Chrome OS | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams desktop client on a ChromeOS computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.chromeos Preprocessing 
  | 
| Teams: Device usage (guests), Linux | The number of unique non-licensed Microsoft Teams users (guests) recorded via the Teams desktop client on a Linux computer over the week before the report refresh date.  | 
Dependent item | ms365.teams.device.guests.linux Preprocessing 
  | 
| Teams: User activity, report date | The date of the report of the number of activities by all users.  | 
Dependent item | ms365.teams.activity.user.report_date Preprocessing 
  | 
| Teams: User activity, team chat messages | The number of unique messages that were posted in team chats by licensed or non-licensed Microsoft Teams users during the week before the report refresh date. This includes original posts and replies.  | 
Dependent item | ms365.teams.activity.user.messages.in_team Preprocessing 
  | 
| Teams: User activity, private chat messages | The number of unique messages that were posted in private chats by licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.messages.private Preprocessing 
  | 
| Teams: User activity, calls | The number of 1:1 calls licensed or non-licensed Microsoft Teams users participated in during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.calls Preprocessing 
  | 
| Teams: User activity, meetings | The sum of the scheduled one-time and recurring, ad-hoc, and unclassified meetings licensed or non-licensed Microsoft Teams users participated in during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.meetings.total Preprocessing 
  | 
| Teams: User activity, organized meetings | The sum of the scheduled one-time and recurring, ad-hoc, and unclassified meetings organized by licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.meetings.organized Preprocessing 
  | 
| Teams: User activity, attended meetings | The sum of the scheduled one-time and recurring, ad-hoc, and unclassified meetings attended by licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.meetings.attended Preprocessing 
  | 
| Teams: User activity, audio duration | The sum of the audio duration of licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.duration.audio Preprocessing 
  | 
| Teams: User activity, video duration | The sum of the video duration of licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.duration.video Preprocessing 
  | 
| Teams: User activity, screen share duration | The sum of the screen share duration of licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.duration.screen_share Preprocessing 
  | 
| Teams: User activity, post messages | The number of post messages in all channels made by licensed or non-licensed Microsoft Teams users during the week before the report refresh date. A post is the original message in a teams chat.  | 
Dependent item | ms365.teams.activity.user.messages.posts Preprocessing 
  | 
| Teams: User activity, reply messages | The number of reply messages in all channels made by licensed or non-licensed Microsoft Teams users during the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.user.messages.replies Preprocessing 
  | 
| Teams: User count (users), team chat messages | The number of licensed Microsoft Teams users who posted or replied in team chats during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.users.messages.in_team Preprocessing 
  | 
| Teams: User count (users), private chat messages | The number of licensed Microsoft Teams users who posted or replied in private chats during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.users.messages.private Preprocessing 
  | 
| Teams: User count (users), calls | The number of licensed Microsoft Teams users who participated in calls during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.users.calls Preprocessing 
  | 
| Teams: User count (users), meetings | The number of licensed Microsoft Teams users who participated in meetings during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.users.meetings Preprocessing 
  | 
| Teams: User count (total), report date | The date of the report of the number of licensed or non-licensed Microsoft Teams users in activity.  | 
Dependent item | ms365.teams.user_count.total.report_date Preprocessing 
  | 
| Teams: User count (total), team chat messages | The number of licensed or non-licensed Microsoft Teams users who posted or replied in team chats during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.total.messages.in_team Preprocessing 
  | 
| Teams: User count (total), private chat messages | The number of licensed or non-licensed Microsoft Teams users who posted or replied in private chats during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.total.messages.private Preprocessing 
  | 
| Teams: User count (total), calls | The number of licensed or non-licensed Microsoft Teams users who participated in calls during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.total.calls Preprocessing 
  | 
| Teams: User count (total), meetings | The number of licensed or non-licensed Microsoft Teams users who participated in meetings during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.total.meetings Preprocessing 
  | 
| Teams: User count (guests), team chat messages | The number of non-licensed Microsoft Teams users (guests) who posted or replied in team chats during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.guests.messages.in_team Preprocessing 
  | 
| Teams: User count (guests), private chat messages | The number of non-licensed Microsoft Teams users (guests) who posted or replied in private chats during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.guests.messages.private Preprocessing 
  | 
| Teams: User count (guests), calls | The number of non-licensed Microsoft Teams users (guests) who participated in calls during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.guests.calls Preprocessing 
  | 
| Teams: User count (guests), meetings | The number of non-licensed Microsoft Teams users (guests) who participated in meetings during the week before the report refresh date.  | 
Dependent item | ms365.teams.user_count.guests.meetings Preprocessing 
  | 
| Teams: Team activity, report date | The date of the report of the number of team activities.  | 
Dependent item | ms365.teams.activity.team.report_date Preprocessing 
  | 
| Teams: Team activity, active shared channels | The number of active shared channels across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.active_shared_channels Preprocessing 
  | 
| Teams: Team activity, active external users | The number of active external users across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.active_external_users Preprocessing 
  | 
| Teams: Team activity, active users | The number of active users across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.active_users Preprocessing 
  | 
| Teams: Team activity, active channels | The number of active channels across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.active_channels Preprocessing 
  | 
| Teams: Team activity, channel messages | The number of channel messages across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.channel_messages Preprocessing 
  | 
| Teams: Team activity, guests | The number of guests across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.guests Preprocessing 
  | 
| Teams: Team activity, reactions | The number of reactions across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.reactions Preprocessing 
  | 
| Teams: Team activity, meetings organized | The number of organized meetings across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.meetings_organized Preprocessing 
  | 
| Teams: Team activity, post messages | The number of post messages across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.messages.posts Preprocessing 
  | 
| Teams: Team activity, reply messages | The number of reply messages across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.messages.replies Preprocessing 
  | 
| Teams: Team activity, urgent messages | The number of urgent messages across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.urgent_messages Preprocessing 
  | 
| Teams: Team activity, mentions | The number of mentions across Microsoft Teams over the week before the report refresh date.  | 
Dependent item | ms365.teams.activity.team.mentions Preprocessing 
  | 
| Outlook: Activity, report date | The date of the Outlook activity count report.  | 
Dependent item | ms365.outlook.activity.report_date Preprocessing 
  | 
| Outlook: Activity, emails sent | The number of times an "Email sent" action was recorded.  | 
Dependent item | ms365.outlook.activity.sent Preprocessing 
  | 
| Outlook: Activity, emails received | The number of times an "Email received" action was recorded.  | 
Dependent item | ms365.outlook.activity.received Preprocessing 
  | 
| Outlook: Activity, emails read | The number of times an "Email read" action was recorded.  | 
Dependent item | ms365.outlook.activity.read Preprocessing 
  | 
| Outlook: Activity, meetings created | The number of times a "Meeting request sent" action was recorded.  | 
Dependent item | ms365.outlook.activity.meetings_created Preprocessing 
  | 
| Outlook: Activity, meetings interacted | The number of times a meeting request accept, tentative, decline, or cancel action was recorded.  | 
Dependent item | ms365.outlook.activity.meetings_interacted Preprocessing 
  | 
| Outlook: User count, report date | The date of the Outlook activity user count report.  | 
Dependent item | ms365.outlook.user_count.report_date Preprocessing 
  | 
| Outlook: User count, emails sent | The number of users an "Email sent" action was recorded for.  | 
Dependent item | ms365.outlook.user_count.sent Preprocessing 
  | 
| Outlook: User count, emails received | The number of users an "Email received" action was recorded for.  | 
Dependent item | ms365.outlook.user_count.received Preprocessing 
  | 
| Outlook: User count, emails read | The number of users an "Email read" action was recorded for.  | 
Dependent item | ms365.outlook.user_count.read Preprocessing 
  | 
| Outlook: User count, meetings created | The number of users a "Meeting request sent" action was recorded for.  | 
Dependent item | ms365.outlook.user_count.meetings_created Preprocessing 
  | 
| Outlook: User count, meetings interacted | The number of users a meeting request accept, tentative, decline, or cancel action was recorded for.  | 
Dependent item | ms365.outlook.user_count.meetings_interacted Preprocessing 
  | 
| Outlook: User count, app usage, report date | The date of the report of the unique user count per app.  | 
Dependent item | ms365.outlook.user_count.report_date.app Preprocessing 
  | 
| Outlook: User count, mail for Mac | The number of unique users of mail for Mac.  | 
Dependent item | ms365.outlook.user_count.mail_for_mac Preprocessing 
  | 
| Outlook: User count, Outlook for Mac | The number of unique users of Outlook for Mac.  | 
Dependent item | ms365.outlook.user_count.mac Preprocessing 
  | 
| Outlook: User count, Outlook for Windows | The number of unique users of Outlook for Windows.  | 
Dependent item | ms365.outlook.user_count.windows Preprocessing 
  | 
| Outlook: User count, Outlook for mobile | The number of unique users of Outlook for mobile.  | 
Dependent item | ms365.outlook.user_count.mobile Preprocessing 
  | 
| Outlook: User count, Outlook for web | The number of unique users of Outlook for web.  | 
Dependent item | ms365.outlook.user_count.web Preprocessing 
  | 
| Outlook: User count, POP3 applications | The number of unique users of other POP3 applications.  | 
Dependent item | ms365.outlook.user_count.pop3app Preprocessing 
  | 
| Outlook: User count, IMAP4 applications | The number of unique users of other IMAP4 applications.  | 
Dependent item | ms365.outlook.user_count.imap4app Preprocessing 
  | 
| Outlook: User count, SMTP applications | The number of unique users of other SMTP applications.  | 
Dependent item | ms365.outlook.user_count.smtpapp Preprocessing 
  | 
| Outlook: Mailbox, report date | The date of the report of the unique user count per app.  | 
Dependent item | ms365.outlook.mailbox.report_date Preprocessing 
  | 
| Outlook: Mailbox, total | The total number of user mailboxes in your organization.  | 
Dependent item | ms365.outlook.mailbox.total Preprocessing 
  | 
| Outlook: Mailbox, active | The number of active user mailboxes in your organization. A mailbox is considered active if the user has sent or read any emails.  | 
Dependent item | ms365.outlook.mailbox.active Preprocessing 
  | 
| Outlook: Mailbox, active in % | Percentage of active user mailboxes in your organization. A mailbox is considered active if the user has sent or read any emails.  | 
Dependent item | ms365.outlook.mailbox.active.percentage Preprocessing 
  | 
| Outlook: Mailbox, storage, report date | The date of the mailbox storage report.  | 
Dependent item | ms365.outlook.storage.report_date Preprocessing 
  | 
| Outlook: Mailbox, storage used | The amount of mailbox storage used in your organization.  | 
Dependent item | ms365.outlook.storage.used Preprocessing 
  | 
| OneDrive: Users, report date | The date of the report of the number of active OneDrive users.  | 
Dependent item | ms365.onedrive.users.report_date Preprocessing 
  | 
| OneDrive: Users, viewed or edited | The number of users who have viewed or edited OneDrive files.  | 
Dependent item | ms365.onedrive.users.viewed_or_edited Preprocessing 
  | 
| OneDrive: Users, synced | The number of users who have synced OneDrive files.  | 
Dependent item | ms365.onedrive.users.synced Preprocessing 
  | 
| OneDrive: Users, shared internally | The number of users who have shared OneDrive files internally.  | 
Dependent item | ms365.onedrive.users.shared_internally Preprocessing 
  | 
| OneDrive: Users, shared externally | The number of users who have shared OneDrive files externally.  | 
Dependent item | ms365.onedrive.users.shared_externally Preprocessing 
  | 
| OneDrive: Files, activity, report date | The date of report of the number of active OneDrive files.  | 
Dependent item | ms365.onedrive.files.report_date Preprocessing 
  | 
| OneDrive: Files, viewed or edited | The number of viewed or edited OneDrive files.  | 
Dependent item | ms365.onedrive.files.viewed_or_edited Preprocessing 
  | 
| OneDrive: Files, synced | The number of synced OneDrive files.  | 
Dependent item | ms365.onedrive.files.synced Preprocessing 
  | 
| OneDrive: Files, shared internally | The number of internally shared OneDrive files.  | 
Dependent item | ms365.onedrive.files.shared_internally Preprocessing 
  | 
| OneDrive: Files, shared externally | The number of externally shared OneDrive files.  | 
Dependent item | ms365.onedrive.files.shared_externally Preprocessing 
  | 
| OneDrive: Business sites, report date | The date of the number of OneDrive for Business sites report.  | 
Dependent item | ms365.onedrive.sites.report_date Preprocessing 
  | 
| OneDrive: Business sites, total | The number of OneDrive for Business sites.  | 
Dependent item | ms365.onedrive.sites.total Preprocessing 
  | 
| OneDrive: Business sites, active | The number of active OneDrive for Business sites. Any site on which users have viewed, modified, uploaded, downloaded, shared, or synced files is considered an active site.  | 
Dependent item | ms365.onedrive.sites.active Preprocessing 
  | 
| OneDrive: File count, report date | The date of the OneDrive file count report.  | 
Dependent item | ms365.onedrive.file_count.report_date Preprocessing 
  | 
| OneDrive: File count, total | The total number of files across all sites.  | 
Dependent item | ms365.onedrive.file_count.total Preprocessing 
  | 
| OneDrive: File count, active | The total number of active files across all sites. A file is considered active if it has been saved, synced, modified, or shared.  | 
Dependent item | ms365.onedrive.file_count.active Preprocessing 
  | 
| OneDrive: Storage, report date | The date of the report of the amount of storage used in OneDrive for Business.  | 
Dependent item | ms365.onedrive.storage.report_date Preprocessing 
  | 
| OneDrive: Storage, total | The total amount of storage used in OneDrive for Business.  | 
Dependent item | ms365.onedrive.storage.total Preprocessing 
  | 
| SharePoint: Files, activity, report date | The date of the report of the number of active SharePoint files.  | 
Dependent item | ms365.sharepoint.files.report_date Preprocessing 
  | 
| SharePoint: Files, viewed or edited | The number of viewed or edited SharePoint files.  | 
Dependent item | ms365.sharepoint.files.viewed_or_edited Preprocessing 
  | 
| SharePoint: Files, synced | The number of files synced to a SharePoint site.  | 
Dependent item | ms365.sharepoint.files.synced Preprocessing 
  | 
| SharePoint: Files, shared internally | The number of internally shared SharePoint files.  | 
Dependent item | ms365.sharepoint.files.shared_internally Preprocessing 
  | 
| SharePoint: Files, shared externally | The number of externally shared SharePoint files.  | 
Dependent item | ms365.sharepoint.files.shared_externally Preprocessing 
  | 
| SharePoint: Users, report date | The date of the report of the number of active SharePoint users.  | 
Dependent item | ms365.sharepoint.user_count.report_date Preprocessing 
  | 
| SharePoint: Users, viewed or edited | The number of users who have viewed or edited SharePoint files.  | 
Dependent item | ms365.sharepoint.user_count.viewed_or_edited Preprocessing 
  | 
| SharePoint: Users, synced | The number of users who have synced SharePoint files.  | 
Dependent item | ms365.sharepoint.user_count.synced Preprocessing 
  | 
| SharePoint: Users, shared internally | The number of users who have shared SharePoint files internally.  | 
Dependent item | ms365.sharepoint.user_count.shared_internally Preprocessing 
  | 
| SharePoint: Users, shared externally | The number of users who have shared SharePoint files externally.  | 
Dependent item | ms365.sharepoint.user_count.shared_externally Preprocessing 
  | 
| SharePoint: Users, pages visited | The number of users who have visited unique pages.  | 
Dependent item | ms365.sharepoint.user_count.visited_page Preprocessing 
  | 
| SharePoint: Pages, visited, report date | The date of the report of the number of pages visited.  | 
Dependent item | ms365.sharepoint.pages_visited.report_date Preprocessing 
  | 
| SharePoint: Pages, visited | The number of unique pages visited by users.  | 
Dependent item | ms365.sharepoint.pages_visited.count Preprocessing 
  | 
| SharePoint: File count, report date | The date of the SharePoint file count report.  | 
Dependent item | ms365.sharepoint.file_count.report_date Preprocessing 
  | 
| SharePoint: File count, total | The total number of files across all sites.  | 
Dependent item | ms365.sharepoint.file_count.total Preprocessing 
  | 
| SharePoint: File count, active | The total number of active files across all sites. A file is considered active if it has been saved, synced, modified, or shared.  | 
Dependent item | ms365.sharepoint.file_count.active Preprocessing 
  | 
| SharePoint: Sites, report date | The date of the report of the number of SharePoint sites.  | 
Dependent item | ms365.sharepoint.site.report_date Preprocessing 
  | 
| SharePoint: Sites, total | The number of SharePoint sites.  | 
Dependent item | ms365.sharepoint.sites.total Preprocessing 
  | 
| SharePoint: Sites, active | The number of active SharePoint sites.  | 
Dependent item | ms365.sharepoint.sites.active Preprocessing 
  | 
| SharePoint: Storage, report date | The date of the report of the amount of storage used in SharePoint.  | 
Dependent item | ms365.sharepoint.storage.report_date Preprocessing 
  | 
| SharePoint: Storage, total | The total amount of storage used in SharePoint.  | 
Dependent item | ms365.sharepoint.storage.total Preprocessing 
  | 
| SharePoint: Pages, viewed, report date | The date of the report of the number of pages viewed.  | 
Dependent item | ms365.sharepoint.pages_viewed.report_date Preprocessing 
  | 
| SharePoint: Pages, view count | The number of pages viewed across all sites.  | 
Dependent item | ms365.sharepoint.pages_viewed.count Preprocessing 
  | 
| Apps: Users, report date | The date of the active user count report.  | 
Dependent item | ms365.apps.users.report_date Preprocessing 
  | 
| Apps: Users, Office 365 | The number of daily Office 365 users.  | 
Dependent item | ms365.apps.users.office365 Preprocessing 
  | 
| Apps: Users, Exchange | The number of daily Exchange users.  | 
Dependent item | ms365.apps.users.exchange Preprocessing 
  | 
| Apps: Users, OneDrive | The number of daily OneDrive users.  | 
Dependent item | ms365.apps.users.onedrive Preprocessing 
  | 
| Apps: Users, SharePoint | The number of daily SharePoint users.  | 
Dependent item | ms365.apps.users.sharepoint Preprocessing 
  | 
| Apps: Users, Skype for Business | The number of daily Skype for Business users.  | 
Dependent item | ms365.apps.users.skype Preprocessing 
  | 
| Apps: Users, Yammer | The number of daily Yammer users.  | 
Dependent item | ms365.apps.users.yammer Preprocessing 
  | 
| Apps: Users, Teams | The number of daily Teams users.  | 
Dependent item | ms365.apps.users.teams Preprocessing 
  | 
| Apps: Activity, report date | The date of the report of the user count by activity.  | 
Dependent item | ms365.apps.activity.report_date Preprocessing 
  | 
| Apps: Activity, Exchange active users | The number of active Exchange users during the week before the report date.  | 
Dependent item | ms365.apps.activity.exchange.users.active Preprocessing 
  | 
| Apps: Activity, Exchange inactive users | The number of inactive Exchange users during the week before the report date.  | 
Dependent item | ms365.apps.activity.exchange.users.inactive Preprocessing 
  | 
| Apps: Activity, OneDrive active users | The number of active OneDrive users during the week before the report date.  | 
Dependent item | ms365.apps.activity.onedrive.users.active Preprocessing 
  | 
| Apps: Activity, OneDrive inactive users | The number of inactive OneDrive users during the week before the report date.  | 
Dependent item | ms365.apps.activity.onedrive.users.inactive Preprocessing 
  | 
| Apps: Activity, SharePoint active users | The number of active SharePoint users during the week before the report date.  | 
Dependent item | ms365.apps.activity.sharepoint.users.active Preprocessing 
  | 
| Apps: Activity, SharePoint inactive users | The number of inactive SharePoint users during the week before the report date.  | 
Dependent item | ms365.apps.activity.sharepoint.users.inactive Preprocessing 
  | 
| Apps: Activity, Skype for Business active users | The number of active Skype for Business users during the week before the report date.  | 
Dependent item | ms365.apps.activity.skypeforbusiness.users.active Preprocessing 
  | 
| Apps: Activity, Skype for Business inactive users | The number of inactive Skype for Business users during the week before the report date.  | 
Dependent item | ms365.apps.activity.skypeforbusiness.users.inactive Preprocessing 
  | 
| Apps: Activity, Yammer active users | The number of active Yammer users during the week before the report date.  | 
Dependent item | ms365.apps.activity.yammer.users.active Preprocessing 
  | 
| Apps: Activity, Yammer inactive users | The number of inactive Yammer users during the week before the report date.  | 
Dependent item | ms365.apps.activity.yammer.users.inactive Preprocessing 
  | 
| Apps: Activity, Teams active users | The number of active Teams users during the week before the report date.  | 
Dependent item | ms365.apps.activity.teams.users.active Preprocessing 
  | 
| Apps: Activity, Teams inactive users | The number of inactive Teams users during the week before the report date.  | 
Dependent item | ms365.apps.activity.teams.users.inactive Preprocessing 
  | 
| Apps: Activity, Office 365 active users | The number of active Office 365 users during the week before the report date.  | 
Dependent item | ms365.apps.activity.office365.users.active Preprocessing 
  | 
| Apps: Activity, Office 365 inactive users | The number of inactive Office 365 users during the week before the report date.  | 
Dependent item | ms365.apps.activity.office365.users.inactive Preprocessing 
  | 
| Apps: Office, user count report date | The date of the report of the number of active users for each app.  | 
Dependent item | ms365.apps.office.user_count.report_date Preprocessing 
  | 
| Apps: Office, Outlook user count | The number of active Outlook users.  | 
Dependent item | ms365.apps.office.user_count.outlook Preprocessing 
  | 
| Apps: Office, Word user count | The number of active Word users.  | 
Dependent item | ms365.apps.office.user_count.word Preprocessing 
  | 
| Apps: Office, Excel user count | The number of active Excel users.  | 
Dependent item | ms365.apps.office.user_count.excel Preprocessing 
  | 
| Apps: Office, PowerPoint user count | The number of active PowerPoint users.  | 
Dependent item | ms365.apps.office.user_count.powerpoint Preprocessing 
  | 
| Apps: Office, OneNote user count | The number of active OneNote users.  | 
Dependent item | ms365.apps.office.user_count.onenote Preprocessing 
  | 
| Apps: Office, Teams user count | The number of active Teams users.  | 
Dependent item | ms365.apps.office.user_count.teams Preprocessing 
  | 
| Apps: Platform, user count report date | The date of the report of the number of active users per platform.  | 
Dependent item | ms365.apps.platform.user_count.report_date Preprocessing 
  | 
| Apps: Platform, Windows user count | The number of active users on the Windows platform.  | 
Dependent item | ms365.apps.platform.user_count.windows Preprocessing 
  | 
| Apps: Platform, Mac user count | The number of active users on the Mac platform.  | 
Dependent item | ms365.apps.platform.user_count.mac Preprocessing 
  | 
| Apps: Platform, mobile user count | The number of active users on the mobile platform.  | 
Dependent item | ms365.apps.platform.user_count.mobile Preprocessing 
  | 
| Apps: Platform, web user count | The number of active users on the web platform.  | 
Dependent item | ms365.apps.platform.user_count.web Preprocessing 
  | 
Triggers
| Name | Description | Expression | Severity | Dependencies and additional info | 
|---|---|---|---|---|
| Microsoft 365: Services: There are errors in requests to API | Zabbix has received errors in response to API requests.  | 
length(last(/Microsoft 365 reports by HTTP/ms365.services.errors))>0 | 
Average | |
| Microsoft 365: Teams: There are errors in requests to API | Zabbix has received errors in response to API requests.  | 
length(last(/Microsoft 365 reports by HTTP/ms365.teams.errors))>0 | 
Average | |
| Microsoft 365: Outlook: There are errors in requests to API | Zabbix has received errors in response to API requests.  | 
length(last(/Microsoft 365 reports by HTTP/ms365.outlook.errors))>0 | 
Average | |
| Microsoft 365: OneDrive: There are errors in requests to API | Zabbix has received errors in response to API requests.  | 
length(last(/Microsoft 365 reports by HTTP/ms365.onedrive.errors))>0 | 
Average | |
| Microsoft 365: SharePoint: There are errors in requests to API | Zabbix has received errors in response to API requests.  | 
length(last(/Microsoft 365 reports by HTTP/ms365.sharepoint.errors))>0 | 
Average | |
| Microsoft 365: Apps: There are errors in requests to API | Zabbix has received errors in response to API requests.  | 
length(last(/Microsoft 365 reports by HTTP/ms365.apps.errors))>0 | 
Average | 
LLD rule Microsoft cloud service discovery
| Name | Description | Type | Key and additional info | 
|---|---|---|---|
| Microsoft cloud service discovery | The list of Microsoft cloud services subscribed by a tenant.  | 
Dependent item | ms365.service.discovery Preprocessing 
  | 
Item prototypes for Microsoft cloud service discovery
| Name | Description | Type | Key and additional info | 
|---|---|---|---|
| Services: {#NAME} health status | Overall service health status of  More information about health status values can be found here: https://learn.microsoft.com/en-us/graph/api/resources/servicehealthissue?view=graph-rest-beta#servicehealthstatus-values  | 
Dependent item | ms365.service.health[{#NAME}] Preprocessing 
  | 
Trigger prototypes for Microsoft cloud service discovery
| Name | Description | Expression | Severity | Dependencies and additional info | 
|---|---|---|---|---|
| Microsoft 365: Services: {#NAME} is degraded. | The service has the "Degraded" health status.  | 
last(/Microsoft 365 reports by HTTP/ms365.service.health[{#NAME}])=6 | 
Warning | Manual close: Yes | 
| Microsoft 365: Services: {#NAME} is interrupted. | The service has the "Interruption" health status.  | 
last(/Microsoft 365 reports by HTTP/ms365.service.health[{#NAME}])=7 | 
Average | Manual close: Yes | 
Feedback
Please report any issues with the template at https://support.zabbix.com
You can also provide feedback, discuss the template, or ask for help at ZABBIX forums