Forum Discussion

Copper Contributor

Jul 26, 2020

Apply metadata to logs to distinguish source

Hi - I've added two Okta environments to Sentinel but there isnt anything in the log themselves to identify the source environment. Is there not some way in Sentinel to tag some metadata to the log s...

GaryBushey

Bronze Contributor

shay126 Not being an Okta expert I don't know. I don't have access to the table that Okta writes to in order to see what the fields look like.

shay126

Copper Contributor

Jul 29, 2020

GaryBushey

Thanks for the reply Gary. I think its more of a Sentinel thing though. Ideally under the Sentinel connector it would show its connected to X and Y Okta environments. I did look at logging in the function app and saw it listing an HTTP status of 200... so i think its working...

GaryBushey
Bronze Contributor
Jul 29, 2020
shay126 There is nothing (yet) in Azure Sentinel that would do this.
- Ofer_Shezaf
  Microsoft
  Aug 02, 2020
  GaryBushey shay126 : I beleve YanivSh is working on an update to the connector that ass the Okta domain.
  - YanivSh
    Microsoft
    Aug 03, 2020
    Ofer_Shezaf thanks for adding me.
    
    indeed i added Github issue to solve this issue https://github.com/Azure/Azure-Sentinel/issues/925
    
    will update once it will publish

Forum Discussion

Apply metadata to logs to distinguish source

Share

Resources