# Eperimenting o365beat, issue with the processors

**URL:** <https://discuss.elastic.co/t/eperimenting-o365beat-issue-with-the-processors/208041>\
**Category:** Beats\
**Created:** [November 15, 2019, 10:21am UTC](https://discuss.elastic.co/t/eperimenting-o365beat-issue-with-the-processors/208041 "2019-11-15T10:21:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![brogio](https://avatars.discourse-cdn.com/v4/letter/b/f0a364/32.png) [@brogio](https://discuss.elastic.co/u/brogio)\
**Post date:** [November 15, 2019, 10:21am UTC](https://discuss.elastic.co/t/eperimenting-o365beat-issue-with-the-processors/208041/1 "2019-11-15T10:21:21Z")

</div>

Hi, we are testing o365beat and we are experiencing some issues.

The first of this issues is about the processors not working in o365beat .

The configuration is fairly default: we are sending the events directly to elasticsearch.  
We have implemented the geoip pipeline to add some localization data, but this issue is there also without the geoip pipeline.

So we don't have any ECS mapping.

Thank you

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [November 15, 2019, 10:27am UTC](https://discuss.elastic.co/t/eperimenting-o365beat-issue-with-the-processors/208041/2 "2019-11-15T10:27:28Z")

</div>

Hi @brogio,

I'm afraid o365beat is not maintained by us. Perhaps you can open an issue in their repo?

In any case, what kind of transformations are you willing to do? I wonder if you can do them in an ingest processor.

Best regards

---

<div class="post-metadata">

**Author:** ![brogio](https://avatars.discourse-cdn.com/v4/letter/b/f0a364/32.png) [@brogio](https://discuss.elastic.co/u/brogio)\
**Post date:** [November 15, 2019, 10:39am UTC](https://discuss.elastic.co/t/eperimenting-o365beat-issue-with-the-processors/208041/3 "2019-11-15T10:39:22Z")

</div>

I am sorry, do you know where is their repo ?

I am trying to do the default transformation of o365beat.

Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 13, 2019, 12:39pm UTC](https://discuss.elastic.co/t/eperimenting-o365beat-issue-with-the-processors/208041/4 "2019-12-13T12:39:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.