Sending Application logs stored in Azure file storage to Azure Sentinel

Question

Hi All,&nbsp;We have an application hosted in Azure and the application logs are getting stored in Azure File Storage. I need to read the files from Azure File Storage and build a parser and get the logs to Azure Sentinel as a custom log source.&nbsp;&nbsp;I am relatively new to Azure and I am not sure of any custom log integrations method. On checking the documentation I got to know that I can use methods like Logic Apps, PowerShell, or Azure functions to do this.&nbsp;Can somebody help by pointing me to some discussion posts that can help me in this?&nbsp;&nbsp;Regards,Mitesh Agrawal

mariasousavaladas · Answer

msagrawal15&nbsp;are these logs you are referring to disks in a VM? In that case, you could install AMA and collect them&nbsp;

clive_watson · Answer

msagrawal15&nbsp;Hi, please see:https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/microsoft-ignite-2021-blob-and-file-storage-investigations/ba-p/2175138File Logs are included in the built-in Connector&nbsp;

Forum Discussion

Sending Application logs stored in Azure file storage to Azure Sentinel

2 Replies

Resources