🔍 1Password (Serverless)

🔍 Discovered: This item was discovered by scanning the solution folder but is not listed in the Solution JSON file.

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Connectors Index


Attribute Value
Connector ID 1Password(Serverless)
Publisher Unknown (ARM variable)
Used in Solutions 1Password
Collection Method CCF
Connector Definition Files azuredeploy_1Password_poller_connector.json
CCF Configuration 1Password_PollingConfig.json
CCF Capabilities APIKey, Paging, POST

The 1Password CCP connector allows the user to ingest 1Password Audit, Signin & ItemUsage events into Microsoft Sentinel.

Tables Ingested

This connector ingests data into the following tables:

Table Transformations Ingestion API Lake-Only
OnePasswordEventLogs_CL ? ?

💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.

Permissions

Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions are required.

Custom Permissions: - 1Password API token: A 1Password API Token is required. See the 1Password documentation on how to create an API token.

Setup Instructions

⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.

1. STEP 1 - Create a 1Password API token:

Follow the 1Password documentation for guidance on this step.

2. STEP 2 - Choose the correct base URL:

There are multiple 1Password servers which might host your events. The correct server depends on your license and region. Follow the 1Password documentation to choose the correct server. Input the base URL as displayed by the documentation (including 'https://' and without a trailing '/').

3. STEP 3 - Enter your 1Password Details:

Enter the 1Password base URL & API Token below: - Base Url: Enter your Base Url - API Token: (password field) - Click 'connect' to establish connection


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Connectors Index