Edit

Connect your data sources to Microsoft Sentinel by using data connectors

  • Article
  • Applies to:
    Microsoft Sentinel in the Azure portal, Microsoft Sentinel in the Microsoft Defender portal

Install and configure data connectors to ingest your data into Microsoft Sentinel. Data connectors are available as part of solutions from the content hub in Microsoft Sentinel. After you install a solution from the content hub, the related data connectors are available to enable and configure. To find and install solutions that include data connectors, see Discover and manage Microsoft Sentinel out-of-the-box content.

This article provides general information about how to enable a data connector and how to find more detailed installation instructions for other data connectors. For more information about data connectors in Microsoft Sentinel, see the following articles:

Important

Microsoft Sentinel is available as part of the public preview for the unified security operations platform in the Microsoft Defender portal. For more information, see Microsoft Sentinel in the Microsoft Defender portal.

Prerequisites

Before you begin, make sure you have the appropriate access and you or someone in your organization installs the related solution.

Enable a data connector

After you or someone in your organization installs the solution that includes the data connector you need, configure the data connector to start ingesting data.

  1. For Microsoft Sentinel in the Azure portal, under Configuration, select Data connectors.
    For Microsoft Sentinel in the Defender portal, select Microsoft Sentinel > Configurations > Data connectors.

  2. Search for and select the connector. If you don't see the data connector you want, install the solution associated with it from the Content Hub.

  3. Select Open connector page.

  4. Review the Prerequisites. To configure the data connector, fulfill all the prerequisites.

  5. Follow the steps outlined in the Configurations section.

    For some connectors, find more specific configuration information in the Collect data section in the Microsoft Sentinel documentation. For example, see the following articles:

    After you configure the data connector, it might take some time for the data to be ingested into Microsoft Sentinel. When the data connector is connected, you see a summary of the data in the Data received graph, and the connectivity status of the data types.

    Screenshot of a data connector page with status connected and graph that shows the data received.

Find support for a data connector

Both Microsoft and other organizations author Microsoft Sentinel data connectors. Find the support contact from data connector page in Microsoft Sentinel.

  1. In the Microsoft Sentinel Data connectors page, select the relevant connector.

  2. To access support and maintenance for the connector, use the support contact link in the Supported by field on the side panel for the connecter.

    Screenshot showing the Supported by field for a data connector in Microsoft Sentinel.

For more information, see Data connector support.

Related content

For more information about solutions and data connectors in Microsoft Sentinel, see the following articles.