UAL → NDJSON Converter
Extract AuditData JSON from Microsoft 365 Unified Audit Log CSV files and convert to Elasticsearch-compatible NDJSON format
Upload CSV File
Select a Microsoft 365 Unified Audit Log CSV file. The tool will extract the AuditData column (containing JSON strings) and normalize it for Elasticsearch compatibility.
How to Use
Step-by-step instructions for converting your UAL data
1
Export UAL Data
Export your Microsoft 365 Unified Audit Log data as a CSV file from the Microsoft 365 compliance center
2
Upload CSV File
Click "Choose CSV File" and select your exported UAL CSV file. The tool will automatically find the AuditData column.
3
Extract & Convert
Click "Convert to NDJSON" to extract JSON data from the AuditData column and convert to NDJSON format
4
Import to Elasticsearch
Download the NDJSON file and import it into Elasticsearch/Kibana using the Data Visualizer or File Upload feature