Limitations on Collecting Intune Logs via Graph API?

You can configure event hub and blob storage, sned them there and then pull them down from there through that integration rather than a 3rd party API.  Whatever is available thorugh the API is what MS delivers us.  I’d need to do a little more research on the topic but thats typically how it works.  

Best bet is the two options I mentioned but those incur other costs. 

​@dnehoda , thank you for your response. I am only interested currently in GRAPH API integration, hence, can you please guide us about the intune log types we can get via Graph API ?

I have seen the below mentioned official link only mentions about AUDIT logs API ?

https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-mdm-intune

Please see here for intune log ingestion to SecOps: https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-mdm-intune#configure_intune_diagnostic_settings

​@dnehoda , hey, any feedback ?

The only logs you can get through graph API are the audit logs and device/report.  That’s what MS gives you through it.  The only way to get more verbose is through the Event Hub or Blob storage.  

​@dnehoda , thanks for your reply, The below mentioned link only mentioned audit logs api link, I believe that we can only collect audit logs and no device/report logs, because there should be another  api link for any other types of logs,

any feedback on this ?

https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-mdm-intune

That's what MS delivers.  I have to look at our integration but I believe you can modify the URL you point to.  If that's the case, potentially create 2 feeds with the 2 different endpoints.