Aug 22 2023 01:23 PM
Looking to get our AWF WAF logs into Sentinel but not really sure which route to take. Looking at the S3 data connector, there's only 4 data tables (VPCFlow, Guardduty, Cloudtrails, Cloudwatch) which makes me think I can't send these logs to an S3 bucket and have Sentinel ingest them as the logs won't be supported.
What are my options here as far as getting these logs into the SIEM? Custom connectors?
Thanks.
Sep 14 2023 09:36 PM