Azure activity Log Filtering

Question

We are in need of providing access to Azure activity Logs to third party SIEM tool. We need to restrict only SharePoint activity Logs for this tool. Please guide me how to filter the SharePoint logs and send the logs to SIEM tool.

Thanks in advance.

Srinivas

Answer 1

Hi @Srinivasu Jogi ,

As per my knowldege, we cannot filter the SharePoint logs in Azure Activity log as Activity log only provides insight into subscription-level events. If you want to trace user activity in SharePoint Online, you need to Search the audit log in the compliance center. As to the the SIEM tool, we don't provide support for 3rd party software on Micorosft Q&A currently, I would suggest you contact 3rd party support.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.