Uniqkey Security Events
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | UniqkeyEventsConnector |
| Publisher | Uniqkey |
| Used in Solutions | Uniqkey |
| Collection Method | CCF |
| Connector Definition Files | Uniqkey_ConnectorDefinition.json |
| DCR Definition Files | Uniqkey_DCR.json |
| CCF Configuration | Uniqkey_PollerConfig.json |
| CCF Capabilities | APIKey, Paging |
The Uniqkey connector ingests security and audit events from the Uniqkey business password management platform into Microsoft Sentinel. Events cover authentication, credential access, credential management, sharing, policy management, threat detection and other administrative activity across your organization.
Prerequisites:
An active Uniqkey organization
A Uniqkey SIEM integration API token generated by your Uniqkey administrator
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
UniqkeyEvents_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Custom Permissions:
- Uniqkey SIEM API token: A Uniqkey SIEM integration API token is required. Your Uniqkey administrator can generate one in the Uniqkey admin portal under Settings > Integrations > SIEM.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Obtain your Uniqkey SIEM API token
- Sign in to the Uniqkey admin portal as an administrator
- Go to Settings > Integrations > SIEM
- Generate a new API token
- Copy the token and store it securely - it authorizes read access to your organization's event feed. Each Uniqkey organization uses its own token.
2. Connect
Enter your Uniqkey SIEM API token below, then select Connect. Microsoft Sentinel will begin polling the Uniqkey events endpoint on your behalf.
- Uniqkey SIEM API token: (password field)
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊