We're interested in trying out the Azure module for Filebeat in order to fetch logs from an Azure event hub. The event hub will be fed diagnostics logs from Intune.
If we look at the documentation for the Azure module (https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-azure.html) it says that is has support for the following filesets:
However we can see that the diagnostics settings for Intune has the following categories available to send to an Azure event hub:
Does that mean that the Filebeat Azure module only has support for the Auditlogs and not the other two? If so, is there any way that you could recommend that we collect the logs with?