⚠️ Egress Defend v2
⚠️ Unpublished: This item is from a solution that is not yet published on Azure Marketplace or not installed in Content Hub.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | EgressDefendAudit |
| Publisher | Egress Software Technologies |
| Used in Solutions | Egress Defend |
| Collection Method | CCF |
| Connector Definition Files | EgressDefendAudit_ConnectorDefinition.json |
| DCR Definition Files | EgressDefendAudit_DCR.json |
| CCF Configuration | EgressDefendAudit_PollerConfig.json |
| CCF Capabilities | APIKey, Paging |
| Custom Log V1 Tables | Yes 🔶 — ingests into tables with type-suffixed columns |
The Egress Defend audit connector ingests Egress Defend audit data into Microsoft Sentinel via the Logs Ingestion API (DCR-based). It pulls from the Egress Defend V1/events API and lands events in the EgressDefend_v4_CL table.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
EgressDefend_v4_CL 🔶 |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions on the Log Analytics workspace are required to enable the data connector.
Custom Permissions:
- Egress Defend API access: An Egress Defend API URL, customer domain and API key are required to ingest audit records into Microsoft Sentinel.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect Egress Defend to Microsoft Sentinel
Enter your Egress Defend API URL, Egress domain and API key, then click Connect.
- API URL
- Domain name
- API Key: (password field)
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊