How to connect jumpcloud data connector in sentinel using azure functions

Harish Menti 0 Reputation points
2024-01-19T12:38:38.81+00:00

I'm trying to connect the jump cloud data connector, but no such data connector is available in the connectors, and I learned that I have to use Azure functions to fetch the jump cloud data to sentinel. Can someone good at it help me with any articles or insights that may help me in the process?

Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,265 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,592 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
977 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. MayankBargali-MSFT 68,476 Reputation points
    2024-01-22T05:47:11.4333333+00:00

    @Harish Menti Thanks for reaching out.

    Looking into the sentinel data connector list there is no connector available as documented here.
    If there is no out of box solution then you need to refer to JumpCloud document if there are any REST API that can be leveraged to pull the logs from the JumpCloud. From the function perspective you can create the function app in any of the supported languages. Now at your code end you can use any trigger such as timer trigger that trigger the function in the fixed interval. Now your function app code will have the HTTP call to your JumpCloud API to get the logs and once the logs are retired you can use Log ingestion API allows you to send external data to a Log Analytics workspace. For more details you can refer to this document.

    Please 'Accept Answer' if it helped so that it can help others in the community looking for help on similar topics.

    0 comments