Cloudflare (Using Blob Container) (via Codeless Connector Framework)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | CloudflareDefinition |
| Publisher | Microsoft |
| Used in Solutions | Cloudflare, Cloudflare CCF |
| Collection Method | CCF |
| Connector Definition Files | CloudflareLog_ConnectorDefinition.json |
| DCR Definition Files | CloudflareLog_DCR.json, CloudflareLog_DCR.json |
| CCF Configuration | CloudflareLog_PollerConfig.json |
| CCF Capabilities | StorageAccountBlobContainer, ServicePrincipal |
| Microsoft Learn | View on Learn |
The Cloudflare data connector provides the capability to ingest Cloudflare logs into Microsoft Sentinel using the Cloudflare Logpush and Azure Blob Storage. Refer to Cloudflare documentationfor more information.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
CloudflareV2_CL |
✓ | ✓ | ✓ |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Custom Permissions:
- Create a storage account and a container: Before setting up logpush in Cloudflare, first create a storage account and a container in Microsoft Azure. Use this guide to know more about Container and Blob. Follow the steps in the documentation to create an Azure Storage account.
- Generate a Blob SAS URL: Create and Write permissions are required. Refer the documentation to know more about Blob SAS token and url.
- Collecting logs from Cloudflare to your Blob container: Follow the steps in the documentation for collecting logs from Cloudflare to your Blob container.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect Cloudflare Logs to Microsoft Sentinel
To enable Cloudflare logs for Microsoft Sentinel, provide the required information below and click on Connect.
📋 Additional Configuration Step: This connector includes a configuration step of type
ServicePrincipalIDTextBox_test. Please refer to the Microsoft Sentinel portal for detailed configuration options for this step.
- The Blob container's URL you want to collect data from
- The Blob container's storage account resource group name
- The Blob container's storage account location
- The Blob container's storage account subscription id
- The event grid topic name of the blob container's storage account if exist. else keep empty.
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊