⚠️ Field Effect MDR Data Connector (via Codeless Connector Framework)
⚠️ Unpublished: This item is from a solution that is not yet published on Azure Marketplace or not installed in Content Hub.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | FieldEffectCCF |
| Publisher | Field Effect |
| Used in Solutions | FieldEffectMDR |
| Collection Method | CCF |
| Connector Definition Files | FieldEffect_ConnectorDefinition.json |
| DCR Definition Files | FieldEffect_DCR.json |
| CCF Configuration | FieldEffect_PollerConfig.json |
| CCF Capabilities | APIKey |
This solution enables Microsoft Sentinel to ingest Field Effect MDR data using the Codeless Connector Framework (CCF). The connector polls the Field Effect ARO API and sends results to a Log Analytics custom table for hunting, correlation, and alerting within Sentinel.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
FieldEffectAROAlerts_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Configure Field Effect Connector
- In the Field Effect MDR portal, generate an API Key.
- Copy your Organization ID from the portal.
- Enter both values below and connect.
- API Key: (password field)
- Organization ID: Enter your Field Effect Organization ID
- Click 'Connect to Field Effect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊