# Ingest Microsoft Intune Audit Logs to Elastic
**URL:** https://discuss.elastic.co/t/ingest-microsoft-intune-audit-logs-to-elastic/346633
**Category:** Elastic Observability
**Created:** [November 7, 2023, 3:13pm UTC](https://discuss.elastic.co/t/ingest-microsoft-intune-audit-logs-to-elastic/346633 "2023-11-07T15:13:14Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@momher](https://discuss.elastic.co/u/momher)
#### Post date: [November 7, 2023, 3:13pm UTC](https://discuss.elastic.co/t/ingest-microsoft-intune-audit-logs-to-elastic/346633/1 "2023-11-07T15:13:14Z")
Do any one have done ingesting their Microsoft Intune Audit Logs to elastic for alerting purposes? For example, if there's a specific Audit Logs on Intune it gets ingested to Elastic to create an alert ticket.
---
### Author:  [@transcend3nt](https://discuss.elastic.co/u/transcend3nt)
#### Post date: [November 23, 2023, 2:56am UTC](https://discuss.elastic.co/t/ingest-microsoft-intune-audit-logs-to-elastic/346633/2 "2023-11-23T02:56:15Z")
I'm looking to do that - to ingest all the Intune logs to Elastic, and have Elastic match for alert rulesets on the ingested Intune data. Are these rules readily available?
---
### Author:  [@momher](https://discuss.elastic.co/u/momher)
#### Post date: [November 23, 2023, 6:14am UTC](https://discuss.elastic.co/t/ingest-microsoft-intune-audit-logs-to-elastic/346633/3 "2023-11-23T06:14:32Z")
We haven't tried it and waiting for someone to confirm that they've done it.