Stream logs regarding changes in files to event hub

Jonathan Feigenson 21 Reputation points
2020-12-23T14:12:34.51+00:00

I am interested in streaming logs about files that were modified/created/deleted in office365.
I have looked into logs (audit logs and activity logs) that are transferred to event hubs (and streamed from there) and realized that none of them can contain information regarding such files.
Is there any alternative or workaround that could be used in order to achieve my goal?

Much appreciated

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,213 questions
Azure Event Hubs
Azure Event Hubs
An Azure real-time data ingestion service.
591 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,367 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. PRADEEPCHEEKATLA-MSFT 84,456 Reputation points Microsoft Employee
    2020-12-24T04:40:29.067+00:00

    Hello @Jonathan Feigenson ,

    Unfortunately, you cannot send the audit logs from O365 to Azure Event Hubs.

    I would suggest you to vote up an idea submitted by another Azure customer:

    https://office365.uservoice.com/forums/289138-office-365-security-compliance/suggestions/38205694-send-all-audit-events-to-o365-audit-log-entries-to

    All of the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

    Hope this helps. Do let us know if you any further queries.

    ------------

    • Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification.