Illumio Insights
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | IllumioInsightsDefinition |
| Publisher | Microsoft |
| Used in Solutions | Illumio Insight |
| Collection Method | CCF |
| Connector Definition Files | IllumioInsight_Definition.json |
| DCR Definition Files | IllumioInsight_DCR.json |
| CCF Configuration | IllumioInsight_PollingConfig.json |
| CCF Capabilities | APIKey |
| Microsoft Learn | View on Learn |
Illumio Insights Connector sends workload and security graph data from Illumio Insights into the Azure Microsoft Sentinel Data Lake, providing deep context for threat detection, lateral movement analysis, and real-time investigation.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
IllumioInsights_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
Configuration steps for the Illumio Insights Connector
Prerequisites
- Register and Login to Illumio Console with valid credentials
- Purchase Illumio Insights or Start a free Trial for Illumio Insights
Step 1: Register the Service Account
- Go to Illumio Console → Access → Service Accounts
- Create a service account for the tenant
- Once you create a service account, you will receive the client credentials
- Copy the auth_username (Illumio Insights API Key) and the Secret (API Secret)
Step 2: Add Client Credentials to Sentinel Account
- Add the API key and secret to Sentinel Account for tenant authentication
- These credentials will be used to authenticate calls to the Illumio SaaS API
Please fill in the required fields below with the credentials obtained from the Illumio Console:
- Illumio Insights Api Key: (password field)
- Api Secret: (password field)
- Illumio Tenant Id: {IllumioTenantId - Optional}
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊