Forum Discussion
Azure Sentinel Built-in Data Connector Does not Ingest Logs from Storage Container into Log Table
Hello ParsaZ,
This connector is under Preview and there can be bugs with it.
Did you create a new Storage Account for the new Data connector?
- ParsaZJan 04, 2023Copper Contributor
mikhailf Yes. We tried 2 different storage account. But it problem is the same. The logs are being pushed into them. But, there is no log in the Cloudflare_CL table even after automatic deployment of the data connector using ARM template. We reverted the changes on the log source and even created new low push jobs on the source, but the issue persists and the logs do not appear in the log table.
- mikhailfJan 04, 2023Iron Contributor
Hello ParsaZ,
By deploying the data connector you deploy Azure Function. Please, find this function and under "Overview" verify that the Function Execution Count is not 0.
- ParsaZJan 05, 2023Copper Contributor
We created another container specifically for the firewall logs. The logs are being pushed in the container but again, not in the log table. And as we check the related function app's execution count, it is more than 0. But still no logs.