Skip to content

Commit 04f5d69

Browse files
authored
Merge pull request #292985 from bwren/sentinel-connectors
Azure Monitor updates to Sentinel transformation content
2 parents f695f18 + 217c269 commit 04f5d69

File tree

4 files changed

+35
-97
lines changed

4 files changed

+35
-97
lines changed

articles/sentinel/connect-logstash-data-connection-rules.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ With the new plugin, you can:
2828
- Perform ingestion-time transformations like filtering or enrichment.
2929
- Ingest custom logs into a custom table, or ingest a Syslog input stream into the Log Analytics Syslog table.
3030

31-
Ingestion into standard tables is limited only to [standard tables supported for custom logs ingestion](data-transformation.md#data-transformation-support-for-custom-data-connectors).
31+
Ingestion into standard tables is limited only to [standard tables supported for custom logs ingestion](/azure/azure-monitor/logs/logs-ingestion-api-overview#supported-tables).
3232

3333
To learn more about working with the Logstash data collection engine, see [Getting started with Logstash](https://www.elastic.co/guide/en/logstash/current/getting-started-with-logstash.html).
3434

@@ -497,7 +497,7 @@ For more information on *plugin_flush_interval*, see the [Optional Configuration
497497

498498
## Limitations
499499

500-
- Ingestion into standard tables is limited only to [standard tables supported for custom logs ingestion](data-transformation.md#data-transformation-support-for-custom-data-connectors).
500+
- Ingestion into standard tables is limited only to [standard tables supported for custom logs ingestion](/azure/azure-monitor/logs/logs-ingestion-api-overview#supported-tables).
501501
- The columns of the input stream in the `streamDeclarations` property must start with a letter. If you start a column with other characters (for example `@` or `_`), the operation fails.
502502
- The `TimeGenerated` datetime field is required. You must include this field in the KQL transform.
503503
- For additional possible issues, review the [troubleshooting section](/azure/azure-monitor/logs/tutorial-logs-ingestion-code#troubleshooting) in the tutorial.

0 commit comments

Comments
 (0)