SharePoint & M365 Content Observability | Reveille

Content Observability for Microsoft 365 & SharePoint

From the SharePoint site to the last file in OneDrive — observed, assured, self-healed.

SharePoint is the system of record for the content your business runs on — and most of Microsoft 365 quietly lands on it: a file dropped in a Teams channel, a OneDrive sync, a SharePoint Embedded container. When a site slows, the search service stops, or a backup policy silently changes, work stalls and audits get harder. Reveille pioneered Content Observability to catch that: one agentless view across SharePoint, SharePoint Online, SharePoint Embedded, OneDrive, Azure Blob, and M365 Backup — plus real user analytics across Teams, Entra ID, and Copilot, with self-healing built in.

Request a Demo Read the Technical Overview

95+

M365-specific tests

90+

M365 dashboard metrics

10+

Microsoft services monitored

On-prem + cloud

SharePoint & Microsoft 365

Agentless — pre-configured for SharePoint, SharePoint Online, SharePoint Embedded, OneDrive, Azure Blob, and Microsoft 365 Backup.

The Blind Spot

Enterprises can monitor the tenant. What they can't see is the content layer.

Microsoft 365 is a broad estate — SharePoint Server and SharePoint Online, SharePoint Embedded, OneDrive, Azure Blob, Teams, and M365 Backup — and most of the content business runs on quietly funnels into SharePoint. The M365 admin center and Azure Monitor see the tenant, the service health roll-up, and the servers. What they can't see is whether a document actually checked in, whether the search service is answering, or who retrieved which file from which site.

That layer is where silent failures live. A SharePoint site slows. The search service stops. A Timer Job hangs. An Embedded container fills. A OneDrive sync fails. An M365 Backup protection is quietly removed. A Copilot or downstream agent consuming SharePoint content fails — not because the model is wrong, but because the content feeding it broke.

What infrastructure tools see

The tenant is "healthy," the servers ping, the SQL box is up. Every host check is green — and a SharePoint document check-in or a OneDrive upload can still be failing.

What Reveille sees

A SharePoint site slowing, the search service stopped, a Timer Job hung, an Embedded container filling, a OneDrive sync failing, an M365 Backup protection removed, and abnormal content access — the M365-level signals that precede a stalled workflow or a failed retrieval.

Why it matters

Tenant availability is not workflow availability. Reveille measures the difference — at the SharePoint site, OneDrive, Embedded, backup, and user-activity level — and self-heals before it reaches a ticket.

What Reveille Watches

SharePoint, in depth. Microsoft 365, end to end.

95+ prebuilt, application-aware tests cover the Microsoft services that actually drive M365 service levels — not generic tenant pings. SharePoint sits at the center, with over 95 SharePoint-specific tests, while the same monitor reaches across SharePoint Online, SharePoint Embedded, OneDrive, Azure Blob, and M365 Backup — and out to Teams, Copilot, and Entra ID for user activity, with native Azure, Power BI, and Power Automate alongside. The SharePoint Wizard and M365 monitor templates spin up a working monitor in minutes. Zero relearning.

01 / SharePoint Platform12+ tests

Ready to process work

Web front-end, database, and application server services and free disk space; SharePoint Timer Job status; current health warnings and errors; the search service; and Windows Event Logs — plus connectivity pings to every SharePoint server role.

02 / SharePoint Database5 tests

Content databases answering

Content database file size, database sizes, database backups, the database responding to query, and SQL Server services — the data tier behind every site collection.

03 / Site Performance12+ tests

The document round-trip, proven

Site and Central Admin availability, then create, check-out, retrieve, check-in, delete, and search a document on a real SharePoint site — plus server performance counters for queue length, idle time, memory, processor, and requests queued or rejected.

04 / Site & Farm Metrics11+ tests

Sites and storage in check

Subsite, list, document library, file, file-version, and folder counts; site collection storage size and quota; group and user counts — rolled up across a site and all sub sites for farm-wide health analysis.

05 / SharePoint Embedded23 tests

Containers, folders, files

Get access token; create, activate, get, list, and query file-storage containers; add and update folders; upload, update, get, preview, download, check-out, check-in, and version files; and full cleanup — the SharePoint Embedded round-trip, end to end.

06 / OneDrive & Azure Blob13 tests

Cloud storage performing

OneDrive create folder, upload, download, list versions, delete, and search; Azure Blob container and blob checks, put blob, get blob, get blob properties, and delete — the cloud storage M365 quietly depends on.

07 / M365 Backup8 tests

Backup actually protecting

Backup service status, protection policy status, Exchange Online mailbox / OneDrive / SharePoint site protections, and restore activity and submitter — so a silently removed policy or an unapproved restore never goes unnoticed.

08 / CMIS Performance9 tests

The CMIS interface delivering

Check the SharePoint site over CMIS, create folder and document, check-out, retrieve information and document, check-in, delete folder and document, and query — the CMIS interface integrations rely on.

09 / Teams, Copilot & Entra IDuser activity

Collaboration and AI, watched

Microsoft Teams content lands in SharePoint Online — Reveille observes that activity, plus Entra ID group and user changes and Copilot interactions. Because Copilot grounds its answers on SharePoint and M365 content, a broken content layer quietly degrades Copilot; Reveille catches it at the source.

10 / Metrics & KPIs90+ metrics

The numbers, baselined

90+ M365 dashboard metrics across SharePoint operating health, database, site activity, OneDrive and Azure Blob, and SharePoint Embedded performance — with machine-learning dynamic thresholds that learn normal patterns and cut alert noise.

Across the Microsoft 365 estate

One agentless monitor, the whole Microsoft content estate — content and storage, collaboration and AI, identity and backup, and the native Azure and Power Platform services around them.

Content & storage

SharePoint Server SharePoint Online SharePoint Embedded OneDrive Azure Blob

Collaboration & AI

Microsoft Teams Copilot

Identity & backup

Entra ID M365 Backup

Azure-native & automation

Azure VM Azure SQL Azure Monitor Azure Sentinel Power BI Power Automate

See the full monitoring list

From Signal to Resolution

Alert. Drill in. Resolve.

Detection is half the job. Reveille closes the loop — from a single threshold breach to a root-cause view in the affected site, library, search service, or backup policy.

Anomaly detected

AI/ML dynamic thresholds learn normal SharePoint and M365 patterns and cut alert noise from workload variation.

Context-packaged alert

Notifications arrive with the metrics, affected components, and troubleshooting data attached.

Self-healing remediation

When thresholds breach, Reveille can automatically trigger recovery actions — resolving issues before the ticket queue fills.

KPI Dashboards

Microsoft 365 operational KPIs, out of the box.

Reveille's M365 dashboard metric engine turns SharePoint, OneDrive, Azure Blob, and SharePoint Embedded signals into measurable key performance indicators — tracked, charted, and reported through M365-aware dashboards. Over 90 metrics ship out of the box, configured through a wizard, and reports can be saved straight to a OneDrive folder or scheduled for email.

Track SharePoint operating performance, database health, capacity, and site activity and use
Watch OneDrive, Azure Blob, and SharePoint Embedded performance and operating exceptions
Track M365 status and M365 Backup operating exceptions in real time
Dynamic threshold detection powered by machine learning, with results published to Azure Monitor and Power BI

User Analytics

Who accessed what — and when it looks wrong.

Reveille uses patented collectors to observe the actual user experience and activity across SharePoint, SharePoint Online, SharePoint Embedded, Teams, Entra ID, Copilot, and OneDrive — out-of-band, never capturing passwords. It surfaces user adoption and response times, and flags suspicious or abnormal access that can signal an insider threat or a content access breach.

See who accessed which document, from which site, and when — for audit, compliance, and capacity reviews
Detect abnormal access: same user from different IPs, different users from one IP, unusual document-access volume, malware-detected and access-denied events
Cover Teams content (which defaults to SharePoint Online storage), Entra ID group and user changes, and Copilot interactions
Reduce mean time to threat detection with endpoint integration such as Microsoft Defender for Endpoint, and feed Microsoft Sentinel and Azure Log

Works with your existing stack.

Extend IT operations management (ITOM), security, and AI investments — no rip and replace.

Microsoft Teams Microsoft Sentinel Azure Monitor / Azure Log Azure Communication Services Power BI Power Automate Microsoft Defender for Endpoint Splunk ServiceNow REST API / MCP

Built For

One platform. Three teams.

Reveille translates Microsoft 365 signals into the language each team needs — IT operations, business owners, and managed service providers.

IT Ops & Platform

Stop flying blind on SharePoint and M365 health.

95+ agentless M365 tests and 90+ dashboard metrics across SharePoint, SharePoint Online, Embedded, OneDrive, Azure Blob, and M365 Backup — AI/ML dynamic thresholds and self-healing before the ticket queue fills, in one pane of glass that completes Azure Monitor's view.

OutcomeService Level Assurance, with the data to prove it.

Line of Business

Service Level Assurance on the content business runs on.

Reveille catches failures before a slow site or a failed backup becomes a missed deadline, a failed audit, or a broken customer promise.

OutcomeSites, files, and records stay retrievable and on time.

Services & Support

Manage every customer M365 tenant through one pane.

Reduce support burden, prove value, and expand managed services with content-layer visibility your clients can see too.

OutcomeNew logo growth and a differentiated managed offering.

FAQ

Questions, answered.

What is Reveille for Microsoft 365?

Reveille for Microsoft 365 is agentless Content Observability software that continuously monitors, alerts, self-heals, and reports on the health of Microsoft 365 and SharePoint environments. It covers SharePoint Server, SharePoint Online, and SharePoint Embedded; OneDrive and Azure Blob storage; Microsoft 365 Backup; the SharePoint platform, database, server performance, site metrics, farm metrics, site performance, and CMIS interface; and patented user analytics across SharePoint, Teams, Entra ID, Copilot, and OneDrive — helping organizations prevent SLA breaches and keep business-critical content workflows running, on-premises or in the Microsoft cloud.

Which Microsoft services does Reveille monitor?

SharePoint Server, SharePoint Online, and SharePoint Embedded; OneDrive and Azure Blob storage; Microsoft 365 Backup; and user activity across SharePoint, SharePoint Online, SharePoint Embedded, Microsoft Teams, Entra ID, Copilot, and OneDrive. Reveille has native Azure support — Azure VM, Azure SQL and PostgreSQL, Azure Key Vault, Azure Monitor, Azure Sentinel, Azure Log, and Azure Communication Services — plus Microsoft Power BI data connectors and Power Automate custom connectors. SharePoint is the focal point, but Reveille watches the whole M365 content estate from one place.

How is this different from Microsoft's own admin centers and Azure Monitor?

Microsoft's native tools — the SharePoint admin center, the M365 admin center, and Azure Monitor — are platform-scoped: they report tenant health and infrastructure metrics. Reveille is the independent, application-aware watcher. It runs out-of-the-box transactions against SharePoint sites and document libraries, applies machine-learning thresholds, self-heals on breach, captures real user activity, and feeds your existing SIEM and incident-management tools. Azure Monitor sees the tenant and the servers; Reveille completes the picture by adding the content-services layer — whether a document checked in, whether search is answering, and who accessed what.

Is Reveille for Microsoft 365 agentless?

Yes. Reveille installs no agents on your SharePoint or M365 environment. The SharePoint Wizard generates over 95 out-of-the-box M365-specific tests, and the patented Reveille Collector handles SharePoint Online, SharePoint Embedded, OneDrive, and Azure Blob in cloud or highly secured environments. The Collector keeps SharePoint Online access credentials on the corporate network rather than handing them to a third-party external agent, and data is compressed and optionally encrypted in transit.

Does Reveille support on-premises SharePoint and Microsoft 365 in the cloud?

Yes. Reveille monitors on-premises SharePoint Server alongside SharePoint Online, SharePoint Embedded, OneDrive, Azure Blob, and M365 Backup, so you can compare on-premises with cloud on the same dashboards. The Collector runs on the corporate network or a cloud hypervisor, and Reveille maintains currency with Microsoft M365 platform advances.

How many tests and metrics does Reveille provide for Microsoft 365?

Over 95 M365-specific out-of-the-box tests and more than 90 M365 dashboard metrics. The SharePoint tests span Connectivity, Platform, Database, Server Performance, Site Metrics, Farm Metrics, Site Performance, and CMIS Performance, with additional out-of-the-box tests for SharePoint Embedded, OneDrive, Azure Blob, and M365 Backup. The monitor extends with Reveille infrastructure wizards for databases, REST and web services, file movement (OneDrive/UNC/FTP/SFTP), and server checks via PowerShell, WMI, and Windows performance counters — and any custom ASP.NET component can be added.

Can Reveille detect a slow SharePoint site or a stalled search service?

Yes. Site Performance tests measure the real round-trip — create, check-out, retrieve, check-in, delete, and search a document on a SharePoint site — while Platform tests check Timer Job status, services, health warnings, and the search service, so a slow site or a stopped search service stands out before users feel it. Machine-learning dynamic thresholds learn normal SharePoint patterns and reduce alert noise from workload variation.

Does Reveille self-heal Microsoft 365 issues?

Yes. On a threshold breach, Reveille can conditionally trigger recovery actions — for example cycling a stopped SharePoint Windows service with PowerShell — resolving many issues before the ticket queue fills. Proactive actions can be confirmed from a Microsoft Teams channel using adaptive cards, and the Reveille platform supports the Model Context Protocol (MCP) for communication with AI assistants and agents.

Can Reveille tell who accessed which document and detect abnormal access?

Yes. Reveille's patented collectors observe the actual user activity across SharePoint, SharePoint Online, SharePoint Embedded, Teams, Entra ID, Copilot, and OneDrive — capturing who accessed which document, from which site, and when, for audit, compliance, and capacity reviews. It detects suspicious or abnormal access patterns — such as the same user from different IP addresses or different users from one IP — that can indicate an insider threat or content access breach, and reduces mean time to threat detection with endpoint integration such as Microsoft Defender for Endpoint.

Does Reveille verify Microsoft 365 Backup?

Yes. Reveille for M365 Backup verifies backup service status, protection policy status, and protections for high-value Exchange Online mailboxes, OneDrive folders, and SharePoint sites — and detects restores submitted without prior knowledge or approval. That keeps M365 Backup operating as expected so you are not exposed by silent configuration changes when a ransomware attack or accidental deletion strikes.

How does Reveille handle SharePoint and M365 capacity planning?

Reveille dashboard metrics baseline SharePoint operating performance, database health, and capacity; site activity and use; OneDrive and Azure Blob performance; and SharePoint Embedded performance. Combined with user analytics on transaction volumes, search hit counts, hot content, query activity, and response times, that exposes consumption trends so you can plan capacity before user growth outpaces the environment.

What about security and audit monitoring for SharePoint and M365?

Reveille captures the actual user activity of who accessed what document during what time period across SharePoint, Teams, Entra ID, Copilot, and OneDrive — useful for audit, compliance, and capacity reviews. It surfaces failed and suspicious activity, including malware-detected and access-denied events, and feeds Microsoft Sentinel, Azure Log, Splunk, and ServiceNow to reduce mean time to threat detection.

Does Reveille integrate with our existing Microsoft and ITOM tools?

Yes. Reveille sends alerts to Microsoft Teams, Azure Sentinel, Azure Log, and Azure Communication Services, publishes metrics to Azure Monitor, and ships Power BI data connectors and Power Automate custom connectors. It integrates with Splunk and ServiceNow and with endpoint detection such as Microsoft Defender for Endpoint, exposes 150+ REST API endpoints, and supports the Model Context Protocol (MCP) for AI assistants and agents — extending your existing investments rather than replacing them.

Will Reveille work in a secured or cloud M365 environment?

Yes. The patented Reveille Collector runs as a low-footprint Windows service near the application, collecting SharePoint Online, SharePoint Embedded, OneDrive, and Azure Blob data into a compressed and optionally encrypted package. This reduces security risk because SharePoint Online access credentials are not provided to a third-party external monitoring agent — the Collector can operate on the corporate network and still observe SharePoint Online activity.

How quickly can we get value from Reveille for Microsoft 365?

Reveille's M365 monitor templates and wizard-based metric definitions jumpstart monitor creation — 95+ out-of-the-box tests and 90+ dashboard metrics from a library that already understands SharePoint, SharePoint Embedded, OneDrive, Azure Blob, and M365 Backup. Reveille is a member of the Microsoft Content AI Partner Program (CAPP), and customers typically see reduced M365 support tickets, shortened time to resolution, and greatly enhanced coordination with support.

Customer Outcomes

What Reveille customers actually see.

95%

SLA attainment

Across ECM, IDP, and automation platforms — measurable Service Level Assurance, not best effort.

50%+

Less downtime and ticket volume

Self-healing automation and earlier detection cut the firefighting load in half — or better.

20+ hrs

Reclaimed each week

Manual checklists, status meetings, and after-the-fact troubleshooting replaced by proactive observability.

The content layer is where your business runs. Reveille makes sure it holds.

See Reveille for Microsoft 365 in your environment. Live demo, real SharePoint and M365 data.