[SIMI-88] Microsoft Copilot: Update dashboard,define facets and pipeline

.github/CODEOWNERS

@@ -360,6 +360,11 @@ datadog_checks_base/datadog_checks/base/checks/windows/              @DataDog/wi
 /microsoft_dns/manifest.json                                        @DataDog/agent-integrations @DataDog/documentation
 /microsoft_dns/assets/logs/                                         @DataDog/agent-integrations @DataDog/documentation @DataDog/logs-integrations-reviewers
 
+/microsoft_copilot/                                                 @DataDog/saas-integrations
+/microsoft_copilot/*.md                                             @DataDog/saas-integrations @DataDog/documentation
+/microsoft_copilot/manifest.json                                    @DataDog/saas-integrations @DataDog/documentation
+/microsoft_copilot/assets/logs/                                     @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-integrations-reviewers
+
 /microsoft_sysmon/                                                  @DataDog/agent-integrations
 /microsoft_sysmon/*.md                                              @DataDog/agent-integrations @DataDog/documentation
 /microsoft_sysmon/manifest.json                                     @DataDog/agent-integrations @DataDog/documentation

microsoft_copilot/README.md

@@ -10,15 +10,25 @@ With this integration, you can:
 - Track user activity through logs that capture each user's "last activity" per Microsoft 365 application.
 - Identify the number of Microsoft Copilot licenses that have not been used for extended periods of time.
 
+Microsoft computes Copilot usage reports on a time-delayed basis of [up to 72 hours][3]. Upon detection of
+a new report, this integration:
+- Submits metrics for active and enabled summary user counts per application.
+- Submits a log message for each user's last activity per application.
+
 ## Setup
 
 Connect a Microsoft 365 tenant to start tracking Copilot usage.
 
 ## Data Collected
 
+### Logs
+
+The Microsoft Copilot integration collects a log message for each user's Copilot activity once per day.
+
 ### Metrics
 
-The Microsoft Copilot integration produces point-in-time metrics representing active and enabled users of Copilot per application.
+The Microsoft Copilot integration produces summary metrics representing active and enabled users of
+Copilot per application once per day.
 
 {{< get-metrics-from-git "microsoft-copilot" >}}
 
@@ -36,4 +46,5 @@ Need help? Contact [Datadog support][2].
 
 [1]: https://copilot.microsoft.com/
 [2]: https://docs.datadoghq.com/help/
+[3]: https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage?view=o365-worldwide
 

microsoft_copilot/assets/dashboards/microsoft_copilot_usage.json

@@ -214,16 +214,16 @@
               "x": 6,
               "y": 3,
               "width": 6,
-              "height": 4
+              "height": 3
             }
           },
           {
             "id": 8138763535560108,
             "definition": {
               "type": "note",
-              "content": "_Application usage reports are time delayed by up to three days._",
+              "content": "_Microsoft 365 Copilot usage reports become available through the API [approximately 72 hours](https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage?view=o365-worldwide) after the activity occurs._",
               "background_color": "blue",
-              "font_size": "14",
+              "font_size": "16",
               "text_align": "center",
               "vertical_align": "center",
               "show_tick": false,
@@ -235,31 +235,6 @@
               "x": 0,
               "y": 4,
               "width": 6,
-              "height": 1
-            }
-          },
-          {
-            "id": 8103835845010090,
-            "definition": {
-              "title": "Monitor Summary",
-              "type": "manage_status",
-              "display_format": "list",
-              "color_preference": "text",
-              "hide_zero_counts": true,
-              "show_status": true,
-              "last_triggered_format": "relative",
-              "query": "tag:(source:microsoft_copilot AND service:user-detail-report)",
-              "sort": "status,asc",
-              "count": 50,
-              "start": 0,
-              "summary_type": "monitors",
-              "show_priority": false,
-              "show_last_triggered": false
-            },
-            "layout": {
-              "x": 0,
-              "y": 5,
-              "width": 6,
               "height": 2
             }
           }
@@ -269,7 +244,7 @@
         "x": 0,
         "y": 0,
         "width": 12,
-        "height": 8
+        "height": 7
       }
     },
     {
@@ -1269,7 +1244,7 @@
       },
       "layout": {
         "x": 0,
-        "y": 8,
+        "y": 7,
         "width": 12,
         "height": 17
       }

microsoft_copilot/assets/logs/microsoft-copilot.yaml

@@ -0,0 +1,101 @@
+id: microsoft-copilot
+metric_id: microsoft-copilot
+backend_only: false
+facets:
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Copilot Chat Last Activity Date
+    path: report.copilotChatLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Copilot User Display Name
+    path: report.displayName
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Copilot User Principal Name
+    path: report.userPrincipalName
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Excel Copilot Last Activity Date
+    path: report.excelCopilotLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Loop Copilot Last Activity Date
+    path: report.loopCopilotLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft OneNote Copilot Last Activity Date
+    path: report.oneNoteCopilotLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Outlook Copilot Last Activity Date
+    path: report.outlookCopilotLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft PowerPoint Copilot Last Activity Date
+    path: report.powerPointCopilotLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Teams Copilot Last Activity Date
+    path: report.microsoftTeamsCopilotLastActivityDate
+    source: log
+    type: string
+  - description: ""
+    facetType: list
+    groups:
+      - Microsoft 365
+    name: Microsoft Word Copilot Last Activity Date
+    path: report.wordCopilotLastActivityDate
+    source: log
+    type: string
+pipeline:
+  type: pipeline
+  name: Microsoft Copilot
+  enabled: true
+  filter:
+    query: source:microsoft-copilot
+  processors:
+    - type: service-remapper
+      name: Define `service` as the official service of the log
+      enabled: true
+      sources:
+        - service
+    - type: date-remapper
+      name: Define `timestamp` as the official date of the log
+      enabled: true
+      sources:
+        - timestamp