Extending Sentinel Data Integration: Azure Blob Storage Support for CCF Connectors
As organizations scale their security operations, the ability to ingest, process, and analyze high volumes of data reliably becomes increasingly critical. Microsoft Sentinel continues to expand its ecosystem through the Codeless Connector Framework (CCF), enabling ISVs to build and deliver integrations with Sentinel faster while simplifying deployment for customers. Today, CCF extends even further with support for Azure Blob Storage, introducing a new pattern for how data can be delivered into Sentinel. Expanding Connector Patterns with Azure Blob Storage CCF has traditionally enabled connectors that integrate directly with partner APIs and data sources. With this latest enhancement, ISVs can now build connectors that read data from Azure Blob Storage—unlocking new flexibility in how security data is collected and delivered. In this model, an ISV writes data to an Azure Blob Storage account. The Sentinel connector then reads from that storage layer, using Azure-native components such as Event Grid and storage queues to process events and forward them through data collection rules (DCR) into Log Analytics workspace. This approach introduces a durable data layer between the data source and Sentinel, enabling more resilient and scalable ingestion scenarios. Read the full announcement here: Extending Sentinel Data Integration: Azure Blob Storage Support for CCF Connectors Original Publication: Microsoft Sentinel Blog, May 5th, 2026
Microsoft Places Upload Errors
I am configuring the public preview of Microsoft Places with a client and when we tried to upload the IMDF files after uploading the building/floors CSV, the following error message appeared in the shell: "Import not supported for file fixtures.geojson" We removed that file from the IMDF zip file and tried again but a different error appeared: "No levels were found correlated to directory floors for the building" When the CSV file with building and floor data was uploaded before the configuration step, I didn't add any SMTP address values in that column because they don't exist yet. When the import script finished, a few errors appeared stating that an identity wasn't found. Maybe that's part of the issue? I'm not sure what I'm missing. Anyone else made it through this step yet in the public preview?
