Sources

SOURCE	VERSIONS
Active Directory	Windows Server 2012 / 2012 R2 (Event Log collection only) Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2025
Amazon Web Services	n/a
Microsoft Subscriptions: Entra ID and Entra ID Sign-ins Exchange Online SharePoint Online Teams	As distributed with Microsoft 365 subscription
On-Premises Exchange	Exchange Server 2016 Exchange Server 2019
VMware	VMware ESXi 6
Windows File System	Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows 8.1 Windows 10 Windows 11
Okta	n/a

To ensure successful data collection, most sources require some configuration on their side. For more information, see Auditing Settings.