Forum Discussion
MischaPrinc1880
Sep 21, 2023Copper Contributor
Sentinel - mikrotik syslog parser
Exist any way how import Mikrotik firewall log ? My Sentinel cannot correct parse input. The main data are in "SyslogMessage" cell. Some reason ?
- Clive_WatsonBronze ContributorYou'll need to parse that data, some examples from other vendors are here: https://github.com/search?q=repo%3AAzure%2FAzure-Sentinel+syslog+parser+path%3A%2F%5EParsers%5C%2F%2F&type=code When you have a working query to parse the data, you can save it as a function https://github.com/search?q=repo%3AAzure%2FAzure-Sentinel+syslog+parser+path%3A%2F%5EParsers%5C%2F%2F&type=code