Blog Post

Microsoft Sentinel Blog

5 MIN READ

Azure Sentinel Side-by-Side with Splunk via EventHub

Microsoft

May 07, 2021

As highlighted in my last blog posts (for Splunk and Qradar) about Azure Sentinel’s Side-by-Side approach with 3 rd Party SIEM, there are some reasons that enterprises leverage Side-by-Side architec...

Updated Apr 29, 2021

Version 1.0

Alp Babayigit

Microsoft

Joined November 08, 2018

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.

FabRiAzure240

Copper Contributor

Nov 09, 2023

Hello,

Great document it was very helpful.

I'm trying to implement this solution to my test environment, but i have problems in generating the JSON for Parsing Sentinel incident and send it to Event Hub. I need send all the information related to incident. Could you help me please?