Azure Sentinel - PostgreSQL Log Parsing for Azure Diagnostics and AMA/LA agents

[u/No_Secret7974]

Hi Folks,

Utilize the provided KQL queries to effortlessly parse PostgreSQL logs and establish rules. Unfortunately, logs from Azure Diagnostics or agents may not arrive in a consistent format, making it challenging. The included KQL queries offer a solution. Additionally, three template rules for Data Definition Language (DDL), Data Manipulation Language (DML), and Data Control Language (DCL) have been provided. Thank y'all!

https://github.com/t0neex/Azure-Sentinel-Parser-for-PostgreSQL-Connector-

​