We have a need to send audit logs to the our LEM system in a JSON format. How would I go about doing this using Solarwinds LEM? I've been able to do this using Splunk and Loggly by using their web api's. Does Solarwinds LEM have a way of doing this?
At the moment, there is no functionality like this in LEM. We do have a Feature Request looking for up-votes, though.
Capturing events from Unified Auditing in Office 365, Azure AD and integrated applications
You may want to create a feature request for your specific case, though.
Retrieving data ...