-
Title
SharePoint Online Events are not being audited by change auditor -
Description
SharePoint Online Events are not being audited by change auditor
InvokeAsyncWebRequest exception: url https://manage.office.com/api/v1.0/24..., ex System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Authentication failed because the remote party has closed the transport stream. -
Cause
This error seems related to network firewall issue.
-
Resolution
InvokeAsyncWebRequest exception: url https://manage.office.com/api/v1.0/24eb4179-fa1a-4915-99d9-c93afdf1ebe3/activity/feed/subscriptions/list?PublisherIdentifier=91c369b5-1c9e-439c-989c-1867ec606603, ex System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
This error seems related to network firewall issue.
Fix the firewall permissions
As mentioned in product document, please check if agent specified in template to audit events from Azure, has access to following URLs:* https://login.microsoftonline.com
* https://outlook.office365.com/powershell-liveid/
To cross verify this, go to agent server - Open Explorer - in browser, type following URL:
Press enter and check if you can access this URL.