Log Ingestion API

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Methods Index

---

The Log Ingestion API is the modern, recommended method for sending custom data to Azure Monitor Logs (and Microsoft Sentinel). It uses Data Collection Rules (DCRs) and Data Collection Endpoints (DCEs) to define the data pipeline, providing schema validation, transformation, and routing capabilities.

Documentation

• 📖 Logs Ingestion API overview
• 📖 Logs Ingestion API tutorial
• 📖 Data Collection Rules overview
• 📖 Data Collection Endpoints overview

Statistics

Metric	Count
Total Connectors	104
Active	100
Deprecated 🚫	0
Unpublished ⚠️	4

By Collection Method

Collection Method	Count
Azure Function	47
CCF Push	46
CCF	10
REST Pull API	1
Total	104

Connectors Using This API

Active Connectors

Connector	Collection Method	Publisher	Tables	Solution
1Password	Azure Function	1Password	1	1Password
1Password (Serverless)	CCF	1Password	1	1Password
42Crunch API Protection (Push Connector via Codeless Connector Framework)	CCF Push	Microsoft Corporation	1	42Crunch API Protection
Abnormal Security (Push) 🔶	CCF Push	Abnormal Security	9	AbnormalSecurity
Atlassian Jira Audit (via Codeless Connector Framework)	CCF	Microsoft	1	AtlassianJiraAudit
Bitsight data connector	Azure Function	BitSight Technologies, Inc.	11	BitSight
Citrix Analytics (via Codeless Connector Framework) ⚠️	CCF Push	Citrix	6	Citrix Analytics CCF
Commvault Security IQ (via Codeless Connector Framework)	CCF	Commvault	1	Commvault Security IQ
CommvaultSecurityIQ	Azure Function	Commvault	1	Commvault Security IQ
Contrast ADR Push Connector	CCF Push	Contrast Security	2	ContrastADR
CyberArk Audit	CCF	Microsoft	1	CyberArkAudit
CyberArk EPM	CCF	CyberArk	1	CyberArkEPM
CyberArkAudit	Azure Function	CyberArk	1	CyberArkAudit
CyberArkEPM	Azure Function	CyberArk	1	CyberArkEPM
Darktrace ActiveAI Security Platform Connector	CCF Push	Darktrace	6	Darktrace
DataBahn	CCF Push	DataBahn	3	Databahn
Digital Shadows Searchlight	Azure Function	Digital Shadows	1	Digital Shadows
ESET Connect Data Connector (via Codeless Connector Framework)	CCF	ESET	3	ESET Protect Platform
ESET Protect Platform	Azure Function	ESET	2	ESET Protect Platform
ExtraHop Detections Data Connector	Azure Function	ExtraHop	1	ExtraHop
Flare Push Connector	CCF Push	Flare Systems	1	Flare
Fortinet FortiNDR Cloud	Azure Function	Fortinet	1	Fortinet FortiNDR Cloud
Gambit Security Policy Issues (Push)	CCF Push	Gambit Security	1	GambitSecurity
Gigamon AMX Connector	CCF Push	GigamonDefinition	1	Gigamon Connector
Google SecOps Detection Alerts	Azure Function	Google	1	GoogleSecOps
Google Threat Intelligence Relevance System Alerts	Azure Function	Google	1	Google Threat Intelligence
Halcyon Connector	CCF Push	Halcyon	1	Halcyon
Halcyon Connector (v2)	CCF Push	Halcyon	2	Halcyon
Illumio SaaS	Azure Function	Illumio	2	IllumioSaaS
Illumio Saas ⚠️ 🔍	CCF	Microsoft	1	IllumioSaaS
IPinfo Abuse Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo ASN Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Carrier Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Company Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Core Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Country ASN Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Domain Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Iplocation Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Iplocation Extended Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Plus Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Privacy Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo Privacy Extended Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo ResProxy Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo RIRWHOIS Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo RWHOIS Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo WHOIS ASN Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo WHOIS MNT Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo WHOIS NET Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo WHOIS ORG Data Connector	Azure Function	IPinfo	1	IPinfo
IPinfo WHOIS POC Data Connector	Azure Function	IPinfo	1	IPinfo
Jamf Protect Push Connector	CCF Push	Jamf	3	Jamf Protect
Keeper Security Push Connector	CCF Push	Keeper Security	1	Keeper Security
Microsoft Sentinel for SAP applications - agentless	REST Pull API	Microsoft	4	SAP
Mimecast Audit	Azure Function	Mimecast	1	Mimecast
Mimecast Awareness Training	Azure Function	Mimecast	4	Mimecast
Mimecast Cloud Integrated	Azure Function	Mimecast	1	Mimecast
Mimecast Secure Email Gateway	Azure Function	Mimecast	2	Mimecast
Mimecast Security Events (via Codeless Connector Framework) ⚠️	CCF Push	Obrela	1	MimecastEvents-CCF
Mimecast Targeted Threat Protection	Azure Function	Mimecast	3	Mimecast
MongoDB Atlas Logs	Azure Function	MongoDB	1	MongoDBAtlas
MuleSoft CloudHub Logs (Push Connector via Codeless Connector Framework)	CCF Push	Microsoft	1	Mulesoft
NordPass	Azure Function	NordPass	1	NordPass
NordStellar (Push)	CCF Push	Nord Security Inc.	1	NordStellar
Obsidian Datasharing Connector	CCF Push	Obsidian Security	2	Obsidian Datasharing
Onapsis Defend Integration	CCF Push	Onapsis Platform	2	Onapsis Defend
OneTrust	CCF Push	OneTrust	1	OneTrust
Oracle Cloud Infrastructure (via Codeless Connector Framework) 🔶	CCF	Microsoft	1	Oracle Cloud Infrastructure
Orca Security Alerts (via Microsoft Entra ID)	CCF Push	Orca Security	1	Orca Security Alerts
Pathlock Inc.: Threat Detection and Response for SAP	CCF Push	Pathlock Inc.	2	Pathlock_TDnR
Red Sift Events (CCP Push)	CCF Push	Red Sift	2	Red Sift
Salesforce Service Cloud (via Codeless Connector Framework)	CCF	Microsoft	1	Salesforce Service Cloud
SAP LogServ (RISE), S/4HANA Cloud private edition	CCF Push	SAP SE	8	SAP LogServ
SecurityBridge Solution for SAP	CCF Push	SecurityBridge Group GmbH	2	SecurityBridge App
Semperis Lightning Logs	Azure Function	Semperis	7	SemperisLightning
Sonrai Security Push Connector	CCF Push	Sonrai	1	SonraiSecurity
Sophos Endpoint Protection (via Codeless Connector Platform)	CCF	Microsoft	2	Sophos Endpoint Protection
Synqly Integration Connector	CCF Push	Synqly	10	SynqlyIntegrationConnector
Tanium's CCF Push Connector 🔶	CCF Push	Tanium Inc.	10	Tanium
Team Cymru Scout Data Connector	Azure Function	Team Cymru Scout	14	Team Cymru Scout
Tenable Vulnerability Management	Azure Function	Tenable	5	Tenable App
Upwind Logs Loader (Ingestion API)	Azure Function	Upwind	1	Upwind
Varonis Purview Push Connector	CCF Push	Varonis	1	Varonis Purview
Varonis SaaS (Push) 🔶	CCF Push	Varonis	1	VaronisSaaS
Vectra XDR	Azure Function	Vectra	6	Vectra XDR
VMware SD-WAN and SASE Connector ⚠️	Azure Function	VMware by Broadcom	4	VMware SASE
WithSecure Elements API (Azure Function)	Azure Function	WithSecure	1	WithSecureElementsViaFunction
XBOW Security Platform (via Azure Function)	Azure Function	XBOW	3	XBOW
Zero Networks Segment (Push)	CCF Push	Zero Networks	4	ZeroNetworks
Zimperium Mobile Threat Defense CCF	CCF Push	Zimperium	4	Zimperium Mobile Threat Defense
Zscaler Internet Access Cloud NSS Audit Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB Activity Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB Cloud Storage Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB Collaboration Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB CRM Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB Email Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB File Sharing Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB ITSM Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS CASB Repo Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS DNS Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS Email DLP Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS Endpoint DLP Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS Firewall Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS Tunnel Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access
Zscaler Internet Access Cloud NSS Web Log Push Connector	CCF Push	Zscaler	1	Zscaler Internet Access

---

⚠️ Unpublished: This item is from a solution that is not yet published on Azure Marketplace or not installed in Content Hub.

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Methods Index