Sending Application logs stored in Azure file storage to Azure Sentinel

[msagrawal15]

Hi All,

We have an application hosted in Azure and the application logs are getting stored in Azure File Storage. I need to read the files from Azure File Storage and build a parser and get the logs to Azure Sentinel as a custom log source. 

I am relatively new to Azure and I am not sure of any custom log integrations method. On checking the documentation I got to know that I can use methods like Logic Apps, PowerShell, or Azure functions to do this.

Can somebody help by pointing me to some discussion posts that can help me in this? 

Regards,

Mitesh Agrawal

[#2]

@msagrawal15 are these logs you are referring to disks in a VM? In that case, you could install AMA and collect them 

[#3]

@msagrawal15 

Hi, please see:

https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/microsoft-ignite-2021-blob-and-file-s...

File Logs are included in the built-in Connector