You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/data-connectors/slack-audit-using-azure-function.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,14 +1,14 @@
1
1
---
2
-
title: "Slack Audit (using Azure Function) connector for Microsoft Sentinel"
3
-
description: "Learn how to install the connector Slack Audit (using Azure Function) to connect your data source to Microsoft Sentinel."
2
+
title: "Slack Audit (using Azure Functions) connector for Microsoft Sentinel"
3
+
description: "Learn how to install the connector Slack Audit (using Azure Functions) to connect your data source to Microsoft Sentinel."
4
4
author: cwatson-cat
5
5
ms.topic: how-to
6
6
ms.date: 02/23/2023
7
7
ms.service: microsoft-sentinel
8
8
ms.author: cwatson
9
9
---
10
10
11
-
# Slack Audit (using Azure Function) connector for Microsoft Sentinel
11
+
# Slack Audit (using Azure Functions) connector for Microsoft Sentinel
12
12
13
13
The [Slack](https://slack.com) Audit data connector provides the capability to ingest [Slack Audit Records](https://api.slack.com/admins/audit-logs) events into Microsoft Sentinel through the REST API. Refer to [API documentation](https://api.slack.com/admins/audit-logs#the_audit_event) for more information. The connector provides ability to get events which helps to examine potential security risks, analyze your team's use of collaboration, diagnose configuration problems and more.
14
14
@@ -17,7 +17,7 @@ The [Slack](https://slack.com) Audit data connector provides the capability to i
|**Kusto function url**|https://aka.ms/sentinel-SlackAuditAPI-parser|
23
23
|**Log Analytics table(s)**| SlackAudit_CL<br/> |
@@ -37,7 +37,7 @@ SlackAudit
37
37
38
38
## Prerequisites
39
39
40
-
To integrate with Slack Audit (using Azure Function) make sure you have:
40
+
To integrate with Slack Audit (using Azure Functions) make sure you have:
41
41
42
42
-**Microsoft.Web/sites permissions**: Read and write permissions to Azure Functions to create a Function App is required. [See the documentation to learn more about Azure Functions](https://learn.microsoft.com/azure/azure-functions/).
43
43
-**REST API Credentials/permissions**: **SlackAPIBearerToken** is required for REST API. [See the documentation to learn more about API](https://api.slack.com/web#authentication). Check all [requirements and follow the instructions](https://api.slack.com/web#authentication) for obtaining credentials.
0 commit comments