Azure Sentinel API Documentation

[Pavan_Gelli]

Hi Team,

We have requirement to integrate azure sentinel with IBM Qradar/IBM Resilient for centralized incident management. I.e. we will send all the incidents generated in azure sentinel to IBM Qradar/IBM Resilient.

Do we have Azure Sentinel API's and documentation available ? Please confirm. Tx

[#2]

Hello!

You probably check out the Qradar documentation: but other then this way I dont know and if you find a way please let me know!
https://www.ibm.com/support/knowledgecenter/SS42VS_DSM/com.ibm.dsm.doc/t_dsm_guide_microsoft_azure_e...


Thanks!

[#3]

@ericjk4 I would agree.  If there is an API you can call from Sentinel you can use a Logic App to send the data to that API to generate the incident.

[#4]

Have you explored the option of using the graph API?

[#5]

@Pavan_Gelli : 

@YanivSh and @Alp Babayigit just published a great blog on the topic: 

Sending alerts enriched with supporting events from Azure to 3rd party SIEMs

~ Ofer

[#6]

@Ofer_Shezaf Do you have the link to this blog post ?!

[#7]

https://techcommunity.microsoft.com/t5/azure-sentinel/azure-sentinel-side-by-side-with-qradar/ba-p/1...