Logs stored in storage account monitored by Azure Sentinel

1k Views Asked by At

I want to understand if i am sending logs from log analytics workspace to a storage account in azure, is it possible that those logs will be monitored by Azure sentinel when storage connector is used or will azure sentinel only monitor storage account logs

1

There are 1 best solutions below

2
On

It sounds like you wish to read the contents of Azure Storage and ingest into Sentinel. If so, you will need a custom connector. There is an Azure Function example on GitHub here.

Sentinel Custom Connector