Forum Discussion

ahmadzuhd's avatar
ahmadzuhd
Copper Contributor
Jun 22, 2023

Azure Sentinel - Connector for Mysql

Has anyone been able to successfully integrate MySQL database auditing with Sentinel? Additionally, I'm interested to know if anyone has information about future plans regarding the integration with Sentinel's Content Hub.

data collection
siem
  • camc's avatar
    camc
    Copper Contributor
    Jul 25, 2023

    ahmadzuhd This is not a native capability within Azure Sentinel, but you can use the Azure Monitor HTTP Data Collector API, here are some general steps to follow - 

    1. Create a data collection rule (DCR) in Azure Sentinel, The DCR will define the format of the logs that you will be sending from your MySQL server.
    2. Create an API key for your Azure Sentinel workspace. The API key will be used to authenticate your requests to the Azure Monitor HTTP Data Collector API.
    3. Configure your MySQL server to send logs to the Azure Monitor HTTP Data Collector API.

    How you send the logs to the API is up to you, let me know if this will work for you.

     

    Thanks.

     

Resources