I have recently discovered o365 module for Filebeat (Office 365 module | Filebeat Reference [8.7] | Elastic).
My question is: is it possible to use it for offline data?
I'm interested to have it since it's parse data in ECS and also I would love to use its dashboard.
Offline data for me means - export UAL logs from https://compliance.microsoft.com/ in CSV and use Filebeat to grab it and import to Elastic stack. I'm not interested in monitoring live data rather I want to work on data I actually need.
Thanks in advance!