Sentinel - mikrotik syslog parser

[MischaPrinc1880]

Exist any way how import Mikrotik firewall log ? My Sentinel cannot correct parse input. The main data are in "SyslogMessage" cell. Some reason ?

[#2]

You'll need to parse that data, some examples from other vendors are here: https://github.com/search?q=repo%3AAzure%2FAzure-Sentinel+syslog+parser+path%3A%2F%5EParsers%5C%2F%2... When you have a working query to parse the data, you can save it as a function https://github.com/search?q=repo%3AAzure%2FAzure-Sentinel+syslog+parser+path%3A%2F%5EParsers%5C%2F%2...