counteractive o365beat issues

counteractive / o365beat

Elastic Beat for fetching and shipping Office 365 audit events

Other

66 stars 27 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

o365beat /Debian 12

#62 sh-jh opened 2 weeks ago
0
How to run o365beat in Ubuntu as pull office logs connectors

#61 eugene-ho-mssp opened 2 weeks ago
0
Log file is not getting created

#60 sriramb12 opened 1 year ago
0
Does O365beat support multiple Office 365 tenants scenario

#59 khaloud40 opened 2 years ago
0
Tenant ID not found

#58 shad0wcrawl3r opened 3 years ago
0
GCC High no available content locations:

#57 mgovolt opened 3 years ago
1
Log content changed recently?

#56 GenCr opened 3 years ago
0
AzureActiveDirectory Logs not pulled

#55 andy13th opened 3 years ago
3
Certificate signed by unknown authority message

#54 robm82 opened 3 years ago
2
Proxy support for the API requests

#53 kristofver closed 3 years ago
1
added certificate authentication functionality

#52 yanpeng7 closed 3 years ago
0
Live Realoding Credentials

#51 cloudziu closed 3 years ago
2
test

#50 Reshadadada opened 4 years ago
0
first test pull request

#49 Reshadadada closed 4 years ago
0
added name to contributor on humans.txt

#48 mahotosasaki closed 4 years ago
0
WARN beater/o365beat.go:249 start XX must be <=YY hrs ago, resetting

#47 rob570 opened 4 years ago
3
o365 audit.exchange not returning threat audit logs

#46 CustosClarus closed 4 years ago
3
Logstash connection errors

#45 GenCr closed 4 years ago
7
Organization.id

#44 jthack opened 4 years ago
0
Dashboard and visualizations not working - error with fields.keyword

#43 Rajprince2793 closed 3 years ago
5
Preventing Duplicate Events

#42 shwetas-syd opened 4 years ago
4
Parsing Extended Properties

#41 ion-storm closed 4 years ago
4
Docker Instructions

#40 BenB196 closed 3 years ago
3
Client.Timeout for Exchange/General/Sharepoint

#39 kevinserafin closed 4 years ago
6
visualization not working

#38 CVMCTONY closed 3 years ago
5
Understanding Authentication Data

#37 Von-dy closed 4 years ago
4
Exiting: error loading config file: yaml: line 2: did not find expected node content

#36 leogoldim closed 4 years ago
5
User Data Enhancement

#35 Michael-vdL closed 4 years ago
3
future request Azure Beats

#34 creatoni4 closed 3 years ago
4
Support client certificate/public key authentication

#33 chris-counteractive closed 3 years ago
2
SIGABRT during `make release` packaging

#32 chris-counteractive closed 4 years ago
3
Certain events don't trigger the dissect processor

#31 GenCr closed 4 years ago
5
Index pattern doesn't change

#30 ebvjr closed 4 years ago
5
Killing the beat process from the command line is unreliable

#29 chris-counteractive closed 4 years ago
2
Incorrect file name on o365beat-1.4.3-x86_64.rpm.sha512

#28 fuef opened 4 years ago
1
Error parsing Audit.AzureActiveDirectory (other content types work fine)

#27 jheidecker closed 4 years ago
3
Question about possibility of monitoring multiple tenant domains

#26 ipninichuck opened 4 years ago
14
GCC High - Endpoint Used Returning no data

#25 cyanitol closed 4 years ago
5
Question regarding installing other modules on o365beat

#24 ipninichuck closed 4 years ago
3
Cannot index event

#23 nealmadhu closed 4 years ago
2
Incorrect system time can lead to failed requests

#22 chris-counteractive closed 4 years ago
1
Response body not printed for authentication errors which hinders debugging.

#21 chris-counteractive closed 4 years ago
4
How to use debugging output enabled on Centos7

#20 sebastianfon94 closed 4 years ago
0
Error Parsing @timestamp

#19 Z3r01mPact closed 4 years ago
4
[ModifiedProperties] Can't get text on a START_OBJECT

#18 borg333 closed 4 years ago
3
Publisher ID is not set

#17 jjkoster closed 4 years ago
9
ClientIP not parsed to ECS client.ip when it has port but no brackets

#16 chris-counteractive closed 4 years ago
1
object mapping for [ModifiedProperties]

#15 borg333 closed 4 years ago
3
ModifiedProperties field is sent as object which causes problems for elasticsearch

#14 chris-counteractive closed 4 years ago
0
ECS event.severity is type long, whereas O365 Severity is a string

#13 chris-counteractive closed 4 years ago
0