Elastic Beat for fetching and shipping Office 365 audit events
This version of O365beat is the initial functional version, the MVP: it maintains state, has sensible configuration options, and so on. If you build it, it should do what it says on the tin. As alpha software, it does not have test coverage, pre-built binaries, or documentation. We hope those are soon to follow. Caveat emptor.
We'd love it if there were already such an animal, but the list of community beats doesn't show one, nor do google and github searches at the time of this release. If it helps anyone out, or if you have feedback, please let us know at [email protected]. Thanks!