Elastic Agent Solution

Solution: ElasticAgent

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Solutions Index

Attribute	Value
Publisher	Microsoft Corporation
Support Tier	Microsoft
Support Link	https://support.microsoft.com
Categories	Security - Threat Protection
Version	3.0.0
Author	Microsoft - support@microsoft.com
First Published	2021-11-12
Last Updated	2026-05-25
Solution Folder	ElasticAgent
Marketplace	Azure Marketplace · Popularity: 🟡 Low (37%)

The Elastic Agent solution provides the capability to ingest Elastic Agent logs, metrics, and security data into Microsoft Sentinel.

Underlying Microsoft Technologies used:

This solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs:

a. Agent based logs collection from Windows and Linux machines

Data Connectors
Tables Used
Content Items

Data Connectors

This solution provides 2 data connector(s):

Tables Used

This solution uses 2 table(s):

Table	Used By Connectors	Used By Content
`ElasticAgentLogsV2_CL`	Elastic Agent (via Codeless Connector Framework)	-
`ElasticAgentLogs_CL`	Elastic Agent	-

Content Items

This solution includes 1 content item(s):

Content Type	Count
Parsers	1

Parsers

Name	Description	Tables Used
ElasticAgentEvent	-	`ElasticAgentLogs_CL` (read)

Release Notes

Version	Date Modified (DD-MM-YYYY)	Change History
3.0.0	11-05-2026	Data Connector via Codeless Connector Framework added
2.0.0	14-06-2022	Data Connector customs added