how can I validate my Sentinel Content before PR ?

LXF 205 Reputation points
2024-06-27T01:39:27.0266667+00:00

Hello MS Team,

I am currently engaged in validating/testing solutions (a CCP dataConnector) with Sentinel and have a few questions regarding the process.

Q1: I am following the Sentinel-DataConnector readme guidance (https://github.com/Azure/Azure-Sentinel/blob/master/DataConnectors/ReadMe.md) for validating the Connector UX. Although it seems my connector was imported/loaded correctly, but it does not appear in the connector list after then. Is this step intended only for UX validation and not for functional testing (e.g., data-receiving)?

Q2: If the above validation is for UX only, how can I proceed to test the functionality of the connector?

Q3: Are there any specific tests required before submitting a Pull Request?

Thank you for your assistance.

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,083 questions
{count} votes

Accepted answer
  1. Givary-MSFT 31,451 Reputation points Microsoft Employee
    2024-06-27T06:20:19.73+00:00

    @LXF Thank you for reaching out to us, reviewed the below content related to Codeless connector platform (CCP) https://www.youtube.com/watch?v=Fg2iN28Fp0o

    https://www.linkedin.com/pulse/before-after-codeless-connector-platform-debac-manikandan-b0ugc/?trackingId=4%2F%2Bs9CeqRua%2FZahLBXLz2Q%3D%3D

    https://www.toolify.ai/gpts/build-custom-data-connectors-in-microsoft-sentinel-with-codeless-connector-platform-374131

    From the above content, once the json file is configured and deployed, connector should be available in the UI.

    If its not appearing in the connector list, it's possible that there is an issue with the configuration or setup of the connector. You may want to review the configuration steps and ensure that all required settings are properly configured.

    Let me know if the above content helps to isolate your issue, feel free to post back.

    Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

0 additional answers

Sort by: Most helpful