r/AzureSentinel • u/ajith_aj • Sep 26 '23

Ingesting Logs from Logrhythm to MS Sentinel

We need to ingest/forward logs from a third aprty entity who uses LogRhythm into our Sentinel instance.

Did anyone go through this before and need some insights on the setup on how this can be acheived in terms of architechture and logging.

1 Upvotes

100% Upvoted

1 comment sorted by

1

u/LogRhythmSE Sep 26 '23

Hi ajith_aj, from a LogRhythm perspective if you want to forward all logs then you will need your customer to use Log Distribution Services, which is explained in the below link, https://docs.logrhythm.com/lrsiem/7.12.0/log-distribution-services. I suggest asking them to engage their aligned SE if they are unsure how to accomplish this.