diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..1cf0f2f
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,3 @@
+# linguist configuration for syntax highlighting in github UI.
+*.module linguist-language=PHP
+*.install linguist-language=PHP
diff --git a/README.md b/README.md
index e0f8961..e8aef12 100644
--- a/README.md
+++ b/README.md
@@ -5,6 +5,9 @@ Provides a SumoLogic handler for Monolog.
 
   - [Lagoon logs](https://drupal.org/project/lagoon_logs)
 
+There is also a soft dependency on the following modules
+
+  - [admin audit trail](https://drupal.org/project/admin_audit_trail) - auditable events are sent to the Drupal logs
 
 ## Activation
 
diff --git a/tide_logs.module b/tide_logs.module
new file mode 100644
index 0000000..a1e60b1
--- /dev/null
+++ b/tide_logs.module
@@ -0,0 +1,34 @@
+<?php
+
+/**
+ * Implements hook_admin_audit_trail_log_alter().
+ *
+ * Responds to admin_audit_trail events and forwards it to tide_logs otel collector.
+ */
+function tide_logs_admin_audit_trail_log_alter(&$log) {
+  $channel = sprintf("admin_audit_trail_%s", $log["type"]);
+
+  // Strip out properties that are unnecessary.
+  $filtered_log = $log;
+  unset(
+    $filtered_log["lid"],
+    $filtered_log["type"],
+    $filtered_log["created"],
+    $filtered_log["ip"],
+  );
+
+  // Remove markup from text fields.
+  $filtered_log['description'] = preg_replace('/[\x{200B}-\x{200D}]/u', '', strip_tags($filtered_log['description']));
+  $filtered_log['ref_char'] = preg_replace('/[\x{200B}-\x{200D}]/u', '', $filtered_log['ref_char']);
+
+  // json not supported in watchdog messages. Using a comma-delimited list
+  // in key:value format.
+  $items = [];
+  foreach ($filtered_log as $key => $value) {
+    $items[] = sprintf("%s:%s", $key, $value);
+  }
+  $message = implode(", ", $items);
+
+  \Drupal::logger($channel)->notice($message);
+}
+