Azure Kubernetes Service (AKS) connector for Microsoft Sentinel

Azure Kubernetes Service (AKS) is an open-source, fully-managed container orchestration service that allows you to deploy, scale, and manage Docker containers and container-based applications in a cluster environment. This connector lets you stream your Azure Kubernetes Service (AKS) diagnostics logs into Microsoft Sentinel, allowing you to continuously monitor activity in all your instances. For more information, see the Microsoft Sentinel documentation.

Connector attributes

Connector attribute	Description
Log Analytics table(s)	kube-apiserver kube-audit kube-audit-admin kube-controller-manager kube-scheduler cluster-autoscaler guard
Data collection rules support	Not currently supported
Supported by	Microsoft Corporation

Next steps

For more information, go to the related solution in the Azure Marketplace.