Microsoft Sentinel is Microsoft’s log aggregator. Along with other data, Sentinel can ingest events from the Office 365 audit log. Once ingested, we can visualize the data through workbooks. If you have an Azure subscription, it’s surprisingly easy to take advantage of the 31-day trial to see if Sentinel can do a job for your organization. Follow our steps and you’ll be visualizing quickly.
https://practical365.com/use-office-365-audit-data-with-microsoft-sentinel/
