Data ingestion from Microsoft onprem data sources

[pavankemi]

Hi,

How can the logs be collected from the below log sources which are On prem sources

Microsoft Exchange

Microsoft Skype

Microsoft Lync

Microsoft SharePoint

Microsoft SCCM (server)

Microsoft Forefront TMG

[#2]

@pavankemi There are instructions for SCCM on this page, but that seems to be the only item listed:

Azure Sentinel: The connectors grand (CEF, Syslog, Direct, Agent, Custom and more) - Microsoft Tech ...

If the information is not stored in the Windows Event Logs (which, unfortunately, appears to be the case), you will probably need to write your own custom data connector.  This page gives you some information on how to do that:

Azure Monitor HTTP Data Collector API - Azure Monitor | Microsoft Docs