BigID DSPM connector
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | BigIDDSPMLogsConnectorDefinition |
| Publisher | BigID |
| Used in Solutions | BigID |
| Collection Method | CCF |
| Connector Definition Files | BigIDDSPMLogs_connectorDefinition.json |
| CCF Configuration | BigIDDSPMLogs_PollerConfig.json |
| CCF Capabilities | JwtToken, Paging, MvExpand, Nested |
The BigID DSPM data connector provides the capability to ingest BigID DSPM cases with affected objects and datasource information into Microsoft Sentinel.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
BigIDDSPMAssetStore_CL |
? | ✓ | ? |
BigIDDSPMCatalog_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions are required.
Custom Permissions: - BigID DSPM API access: Access to the BigID DSPM API through a BigID Token is required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect to BigID DSPM API to start collecting BigID DSPM cases and affected Objects in Microsoft Sentinel
Provide your BigID domain name like 'customer.bigid.cloud' and your BigID token. Generate a token in the BigID console via Settings -> Access Management -> Users -> Select User and generate a token. - BigID FQDN: BigID FQDN - BigID Token: (password field) - Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊