Common Event Format (CEF) connector for Microsoft Sentinel
Common Event Format (CEF) is an industry standard format on top of Syslog messages, used by many security vendors to allow event interoperability among different platforms. By connecting your CEF logs to Microsoft Sentinel, you can take advantage of search & correlation, alerting, and threat intelligence enrichment for each log. For more information, see the Microsoft Sentinel documentation.
|Log Analytics table(s)||CommonSecurityLog
|Data collection rules support||Workspace transform DCR|
|Supported by||Microsoft Corporation|
For more information, go to the related solution in the Azure Marketplace.
Submit and view feedback for