You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
HYAS Protect provide logs based on reputation values - Blocked, Malicious, Permitted, Suspicious.
15
15
16
-
This is autogenerated content. For changes, contact the solution provider.
16
+
It's autogenerated content. For changes, contact the solution provider.
17
17
18
18
## Connector attributes
19
19
@@ -36,7 +36,7 @@ HYASProtectDnsSecurityLogs_CL
36
36
37
37
## Prerequisites
38
38
39
-
To integrate with HYAS Protect (using Azure Functions) make sure you have:
39
+
To integrate with HYAS Protect (using Azure Functions) make sure, you have:
40
40
41
41
-**Microsoft.Web/sites permissions**: Read and write permissions to Azure Functions to create a Function App is required. [See the documentation to learn more about Azure Functions](/azure/azure-functions/).
42
42
-**REST API Credentials/permissions**: **HYAS API Key** is required for making API calls.
@@ -56,7 +56,7 @@ To integrate with HYAS Protect (using Azure Functions) make sure you have:
56
56
57
57
Option 1 - Azure Resource Manager (ARM) Template
58
58
59
-
Use this method for automated deployment of the HYAS Protect data connector using an ARM Tempate.
59
+
Use this method for automated deployment of the HYAS Protect data connector using an ARM Template.
60
60
61
61
1. Click the **Deploy to Azure** button below.
62
62
@@ -89,14 +89,14 @@ If you're already signed in, go to the next step.
89
89
90
90
c. Select **Create new Function App in Azure** (Don't choose the Advanced option)
91
91
92
-
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (e.g. HyasProtectLogsXXX).
92
+
d. **Enter a globally unique name for the function app:** Type a name that is valid in a URL path. The name you type is validated to make sure that it's unique in Azure Functions. (for example, HyasProtectLogsXXX).
93
93
94
94
e. **Select a runtime:** Choose Python 3.8.
95
95
96
-
f. Select a location for new resources. For better performance and lower costs choose the same [region](https://azure.microsoft.com/regions/) where Microsoft sentinel is located.
96
+
f. Select a location for new resources. For better performance and lower costs, choose the same [region](https://azure.microsoft.com/regions/) where Microsoft Sentinel is located.
97
97
98
-
6. Deployment will begin. A notification is displayed after your function app is created and the deployment package is applied.
99
-
7. Go to Azure Portal for the Function App configuration.
98
+
6. Deployment begins. A notification is displayed after your function app is created and the deployment package is applied.
99
+
7. Go to Azure portal for the Function App configuration.
100
100
101
101
102
102
**2. Configure the Function App**
@@ -111,7 +111,3 @@ If you're already signed in, go to the next step.
111
111
. Once all application settings have been entered, click **Save**.
112
112
113
113
114
-
115
-
## Next steps
116
-
117
-
For more information, go to the [related solution](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/hyas.microsoft-sentinel-solution-hyas-protect?tab=Overview) in the Azure Marketplace.
Copy file name to clipboardExpand all lines: articles/sentinel/unified-connector-cef-device.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -129,7 +129,7 @@ Set your security solution to send syslog messages in CEF format to the proxy ma
129
129
130
130
Set your security solution to send syslog messages in CEF format to the proxy machine. Make sure to send the logs to port 514 TCP on the machine IP address.
131
131
132
-
1. Follow the directions to install the [ExtraHop Detection SIEM Connector bundle](https://learn.extrahop.com/extrahop-detection-siem-connector-bundle) on your Reveal(x) system. The **SIEM Connector** is required for this integration.
132
+
1. Follow the directions to install the [ExtraHop Detection SIEM Connector bundle](https://learn.extrahop.com/) on your Reveal(x) system. The **SIEM Connector** is required for this integration.
133
133
1. Enable the trigger for **ExtraHop Detection SIEM Connector - CEF**.
134
134
1. Update the trigger with the ODS syslog targets you created.
0 commit comments