how to configure Microsoft Copilot logs are ingested automatically to the Azure Sentinel?

Question

Sanjeev Pokhrel 15

Hi Fams, Could I get some assistance with configuring copilot logs into azure sentinel. Thanks,

1 answer

Answer 1

Givary-MSFT 35,621 Microsoft Employee Moderator

@Sanjeev Pokhrel Thank you for reaching out to us, let me check on your ask and revert back. I assume this can be achieved through Azure Function which ingests custom logs (https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/O365%20Data) and probably we can collect Copilot logs same way, I haven't tested it personally yet.

Will keep you posted when I have more details from my team.

Sanjeev Pokhrel 15 Reputation points

2024-01-21T22:09:10.0566667+00:00

Thanks @Givary-MSFT waiting to hear once you get more details from your team.
Givary-MSFT 35,621 Reputation points Microsoft Employee Moderator

2024-01-30T05:56:30.27+00:00

@Sanjeev Pokhrel Apologies for the delayed response, haven't heard from my team yet, based on the research above mentioned approach is only feasible option right now to ingest Microsoft Copilot logs to Sentinel. You can share your feedback over here for feature request/to have data connector for this - https://feedback.azure.com/d365community which is closely monitored by our product team.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.