Egress Iris Connector
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | EgressSiemPolling |
| Publisher | Egress Software Technologies |
| Used in Solutions | Egress Iris |
| Collection Method | CCF (Legacy) |
| Connector Definition Files | EgressDataConnector.json |
| CCF Capabilities | APIKey, Paging |
| Custom Log V1 Tables | Yes 🔶 — ingests into tables with type-suffixed columns |
The Egress Iris connector will allow you to ingest Egress data into Sentinel.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
EgressDefend_CL 🔶 |
? | ✓ | ? |
EgressEvents_CL |
? | ✓ | ? |
KnowBe4Defend_CL 🔶 |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions on the Log Analytics workspace are required to enable the data connector.
Custom Permissions: - Egress API Token: An Egress API token is required to ingest audit records to Microsoft Sentinel.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect Egress Data with Microsoft Sentinel
Enter your Egress API Hostname and secret.
📋 Additional Configuration Step: This connector includes a configuration step of type
APIKey. Please refer to the Microsoft Sentinel portal for detailed configuration options for this step.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊