Hi,
In general recommended agent for exchange is winlogbeat as it can read events from Windows Event Log. But you can combine it with filebeat agent if you have some specific files to monitor. In version 7.1 both of those agents can be downloaded from GUI in Agents module.