Connect data sources to Microsoft Sentinel by using data connectors

Connect data sources to Microsoft Sentinel by installing and configuring data connectors. This article generally explains how to install data connectors available in the Microsoft Sentinel Content hub to ingest and analyze data for improved threat detection.

Prerequisites

Before you begin, make sure you have the appropriate access and you or someone in your organization installs the related solution.

Enable a data connector

After you or someone in your organization installs the solution that includes the data connector you need, configure the data connector to start ingesting data.

  1. Go to the Azure portal, under Configuration, select Data connectors.

  2. Search for and select the connector. If you don't see the data connector you want, check again that the relevant solution is installed in the Content hub.

  3. Select Open connector page.

    Screenshot of data connector details page with open connector page button.

  4. Review the Prerequisites for your data connector and ensure that they're fulfilled.

  5. Follow the steps outlined in the Configurations section for your data connector.

    For some connectors, find more specific configuration information in the Collect data section in the Microsoft Sentinel documentation.

    After you configure the data connector, it might take some time for the data to be ingested into Microsoft Sentinel. When the data connector is connected, you see a summary of the data in the Data received graph, and the connectivity status of the data types.

    Screenshot of a data connector page with status connected and graph that shows the data received.

Find your data

After you enable the connector successfully, the connector begins to stream data to the table schemas related to the data types you configured.

Find support for a data connector

Both Microsoft and other organizations author Microsoft Sentinel data connectors. Find the support contact from data connector page in Microsoft Sentinel.

  1. In the Microsoft Sentinel Data connectors page, select the relevant connector.

  2. To access support and maintenance for the connector, use the support contact link in the Supported by field on the side panel for the connecter.

    Screenshot showing the Supported by field for a data connector in Microsoft Sentinel.

For more information, see Data connector support.

For more information about solutions and data connectors in Microsoft Sentinel, see the following articles.