Enabling Data sources to Azure Sentinel

To enable a data connector in Azure Sentinel:

1. On the Azure Sentinel left navigation menu, select Data connectors. The Data connectors page shows the full list of connectors that Azure Sentinel provides, and their status. Select the connector you want to connect, and then select Open connector page.

For more information, see Service-to-service integration and Azure Sentinel partner data connectors.

2. On the connector page, make sure you’ve fulfilled all the prerequisites, and follow the instructions to connect the data to Azure Sentinel. It may take some time for the logs to start syncing with Azure Sentinel. After you connect, you see a summary of the data in the Data received graph, and the connectivity status of the data types.

3. Select the Next steps tab to see content that Azure Sentinel provides for the specific data type.

Azure Sentinel supports the following data connection methods:

• Amazon Web Services — CloudTrail
• Azure Active Directory, including audit logs and sign-in logs
• Azure Active Directory Identity Protection
• Azure Activity
• Azure DDoS Protection
• Azure Defender alerts from Azure Security Center
• Azure Defender for IoT (formerly Azure Security Center for IoT)
• Azure Firewall
• Azure Information Protection. For more information, see How to modify the reports and create custom queries.
• Azure Key Vault
• Azure Kubernetes Service (AKS)
• Azure SQL Databases
• Azure Storage Account
• Azure Web Application Firewall (WAF) (formerly Microsoft WAF)
• Domain name server
• Dynamics 365
• Microsoft 365 Defender, including Microsoft 365 Defender incidents and raw data from Microsoft 365 Defender for Endpoint
• Microsoft Cloud App Security (MCAS)
• Microsoft Defender for Endpoint (formerly Microsoft Defender Advanced Threat Protection)
• Microsoft Defender for Identity (formerly Azure Advanced Threat Protection)
• Microsoft Defender for Office 365 (formerly Office 365 Advanced Threat Protection)
• Office 365, including Microsoft Teams
• Security events (Windows). For more information, see Insecure protocols workbook setup.
• Windows firewall

Find the support contact for a data connector

To find the support contact information for a data connector:

1.In the Azure Sentinel left menu, select Data connectors.

2. Select the connector you want to find support information for.

3. View the Supported by field on the side panel for the data connector.

The Supported by field has a support contact link you can use to access support and maintenance for the selected data connector.