# Office 365 Filebeat Module Error
**URL:** https://discuss.elastic.co/t/office-365-filebeat-module-error/237158
**Category:** Beats
**Tags:** beats-module, filebeat
**Created:** [June 15, 2020, 3:18pm UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158 "2020-06-15T15:18:38Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@khaag](https://discuss.elastic.co/u/khaag)
#### Post date: [June 15, 2020, 3:18pm UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/1 "2020-06-15T15:18:38Z")
Hello
We're trying to setup the office 365 module in filebeat.
After editing the o365.yml file we are getting the following error:
`ERROR instance/beat.go:932 Exiting: Error while initializing input: o365audit: reading config: string value is not set accessing 'application_id'`
Does someone maybe have an idea 🙂
Kind regards
Kevin
---
### Author:  [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [June 16, 2020, 7:14am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/2 "2020-06-16T07:14:46Z")
Hi @khaag 🙂
I'm not expert in O365 module but looking at the docs, it seems that you need to define an `application_id` or `var.application_id` when configuring the module [https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-o365.html](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-o365.html) and the error is telling you that the field is missing or empty, I guess.
---
### Author:  [@khaag](https://discuss.elastic.co/u/khaag)
#### Post date: [June 16, 2020, 8:05am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/3 "2020-06-16T08:05:35Z")
Hi @Mario_Castro
Thank you for your reply!
In the module config o365.yml i did set the var.application\_id: "xxxxx"
Like this:
```auto
# Set the application_id (also known as client ID):
var.application_id: "eff3698b-59e6-4bdf-88fe0322f16e1bcb"
```
But this does't work for me...
---
### Author:  [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [June 16, 2020, 8:42am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/4 "2020-06-16T08:42:35Z")
Just to double check, this must be placed in `audit` after enabling Audit log search and the application must be registered in Azure
---
### Author:  [@khaag](https://discuss.elastic.co/u/khaag)
#### Post date: [June 17, 2020, 3:13am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/5 "2020-06-17T03:13:45Z")
Hi @Mario_Castro
We figured it out 🙂 There was one more dash in the application id 🙈
Sorry for wasting the time!
And many thanks for your reply!
Regards
Kevin
---
### Author:  [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [June 17, 2020, 8:44am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/6 "2020-06-17T08:44:40Z")
That things happen 😄
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 15, 2020, 10:44am UTC](https://discuss.elastic.co/t/office-365-filebeat-module-error/237158/7 "2020-07-15T10:44:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.