Can i get audit log form office 365 with awesome beat? Maybeat O365beat 
Or have any solution for this case.
Thanks 
Does it log to a file?
thank @warkolm. It's not a file.
If if it llog to a file , i can use filebeat.
For getting log form O365, need call API O365. Like splunk, they have app for get log O365 only 
I'm not aware of any beat like this. Maybe you can find a tool subscribing to the APIs event stream and write those to json logs.
Reading logs/data from remote also looks like a good job for Logstash, but no idea if any plugins do exist.
Thank all.
I'm coding for getting log O365 via api and write into json file.!