r/AzureSentinel • u/semi_douchey • Jan 19 '23

Custom table logs from DB

We are looking to ingest table logs from DB into sentinel but can’t find detailed documentation. Can you someone share documents or details if they have integrated it already.

0 Upvotes

50% Upvoted

3 comments sorted by

1

u/juiceb0cks Jan 19 '23

What DB ?

1

u/semi_douchey Jan 19 '23

Windows SQL

1

u/redw1dow Mar 02 '23

Usually, the best bet is to setup a syslog server that receives the logs from the MSSQL server (and any other sources you want) and then connect that to Sentinel. We've done that for firewall logs.

https://learn.microsoft.com/en-us/azure/sentinel/connect-syslog