search

counteractive / o365beat

Elastic Beat for fetching and shipping Office 365 audit events
Other
66 stars 27 forks source link

Docker Instructions #40

Closed BenB196 closed 4 years ago

BenB196 commented 4 years ago

I would like to run this beat as a docker container, however I don't see any instructions for doing so. Is this something that is currently support?

chris-counteractive commented 4 years ago

Thanks @BenB196 for the issue, you're right that this is currently pretty anemic. We haven't put any time into the Docker build target, but it's certainly on the roadmap. I'll prioritize this for our next release and let you know when it's updated.

SMAPPER commented 4 years ago

If you want I have a docker build for this:

docker pull hasecuritysolutions/o365beat

The dockerfile is publicly available for viewing as well here:

https://github.com/HASecuritySolutions-Docker/o365beat/blob/master/Dockerfile

chris-counteractive commented 4 years ago

As filebeat now supports o365 with an official module, as of v7.7.0, we recommend new users go with that solution. Their docker documentation is quite robust. Thanks to @SMAPPER for the workaround, and @BenB196 for the long-standing issue!