Forum Discussion
Ingesting Logs through Azure Private Link
I believe yes, this is a known architectural limitation, for Sentinel/Log Analytics ingestion over Private Link, it may require Azure Monitor Private Link Scope (AMPLS) + Data Collection Endpoint (DCE) + DCR / Logs Ingestion API. For API sources that are reachable only from your own private network, CCF is generally not the right fit, because CCF is a fully SaaS connector service rather than something that runs inside your VNet.
Use Azure Private Link to connect networks to Azure Monitor - Azure Monitor | Microsoft Learn
Logs Ingestion API in Azure Monitor - Azure Monitor | Microsoft Learn
Create a codeless connector for Microsoft Sentinel | Microsoft Learn
Is there any location where there are pre-made Logs Ingestion API config? Since Azure Functions is also being deprecated as well, this appears to be the only solution for getting API log sources into Sentinel.