Airlock Digital connector (via Codeless Connector Framework)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | AirlockDigitalConnector |
| Publisher | Microsoft |
| Used in Solutions | AirlockDigital |
| Collection Method | CCF |
| Connector Definition Files | AirlockDigital_ConnectorDefinition.json |
| DCR Definition Files | AirlockDigital_DCR.json |
| CCF Configuration | AirlockDigital_PollerConfig.json |
| CCF Capabilities | APIKey, Paging, POST |
The Airlock Digital connector collects application control and execution logs from your Airlock Digital server, providing visibility into file executions, server activities, and security event summaries in Microsoft Sentinel.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
AirlockDigitalExecutionHistories_CL |
? | ✓ | ? |
AirlockDigitalFileActivitySummary_CL |
? | ✓ | ? |
AirlockDigitalServerActivities_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Custom Permissions:
- Airlock Digital API Key: API Key with read access to logging endpoints. Generate from Airlock Digital Web UI: User Menu > Settings > API Keys.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Configure Airlock Digital API Access
Provide API connection details for Airlock Digital Before you begin:
Access to your Airlock Digital server
API Key from Airlock Digital (User Menu > Settings > API Keys)
Server must be accessible from Azure (ensure firewall allows connections)
Base URL: Enter your Airlock Digital server URL. Default port is 3129 for REST API.
Example: https://airlock.company.com:3129
- Base URL: https://server.name:3129
- API Key: (password field)
2. Connect and Start Data Collection
Click Connect to start ingesting Airlock Digital logs The connector collects:
Execution Histories: File execution events including blocked, audited, and trusted executions with file hashes, publishers, and user details
Server Activities: Administrative actions, policy changes, agent check-ins, and repository updates
File Activity Summary: Aggregated statistics on file activity, security events, and execution trends
Data refresh: Logs are retrieved every 5 minutes. Data should appear within 5-10 minutes after connection.
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊