Microsoft Graph API receiving 206 status code

[mani maj]

  Hello Wazuh community,

I’m currently working on integrating Wazuh (version:4.14) with Microsoft Graph API to pull in secureScore and other security alerts. However, I’m encountering an issue where the API returns HTTP status code 206 Partial Content instead of a standard 200 response. 

• Is the 206 response expected/normal behaviour in this alerts scenario (Graph v1.0, security alerts endpoint) or is it indicative of something mis-configured?

• Are there recommended workarounds or configuration changes in the Wazuh ms-graph module (or Graph permissions) so that the API returns standard 200 responses instead of 206?  
•  Could this be tied to specific Graph API filter/query parameters, paging behaviour, or license type?  

[Md. Nazmur Sakib]

Hi Mani,

This is not an expected behavior. This error seems to be related with an incomplete parsing from the MS Graph configuration side. Could you confirm you are configuring in the API permission section, the /security/alerts_v2?

Verify that you have configured the alerts relationship.

Also, confirm your Azure app registration has the necessary permissions.
Registering your app

Let me know if this solves the issue.

[mani maj]

Hello Nazmur,

Sorry for late reply, I thought I posted a reply to this turn out there is none.

So this is my Permission Configuration and my Ossec Configuration.

  I was able to retrieve secureScore data using Postman; however, no data appears to be parsed by Wazuh.