Skip to main content
The Microsoft Intune - Audit event source plugin (name: http_loader, alias: microsoft-intune-audit-events) lets you ingest data from Microsoft Intune logs into a telemetry pipeline. This is a pull-based source plugin.
This plugin doesn’t support the use of a descriptive metadata name in the Pipeline Builder interface.

Supported telemetry types

The for Chronosphere Telemetry Pipeline supports these telemetry types:
LogsMetricsTraces

Configuration parameters

Use the parameters in this section to configure the . The Telemetry Pipeline web interface uses the items in the Name column to describe these parameters. Pipeline configuration files use the items in the Key column as YAML keys.

General

NameKeyDescriptionDefault
Tenant IDoauth2_token_urlRequired. Your Microsoft tenant ID.none
OAuth2 Client IDoauth2_client_idRequired. Your Microsoft OAuth client ID.none
OAuth2 Client Secretoauth2_client_secretRequired. Your Microsoft OAuth client secret.none

Advanced

NameKeyDescriptionDefault
Memory Buffer Limitmem_buf_limitFor pipelines with the Deployment or DaemonSet workload type only. Sets a limit for how much buffered data the plugin can write to memory, which affects backpressure. This value must follow Fluent Bit’s rules for unit sizes. If unspecified, no limit is enforced.none