Archived Microsoft Sentinel documentation

The Microsoft Sentinel data connectors have been retired. This site contains the archived documentation for those data connectors.

Get CEF-formatted logs from your device or appliance into Microsoft Sentinel.

Collect data in custom log formats to Microsoft Sentinel with the Log Analytics agent.

Deploy a log forwarder to ingest Syslog and CEF logs to Microsoft Sentinel.

Use Logstash to stream logs with HTTP Data Collection API (legacy).

Collect data from Linux-based sources using Syslog.

Create a legacy codeless connector for Microsoft Sentinel.