Druva Events Connector
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | DruvaEventCCPDefinition |
| Publisher | Microsoft |
| Used in Solutions | DruvaDataSecurityCloud |
| Collection Method | CCF |
| Connector Definition Files | Druva_DataConnectorDefinition.json |
| CCF Configuration | Druva_PollingConfig.json |
| CCF Capabilities | OAuth2, Paging |
Provides capability to ingest the Druva events from Druva APIs
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
DruvaInsyncEvents_CL |
? | ✓ | ? |
DruvaPlatformEvents_CL |
? | ✓ | ? |
DruvaSecurityEvents_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace (Workspace): Read and Write permission are required
Custom Permissions: - Druva API Access: Druva API requires a client id and client secret to authenticate
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
Note: Configurations to connect to Druva Rest API
Step 1: Create credentials from Druva console. Refer this doc for steps:- https://help.druva.com/en/articles/8580838-create-and-manage-api-credentials
Step 2: Enter the hostname. For public cloud its apis.druva.com
Step 3: Enter client id and client secret key
4. Connect to Druva API to start collecting logs in Microsoft Sentinel
Provide required values: - Hostname: Example: apis.druva.com - OAuth Configuration: - Client ID - Client Secret - Click 'Connect' to authenticate
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊