Skip to content

Commit 96f4f20

Browse files
authored
Merge pull request #169233 from batamig/codeless
adding codeless connector docs
2 parents 2f40ba6 + 4b8cc99 commit 96f4f20

15 files changed

+722
-42
lines changed

articles/sentinel/TOC.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -182,6 +182,8 @@
182182
href: connect-logstash.md
183183
- name: Create a custom connector
184184
href: create-custom-connector.md
185+
- name: Create a codeless connector
186+
href: create-codeless-connector.md
185187
- name: Connect Azure Stack VMs
186188
href: connect-azure-stack.md
187189
- name: Monitor data connector health

articles/sentinel/connect-aws.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -252,7 +252,10 @@ Permissions policies that must be applied to the [Microsoft Sentinel role you cr
252252

253253
1. **Verify that messages are being read from the SQS queue.**
254254

255-
Check the "Number of Messages Received" and "Number of Messages Deleted" widgets in the queue dashboard. If there are no notifications under messages deleted," then check health messages. It's possible that some permissions are missing. Check your IAM configurations.
255+
Check the "Number of Messages Received" and "Number of Messages Deleted" widgets in the queue dashboard. If there are no notifications under messages deleted," then check health messages. It's possible that some permissions are missing. Check your IAM configurations.
256+
257+
For more information, see [Monitor the health of your data connectors](monitor-data-connector-health.md).
258+
256259

257260
# [CloudTrail connector (legacy)](#tab/ct)
258261

articles/sentinel/create-codeless-connector.md

Lines changed: 645 additions & 0 deletions
Large diffs are not rendered by default.

articles/sentinel/create-custom-connector.md

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn about available resources for creating custom connectors for
44
author: batamig
55
ms.topic: conceptual
66
ms.custom: mvc, ignite-fall-2021
7-
ms.date: 11/09/2021
7+
ms.date: 11/21/2021
88
ms.author: bagol
99
---
1010

@@ -24,12 +24,13 @@ The following table compares essential details about each method for creating cu
2424

2525
|Method description |Capability | Serverless |Complexity |
2626
|---------|---------|---------|---------|
27+
| **[Codeless Connector Platform (CCP)](#connect-with-the-codeless-connector-platform)** <br>Best for less technical audiences to create SaaS connectors using a configuration file instead of advanced development. | Supports all capabilities available with the code. | Yes | Low; simple, codeless development
2728
|**[Log Analytics Agent](#connect-with-the-log-analytics-agent)** <br>Best for collecting files from on-premises and IaaS sources | File collection only | No |Low |
2829
|**[Logstash](#connect-with-logstash)** <br>Best for on-premises and IaaS sources, any source for which a plugin is available, and organizations already familiar with Logstash | Available plugins, plus custom plugin, capabilities provide significant flexibility. | No; requires a VM or VM cluster to run | Low; supports many scenarios with plugins |
2930
|**[Logic Apps](#connect-with-logic-apps)** <br>High cost; avoid for high-volume data <br>Best for low-volume cloud sources | Codeless programming allows for limited flexibility, without support for implementing algorithms.<br><br> If no available action already supports your requirements, creating a custom action may add complexity. | Yes | Low; simple, codeless development |
3031
|**[PowerShell](#connect-with-powershell)** <br>Best for prototyping and periodic file uploads | Direct support for file collection. <br><br>PowerShell can be used to collect more sources, but will require coding and configuring the script as a service. |No | Low |
3132
|**[Log Analytics API](#connect-with-the-log-analytics-api)** <br>Best for ISVs implementing integration, and for unique collection requirements | Supports all capabilities available with the code. | Depends on the implementation | High |
32-
|**[Azure Functions](#connect-with-azure-functions)** Best for high-volume cloud sources, and for unique collection requirements | Supports all capabilities available with the code. | Yes | High; requires programming knowledge |
33+
|**[Azure Functions](#connect-with-azure-functions)** <br>Best for high-volume cloud sources, and for unique collection requirements | Supports all capabilities available with the code. | Yes | High; requires programming knowledge |
3334
| | | |
3435

3536
> [!TIP]
@@ -39,6 +40,14 @@ The following table compares essential details about each method for creating cu
3940
> - Office 365 (Microsoft Sentinel GitHub community): [Logic App connector](https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Get-O365Data) | [Azure Function connector](https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/O365%20Data)
4041
>
4142
43+
## Connect with the Codeless Connector Platform
44+
45+
The Codeless Connector Platform (CCP) provides a configuration file that can be used by both customers and partners, and then deployed to your own workspace, or as a solution to Microsoft Sentinel's solution's gallery.
46+
47+
Connectors created using the CCP are fully SaaS, without any requirements for service installations, and also include health monitoring and full support from Microsoft Sentinel.
48+
49+
For more information, see [Create a codeless connector for Microsoft Sentinel](create-codeless-connector.md).
50+
4251
## Connect with the Log Analytics agent
4352

4453
If your data source delivers events in files, we recommend that you use the Azure Monitor Log Analytics agent to create your custom connector.
549 KB
Loading
7.44 KB
Loading
53.1 KB
Loading
139 KB
Loading
58.4 KB
Loading
57.4 KB
Loading

0 commit comments

Comments
 (0)