Illumio Insights Summary
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | IllumioInsightsSummaryCCP |
| Publisher | Illumio |
| Used in Solutions | Illumio Insight |
| Collection Method | CCF |
| Connector Definition Files | IllumioInsightsSummary_ConnectorDefinition.json |
| CCF Configuration | IllumioInsightsSummary_PollingConfig.json |
| CCF Capabilities | APIKey |
The Illumio Insights Summary connector Publishes AI-powered threat discovery and anomaly reports generated by the Illumio Insights Agent. Leveraging the MITRE ATT&CK framework, these reports surface high-fidelity insights into emerging threats and risky behaviors, directly into the Data Lake.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
IllumioInsightsSummary_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions are required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Configuration
Configure the Illumio Insights Summary connector.
This data connector may take 24 hrs for the latest report after onboarding
Configuration steps for the Illumio Insights Summary Connector
Prerequisites - Register and Login to Illumio Console with valid credentials - Purchase Illumio Insights or Start a free Trial for Illumio Insights - Enable The Illumio Insights Agent
Step 1: Register the Service Account 1. Go to Illumio Console → Access → Service Accounts 2. Create a service account for the tenant 3. Once you create a service account, you will receive the client credentials 4. Copy the auth_username (Illumio Insights API Key) and the Secret (API Secret)
Step 2: Add Client Credentials to Sentinel Account - Add the API key and secret to Sentinel Account for tenant authentication - These credentials will be used to authenticate calls to the Illumio SaaS API
Please fill in the required fields below with the credentials obtained from the Illumio Console: - Illumio Insights Api Key: (password field) - Api Secret: (password field) - Illumio Tenant ID: {IllumioTenantId - Optional}
2. Connect
Enable the Illumio Insights Summary connector. - Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊