Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | PingOneAuditLogsCCPDefinition |
| Publisher | Microsoft |
| Used in Solutions | PingOne |
| Collection Method | CCF |
| Connector Definition Files | PingOneAuditLogs_DataConnectorDefinition.json |
| CCF Configuration | PingOneAuditLogs__PollingConfig.json |
| CCF Capabilities | OAuth2, Paging |
This connector ingests audit activity logs from the PingOne Identity platform into Microsoft Sentinel using a Codeless Connector Framework.
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
PingOne_AuditActivitiesV2_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Resource Provider Permissions: - Workspace (Workspace): Read and Write permissions are required.
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect Ping One connector to Microsoft Sentinel Before connecting to PingOne, ensure the following prerequisites are completed. Refer to the document for detailed setup instructions, including how to obtain client credentials and the environment ID.
You'll need client credentials, including your client id and client secret.
To generate token and gather logs from audit activities endpoint Connector Management Interface
This section is an interactive interface in the Microsoft Sentinel portal that allows you to manage your data collectors.
📊 View Existing Collectors: A management table displays all currently configured data collectors with the following information: - Environment ID
➕ Add New Collector: Click the "Add new collector" button to configure a new data collector (see configuration form below).
🔧 Manage Collectors: Use the actions menu to delete or modify existing collectors.
💡 Portal-Only Feature: This configuration interface is only available when viewing the connector in the Microsoft Sentinel portal. You cannot configure data collectors through this static documentation.
Add domain
Add domain
When you click the "Add domain" button in the portal, a configuration form will open. You'll need to provide:
💡 Portal-Only Feature: This configuration form is only available in the Microsoft Sentinel portal.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊