SenservaPro (Preview)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | SenservaPro |
| Publisher | Senserva |
| Used in Solutions | SenservaPro |
| Collection Method | REST Pull API |
| Connector Definition Files | SenservaPro.json |
| Ingestion API | HTTP Data Collector API — Connector definition requires workspace key (SharedKey pattern) |
| Custom Log V1 Tables | Yes 🔶 — ingests into tables with type-suffixed columns |
The SenservaPro data connector provides a viewing experience for your SenservaPro scanning logs. View dashboards of your data, use queries to hunt & explore, and create custom alerts.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
SenservaPro_CL 🔶 |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace (Workspace): read and write permissions are required. - Keys (Workspace): read permissions to shared keys for the workspace are required. See the documentation to learn more about workspace keys.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Setup the data connection
Visit Senserva Setup for information on setting up the Senserva data connection, support, or any other questions. The Senserva installation will configure a Log Analytics Workspace for output. Deploy Microsoft Sentinel onto the configured Log Analytics Workspace to finish the data connection setup by following this onboarding guide.
- Workspace ID: WorkspaceId
Note: The value above is dynamically provided when these instructions are presented within Microsoft Sentinel. - Primary Key:
PrimaryKeyNote: The value above is dynamically provided when these instructions are presented within Microsoft Sentinel.
Additional Documentation
📄 Source: SenservaPro\Data Connectors\SenservaPro_Sentinel_Connector.md
Connect your SenservaPro to Azure Sentinel
The SenservaPro connector allows you to connect SenservaPro Azure Active Directory focused advanced security analytics data with your Azure Sentinel, allowing you view dashboards from Senservaa, create custom alerts, and improve investigation with Hunting queries also provided by Senserva. The Senserva data is multi-tenant enabled.
[!NOTE] Data is stored in the geographic location of the workspace on which you are running Azure Sentinel. Senserva analytics data never leaves the tenant in which Senserva is installed. Integration between SenservaPro and Azure Sentinel makes use of the Log Analytics Workspace REST API.
Configure and connect SenservaPro
SenservaPro is fully integrated into Azure and exports logs directly to Azure Sentinel every time a Senserva monitored Azure Active Directory configuration changes, or account status changes due to something like a Risky User warning. 1. In the Azure Sentinel portal, click Data connectors and select 'SenservaPro' and then Open connector page.
- You will install the data provider to the connector as part of your SenservaPro setup from our Azure Marketplace offering.
Find your data
The data appears in Log Analytics under CustomLogs SenservaPro_CL after a successful connection is established. Senserva data is continually updated automatically once the connection is established. To use the relevant schema in Log Analytics for the SenservaPro, search for SenservaPro_CL.
Validate connectivity
It may take up to 20 minutes until your logs start to appear in Log Analytics.
Next steps
In this document you learned how to connect SenservaPro to Azure Sentinel. To learn more about Azure Sentinel, see the following articles: - Learn how to get visibility into your data, and potential threats. - Get started detecting threats with Azure Sentinel. - Use workbooks to monitor your data.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊