Blog Post

Microsoft Sentinel Blog

5 MIN READ

Azure Sentinel Side-by-Side with Splunk via EventHub

Microsoft

May 07, 2021

As highlighted in my last blog posts (for Splunk and Qradar) about Azure Sentinel’s Side-by-Side approach with 3 rd Party SIEM, there are some reasons that enterprises leverage Side-by-Side architec...

Updated Apr 29, 2021

Version 1.0

Alp Babayigit

Microsoft

Joined November 08, 2018

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

FabRiAzure240

Copper Contributor

Nov 09, 2023

Hello,

Great document it was very helpful.

I'm trying to implement this solution to my test environment, but i have problems in generating the JSON for Parsing Sentinel incident and send it to Event Hub. I need send all the information related to incident. Could you help me please?