Module 4 Links and Resources

Since this video was uploaded, the SOF-ELK contributors have updated the way Azure and M365 logs are parsed and uploaded. They only accept JSON format, which means you will have issues uploading the CSVs without writing your own custom parser. To make this easier for you, I have created a SOF-ELK VM with the M365 logs pre-ingested that you can use for the BEC exercises later on. You can download the VM from this link below:

https://drive.google.com/file/d/184kHXhZuOct0zGs0FURh7j20reBSD2t4/view?usp=sharing

SOF-ELK
https://github.com/philhagen/sof-elk

Or download the logs used in the course as raw JSON to be parsed with your own tool here:

https://drive.google.com/drive/folders/1kBRE1Lplnq04GTj5bBVjKBMcoWwPkMS4?usp=sharing