|
1 | 1 | ---
|
2 | 2 | title: 'Quickstart: Onboard in Microsoft Sentinel'
|
3 |
| -description: In this quickstart, you enable Microsoft Sentinel, and connect data sources to monitor and protect your environment. |
| 3 | +description: In this quickstart, you enable Microsoft Sentinel, and set up data connectors to monitor and protect your environment. |
4 | 4 | author: yelevin
|
5 | 5 | ms.author: yelevin
|
6 | 6 | ms.topic: quickstart
|
7 | 7 | ms.date: 07/14/2022
|
8 | 8 | ms.custom: references_regions, ignite-fall-2021, mode-other
|
9 |
| -#Customer intent: As a security operator, connect all my data sources in one place so I can monitor and protect my environment. |
| 9 | +#Customer intent: As a security operator, set up data connectors in one place so I can monitor and protect my environment. |
10 | 10 | ---
|
11 | 11 |
|
12 | 12 | # Quickstart: Onboard Microsoft Sentinel
|
13 | 13 |
|
14 |
| -In this quickstart, you enable Microsoft Sentinel, and then connect your data sources to monitor and protect your environment. After you connect your data sources, you choose from a gallery of expertly created workbooks that surface insights based on your data. These workbooks can be easily customized to your needs. |
| 14 | +In this quickstart, you enable Microsoft Sentinel, and then set up data connectors to monitor and protect your environment. After you connect your data sources using data connectors, you choose from a gallery of expertly created workbooks that surface insights based on your data. These workbooks can be easily customized to your needs. |
15 | 15 |
|
16 | 16 | Microsoft Sentinel comes with many connectors for Microsoft products, for example, the Microsoft 365 Defender service-to-service connector. You can also enable built-in connectors for non-Microsoft products, for example, Syslog or Common Event Format (CEF). [Learn more about data connectors](connect-data-sources.md).
|
17 | 17 |
|
@@ -71,24 +71,22 @@ Microsoft Sentinel comes with many connectors for Microsoft products, for exampl
|
71 | 71 |
|
72 | 72 | 1. Select **Add Microsoft Sentinel**.
|
73 | 73 |
|
74 |
| -## Connect data sources |
| 74 | +## Set up data connectors |
75 | 75 |
|
76 | 76 | Microsoft Sentinel ingests data from services and apps by connecting to the service and forwarding the events and logs to Microsoft Sentinel.
|
77 | 77 |
|
78 | 78 | - For physical and virtual machines, you can install the Log Analytics agent that collects the logs and forwards them to Microsoft Sentinel.
|
79 | 79 | - For firewalls and proxies, Microsoft Sentinel installs the Log Analytics agent on a Linux Syslog server, from which the agent collects the log files and forwards them to Microsoft Sentinel.
|
80 | 80 |
|
81 |
| -1. From the main menu, select **Data connectors**. This opens the data connectors gallery. |
82 |
| - |
83 |
| -1. The gallery is a list of all the data sources you can connect. Select a data source and then the **Open connector page** button. |
84 |
| - |
| 81 | +1. From the main menu, select **Data connectors**. This opens the data connectors gallery. |
| 82 | +1. Select a data connector, and then select the **Open connector page** button. |
85 | 83 | 1. The connector page shows instructions for configuring the connector, and any other instructions that may be necessary.
|
86 | 84 |
|
87 |
| - For example, if you select the **Azure Active Directory** data source, which lets you stream logs from Azure AD into Microsoft Sentinel, you can select what type of logs you want to get - sign-in logs and/or audit logs. <br>Follow the installation instructions. To learn more, [read the relevant connection guide](data-connectors-reference.md) or learn about [Microsoft Sentinel data connectors](connect-data-sources.md). |
| 85 | + For example, if you select the **Azure Active Directory** data connector, which lets you stream logs from Azure AD into Microsoft Sentinel, you can select what type of logs you want to get - sign-in logs and/or audit logs. <br>Follow the installation instructions. To learn more, [read the relevant connection guide](data-connectors-reference.md) or learn about [Microsoft Sentinel data connectors](connect-data-sources.md). |
88 | 86 |
|
89 | 87 | 1. The **Next steps** tab on the connector page shows relevant built-in workbooks, sample queries, and analytics rule templates that accompany the data connector. You can use these as-is or modify them - either way you can immediately get interesting insights across your data.
|
90 | 88 |
|
91 |
| -After your data sources are connected, your data starts streaming into Microsoft Sentinel and is ready for you to start working with. You can view the logs in the [built-in workbooks](get-visibility.md) and start building queries in Log Analytics to [investigate the data](investigate-cases.md). |
| 89 | +After you set up your data connectors, your data starts streaming into Microsoft Sentinel and is ready for you to start working with. You can view the logs in the [built-in workbooks](get-visibility.md) and start building queries in Log Analytics to [investigate the data](investigate-cases.md). |
92 | 90 |
|
93 | 91 | Review the [data collection best practices](best-practices-data.md).
|
94 | 92 |
|
|
0 commit comments