TheHive (via Codeless Connector Framework)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | TheHiveConnector |
| Publisher | TheHive |
| Used in Solutions | TheHive |
| Collection Method | CCF |
| Connector Definition Files | ConnectorDefinition.json |
| DCR Definition Files | DCR.json |
| CCF Configuration | PollingConfig.json |
| CCF Capabilities | APIKey, Paging, POST |
| Microsoft Learn | View on Learn |
The TheHive data connector provides the capability to ingest TheHive security incident response platform data into Microsoft Sentinel through the REST API. Refer to API documentation for more information. The connector provides the ability to get cases, tasks, and alerts from TheHive and visualize them in Azure Sentinel.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
TheHiveData_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Custom Permissions:
- TheHive API access: TheHive API Version 4 and above access is required for the TheHive API.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Configuration
Follow the instructions to configure the TheHive connector.
- TheHive Base URL: TheHive instance base URL (e.g., https://thehive.example.com)
Get the api Key from your TheHive user profile settings. (or a dedicated user created for this purpose)
- Api Key: (password field)
2. Connect
Enable the TheHive connector.
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊