Garrison ULTRA Remote Logs
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | GarrisonULTRARemoteLogs |
| Publisher | Garrison |
| Used in Solutions | Garrison ULTRA |
| Collection Method | REST Pull API |
| Connector Definition Files | GarrisonULTRARemoteLogs_ConnectorUI.json |
| Ingestion API | HTTP Data Collector API — Connector definition requires workspace key (SharedKey pattern) |
| Microsoft Learn | View on Learn |
The Garrison ULTRA Remote Logs connector allows you to ingest Garrison ULTRA Remote Logs into Microsoft Sentinel.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
Garrison_ULTRARemoteLogs_CL |
✗ | ✓ | ✗ |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): read and write permissions on the workspace are required.
- Keys (Workspace): read permissions to shared keys for the workspace are required. See the documentation to learn more about workspace keys.
Custom Permissions:
- Garrison ULTRA: To use this data connector you must have an active Garrison ULTRA license.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Deployment - Azure Resource Manager (ARM) Template
These steps outline the automated deployment of the Garrison ULTRA Remote Logs data connector using an ARM Tempate.
Click the Deploy to Azure button below.
Provide the required details such as Resource Group, Microsoft Sentinel Workspace and ingestion configurations
- Mark the checkbox labeled I agree to the terms and conditions stated above.
- Click Purchase to deploy.
NOTE: It is recommended to create a new Resource Group for deployment of these resources.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊