on perm fileserver delete logs to cloud app security

[gabormicskei]

Hi all,

Is there any way to send the delete file logs from on perm fileserver to CAS ?

Thanks.

Gabor

[#2]

I think what you are asking is if it is possible to monitor and alert when someone clears the security event log (Event ID 517 and 1102).
Cloud App Security won't do that for you, but Azure Sentinel or Azure Log Analytics will:
https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-security-events

[#3]

Thanks, I did this in the meantime @Joe Stocker