Cloudflare (Using Blob Container) (via Codeless Connector Framework)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Connectors Index


Attribute Value
Connector ID CloudflareDefinition
Publisher Microsoft
Used in Solutions Cloudflare, Cloudflare CCF
Collection Method CCF
Connector Definition Files CloudflareLog_ConnectorDefinition.json
CCF Configuration CloudflareLog_PollerConfig.json
CCF Capabilities StorageAccountBlobContainer, ServicePrincipal

The Cloudflare data connector provides the capability to ingest Cloudflare logs into Microsoft Sentinel using the Cloudflare Logpush and Azure Blob Storage. Refer to Cloudflare documentationfor more information.

Tables Ingested

This connector ingests data into the following tables:

Table Transformations Ingestion API Lake-Only
CloudflareV2_CL ? ?

💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.

Permissions

Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions are required.

Custom Permissions: - Create a storage account and a container: Before setting up logpush in Cloudflare, first create a storage account and a container in Microsoft Azure. Use this guide to know more about Container and Blob. Follow the steps in the documentation to create an Azure Storage account. - Generate a Blob SAS URL: Create and Write permissions are required. Refer the documentation to know more about Blob SAS token and url. - Collecting logs from Cloudflare to your Blob container: Follow the steps in the documentation for collecting logs from Cloudflare to your Blob container.

Setup Instructions

⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.

1. Connect Cloudflare Logs to Microsoft Sentinel

To enable Cloudflare logs for Microsoft Sentinel, provide the required information below and click on Connect.

📋 Additional Configuration Step: This connector includes a configuration step of type ServicePrincipalIDTextBox_test. Please refer to the Microsoft Sentinel portal for detailed configuration options for this step. - The Blob container's URL you want to collect data from - The Blob container's storage account resource group name - The Blob container's storage account location - The Blob container's storage account subscription id - The event grid topic name of the blob container's storage account if exist. else keep empty. - Click 'Connect' to establish connection


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Connectors Index