Cisco Meraki Events via REST API

Cisco Meraki Events via REST API Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Solutions Index

Attribute Value
Publisher Microsoft Corporation
Support Tier Microsoft
Support Link https://support.microsoft.com
Categories Security - Network
Version 3.2.0
Author Microsoft - support@microsoft.com
First Published 2023-07-12
Last Updated 2026-08-31
Solution Folder Cisco Meraki Events via REST API
Marketplace Azure Marketplace · Popularity: 🔵 Medium (78%)

The Cisco Meraki Events via REST API solution for Microsoft Sentinel enables you to easily ingest the following events from Cisco Meraki MX security appliance to Microsoft Sentinel using Cisco Meraki API:

  1. Organization Appliance Security Events
  2. Organization Api Requests
  3. Organization Configuration Changes

In addition to the ASIM-normalized events above, the solution also ingests the following Cisco Meraki Dashboard inventory and wireless security data into custom tables: 4. Organizations 5. Organization Networks 6. Network Clients 7. Wireless Air Marshal Events

This enables you to view and analyze this data for security monitoring and using them to create custom alerts, and incorporate it to improve your investigation process, giving you more insight into your platform security.

Underlying Microsoft Technologies used:

This solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs:

  1. Azure Monitor Logs: DCR-based Custom Logs
  2. Codeless Connector Platform (CCP)

Supported ASIM schema:

  1. Network Session
  2. Web Session
  3. Audit Event

Data Connectors

This solution provides 1 data connector(s):

Tables Used

This solution uses 7 table(s):

Table Used By Connectors Used By Content
ASimAuditEventLogs Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -
ASimNetworkSessionLogs Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -
ASimWebSessionLogs Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -
CiscoMerakiAirMarshalEvents_CL Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -
CiscoMerakiNetworkClients_CL Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -
CiscoMerakiOrganizationNetworks_CL Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -
CiscoMerakiOrganizations_CL Cisco Meraki Events (using REST API) (via Codeless Connector Framework) -

Release Notes

Version Date Modified (DD-MM-YYYY) Change History
3.2.0 28-08-2026 Promoted the updated Cisco Meraki CCF REST API data connector introduced in version 3.1.0 to General Availability (GA).
3.1.1 24-08-2026 Standardized all CCF Connector data types to use checkpointed t0/t1 time windowing (UnixTimestamp), aligning the newer Organizations, Organization Networks, Network Clients, and Air Marshal Events data types with the existing ASIM log endpoints to prevent duplicate ingestion.
Updated the polling interval and t0/t1 time window configuration of the CCF Connector data types to fix duplicate ingestion.
3.1.0 06-07-2026 Added four new data types to the CCP Connector: Organizations, Organization Networks, Network Clients, and Wireless Air Marshal Events.
3.0.2 10-01-2025 Transitioned the CCP Connector to General Availability (GA).
3.0.1 30-09-2024 Cisco Meraki via REST API configuration Changes pagination fix
3.0.0 27-12-2023 Initial Solution Release with new addition of CCP Connector

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Solutions Index