Azure Sentinel: The connectors grand (CEF, Syslog, Direct, Agent, Custom and more)

Chi_Duong : Yes, but it would require direct edit to the agent and syslog daemon configuration files.

Update (Dec 26th 2019): You no longer need to directly edit the configuration files:

1. Install the CEF connector VM using the instructions in the connector page.
2. Configure the facilities & priorities that you want to get Syslog messages of using Settings -> Workspace Settings -> Advanced Settings -> Data -> Syslog
3. Make sure that the facility/priority combination used by your CEF source is not configured for Syslog collection

That’s it. If #3 is not doable, we will have to revert to config file editing on the VM.