Blog Post

Core Infrastructure and Security Blog
16 MIN READ

Creating a Custom Sentinel GCP WAF /Load balancer Data Connector

SantoshPargi's avatar
SantoshPargi
Icon for Microsoft rankMicrosoft
Jan 06, 2025

Google Cloud Platform (GCP) is a comprehensive suite of cloud computing services. Integrating GCP with Azure Sentinel enhances security monitoring and management by centralizing logs and alerts. While the existing GCP Pub/Sub connector ingests only audit logs, a custom data connector can be built using an Azure Resource Manager (ARM) template to ingest a broader range of logs like WAF /Load balancer logs.

Understanding ARM Templates ARM templates are JSON files that define the resources needed for your applications. They allow for infrastructure as code, making deployment and management more efficie...
Updated Jan 08, 2025
Version 2.0
SantoshPargi
DebacManikandan's avatar
DebacManikandan
Copper Contributor
Jan 06, 2025

Where can I find the ARM template for the above solution? Apologies, I couldn't find any attachments/links in the article (nor in GitHub)

  • SantoshPargi's avatar
    SantoshPargi
    Icon for Microsoft rankMicrosoft
    Jan 08, 2025

    You can see updated section with the ARM template at the end of the document.