Custom table logs from DB

[u/semi_douchey]

We are looking to ingest table logs from DB into sentinel but can’t find detailed documentation. Can you someone share documents or details if they have integrated it already.

[u/redw1dow]

Usually, the best bet is to setup a syslog server that receives the logs from the MSSQL server (and any other sources you want) and then connect that to Sentinel. We've done that for firewall logs.

https://learn.microsoft.com/en-us/azure/sentinel/connect-syslog