Forum Discussion

Copper Contributor

Mar 16, 2020

How to filter security events only from Event Hub and send to SIEM

One of my customer is trying to integrate IBM QRADAR SIEM with Azure. They would like to send all data from various sources to Event Hub and the data would be related to Azure AD, Azure VMs, Key Vaul...

tal_rosler

Microsoft

May 14, 2020

Hi palchak ,

Your customer can use Microsoft Graph connector for QRadar to send Azure Security Center data easier to QRadar. Please read more details here:

https://techcommunity.microsoft.com/t5/azure-security-center/accessing-azure-security-center-alerts-in-splunk-using-graph/ba-p/938228

Thanks,

Tal Rosler,

Azure Security Center.