Forum Discussion

BaselFawal's avatar
BaselFawal
Brass Contributor
Nov 30, 2022

Enabling VMware ESXi (Preview) data connector

Hi,

I have ingested ESXi server logs to Sentinel through on-premises log forwarder.

I could see the logs in syslog table in Sentinel, but I don't see the VMware ESXi data connector enabled, also the VMwareESXi table is not there

Any additional steps I have to do to enable this VMware ESXi data connector?

Also what is the recommended facilities to enable for this syslog type.

Data Collection
Log Data
siem
  • GBushey's avatar
    GBushey
    Icon for Microsoft rankMicrosoft
    Dec 01, 2022
    There is no additional "VMwareESXi" table that gets created. All the data is sent to the "Syslog" table and you can filter that by your system. It appears that the sample queries that are listed with the Data Connector are incorrect

Resources