Skip to content

Commit 4d4f1ec

Browse files
committed
Fixing errors and updating terminology
1 parent e2b15c7 commit 4d4f1ec

File tree

2 files changed

+9
-11
lines changed

2 files changed

+9
-11
lines changed

articles/sentinel/connect-data-sources.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.author: yelevin
1313

1414
After you onboard Microsoft Sentinel into your workspace, you can use data connectors to start ingesting your data into Microsoft Sentinel. Microsoft Sentinel comes with many out of the box connectors for Microsoft services, which you can integrate in real time. For example, the Microsoft 365 Defender connector is a [service-to-service connector](#service-to-service-integration-for-data-connectors) that integrates data from Office 365, Azure Active Directory (Azure AD), Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps.
1515

16-
You can also enable built-in connectors to the broader security ecosystem for non-Microsoft products. For example, you can use [Syslog](#syslog), [Common Event Format (CEF)](#common-event-format-cef), or [REST APIs](#rest-api-integration) to connect your data sources with Microsoft Sentinel.
16+
You can also enable built-in connectors to the broader security ecosystem for non-Microsoft products. For example, you can use [Syslog](#syslog), [Common Event Format (CEF)](#common-event-format-cef), or [REST APIs](#rest-api-integration-for-data-connectors) to connect your data sources with Microsoft Sentinel.
1717

1818
Learn about [types of Microsoft Sentinel data connectors](data-connectors-reference.md) or learn about the [Microsoft Sentinel solutions catalog](sentinel-solutions-catalog.md).
1919

articles/sentinel/quickstart-onboard.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,17 @@
11
---
22
title: 'Quickstart: Onboard in Microsoft Sentinel'
3-
description: In this quickstart, you enable Microsoft Sentinel, and connect data sources to monitor and protect your environment.
3+
description: In this quickstart, you enable Microsoft Sentinel, and set up data connectors to monitor and protect your environment.
44
author: yelevin
55
ms.author: yelevin
66
ms.topic: quickstart
77
ms.date: 07/14/2022
88
ms.custom: references_regions, ignite-fall-2021, mode-other
9-
#Customer intent: As a security operator, connect all my data sources in one place so I can monitor and protect my environment.
9+
#Customer intent: As a security operator, set up data connectors in one place so I can monitor and protect my environment.
1010
---
1111

1212
# Quickstart: Onboard Microsoft Sentinel
1313

14-
In this quickstart, you enable Microsoft Sentinel, and then connect your data sources to monitor and protect your environment. After you connect your data sources, you choose from a gallery of expertly created workbooks that surface insights based on your data. These workbooks can be easily customized to your needs.
14+
In this quickstart, you enable Microsoft Sentinel, and then set up data connectors to monitor and protect your environment. After you connect your data sources using data connectors, you choose from a gallery of expertly created workbooks that surface insights based on your data. These workbooks can be easily customized to your needs.
1515

1616
Microsoft Sentinel comes with many connectors for Microsoft products, for example, the Microsoft 365 Defender service-to-service connector. You can also enable built-in connectors for non-Microsoft products, for example, Syslog or Common Event Format (CEF). [Learn more about data connectors](connect-data-sources.md).
1717

@@ -71,24 +71,22 @@ Microsoft Sentinel comes with many connectors for Microsoft products, for exampl
7171
7272
1. Select **Add Microsoft Sentinel**.
7373

74-
## Connect data sources
74+
## Set up data connectors
7575

7676
Microsoft Sentinel ingests data from services and apps by connecting to the service and forwarding the events and logs to Microsoft Sentinel.
7777

7878
- For physical and virtual machines, you can install the Log Analytics agent that collects the logs and forwards them to Microsoft Sentinel.
7979
- For firewalls and proxies, Microsoft Sentinel installs the Log Analytics agent on a Linux Syslog server, from which the agent collects the log files and forwards them to Microsoft Sentinel.
8080

81-
1. From the main menu, select **Data connectors**. This opens the data connectors gallery.
82-
83-
1. The gallery is a list of all the data sources you can connect. Select a data source and then the **Open connector page** button.
84-
81+
1. From the main menu, select **Data connectors**. This opens the data connectors gallery.
82+
1. Select a data connector, and then select the **Open connector page** button.
8583
1. The connector page shows instructions for configuring the connector, and any other instructions that may be necessary.
8684

87-
For example, if you select the **Azure Active Directory** data source, which lets you stream logs from Azure AD into Microsoft Sentinel, you can select what type of logs you want to get - sign-in logs and/or audit logs. <br>Follow the installation instructions. To learn more, [read the relevant connection guide](data-connectors-reference.md) or learn about [Microsoft Sentinel data connectors](connect-data-sources.md).
85+
For example, if you select the **Azure Active Directory** data connector, which lets you stream logs from Azure AD into Microsoft Sentinel, you can select what type of logs you want to get - sign-in logs and/or audit logs. <br>Follow the installation instructions. To learn more, [read the relevant connection guide](data-connectors-reference.md) or learn about [Microsoft Sentinel data connectors](connect-data-sources.md).
8886

8987
1. The **Next steps** tab on the connector page shows relevant built-in workbooks, sample queries, and analytics rule templates that accompany the data connector. You can use these as-is or modify them - either way you can immediately get interesting insights across your data.
9088

91-
After your data sources are connected, your data starts streaming into Microsoft Sentinel and is ready for you to start working with. You can view the logs in the [built-in workbooks](get-visibility.md) and start building queries in Log Analytics to [investigate the data](investigate-cases.md).
89+
After you set up your data connectors, your data starts streaming into Microsoft Sentinel and is ready for you to start working with. You can view the logs in the [built-in workbooks](get-visibility.md) and start building queries in Log Analytics to [investigate the data](investigate-cases.md).
9290

9391
Review the [data collection best practices](best-practices-data.md).
9492

0 commit comments

Comments
 (0)