REST Push API / Custom Integration

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Methods Index

---

REST Push API-based connectors push data into Microsoft Sentinel via the Azure Monitor HTTP Data Collector API or the Logs Ingestion API (DCR/DCE). The external source initiates the HTTP requests; Sentinel does not poll. These connectors may use custom scripts, Logic Apps, or other integration methods to collect data and send it to the workspace.

Documentation

• 📖 Logs Ingestion API overview
• 📖 Send data using the Logs Ingestion API
• 📖 Create custom logs

Statistics

Metric	Count
Total Connectors	55
Active	50
Deprecated 🚫	1
Unpublished ⚠️	4

Connectors Using This Method

Active Connectors

Connector	Publisher	Tables	Solution
AIShield	Bosch	1	AIShield AI Security Monitoring
API Protection 🔶	42Crunch	1	42Crunch API Protection
ARGOS Cloud Security 🔶	ARGOS Cloud Security	1	ARGOSCloudSecurity
Atlassian Beacon Alerts 🔶	DEFEND Ltd.	1	Integration for Atlassian Beacon
Authomize Data Connector ⚠️ 🔶	Authomize	1	Authomize
Azure CloudNGFW By Palo Alto Networks 🔶	Palo Alto Networks	1	Azure Cloud NGFW By Palo Alto Networks
BETTER Mobile Threat Defense (MTD) 🔶	BETTER Mobile	4	BETTER Mobile Threat Defense (MTD)
Beyond Security beSECURE ⚠️ 🔶	Beyond Security	3	Beyond Security beSECURE
blacklens.io	snapSEC GmbH	1	Blacklens
CITRIX SECURITY ANALYTICS 🔶	CITRIX	4	Citrix Analytics for Security
Cognni 🔶	Cognni	1	Cognni
Corelight Connector Exporter 🔶	Corelight	108	Corelight
Cribl 🔶	Cribl	4	Cribl
Cynerio Security Events 🔶	Cynerio	1	Cynerio
Darktrace Connector for Microsoft Sentinel REST API 🔶	Darktrace	1	Darktrace
Datawiza DAP 🔶	Datawiza	1	Datawiza
Derdack SIGNL4 🔶	Derdack	2	SIGNL4
Doppel Data Connector	Doppel	1	Doppel
Exchange Security Insights On-Premises Collector 🔶	Microsoft	1	Microsoft Exchange Security - Exchange On-Premises
F5 BIG-IP 🔶	F5 Networks	3	F5 Big-IP
Forcepoint DLP 🔶	Forcepoint	1	Forcepoint DLP
Forescout eyeInspect for OT Security ⚠️	Forescout	2	Forescout eyeInspect for OT Security
Forescout Host Property Monitor 🔶	Forescout	3	ForescoutHostPropertyMonitor
Garrison ULTRA Remote Logs	Garrison	1	Garrison ULTRA
Infoblox SOC Insight Data Connector via REST API 🔶	Infoblox	1	Infoblox
InfoSecGlobal Data Connector 🔶	InfoSecGlobal	1	AgileSec Analytics Connector
MailGuard 365 🔶	MailGuard365	1	MailGuard 365
Microsoft Exchange HTTP Proxy Logs 🔶	Microsoft	1	Microsoft Exchange Security - Exchange On-Premises
Microsoft Exchange Message Tracking Logs 🔶	Microsoft	1	Microsoft Exchange Security - Exchange On-Premises
NC Protect 🔶	archTIS	1	NC Protect Data Connector
Netclean ProActive Incidents 🔶	NetClean Technologies	1	NetClean ProActive
Noname Security for Microsoft Sentinel 🔶	Noname Security	1	Noname API Security Solution for Microsoft Sentinel
NXLog AIX Audit 🔶	NXLog	1	NXLogAixAudit
NXLog BSM macOS 🔶	NXLog	1	NXLog BSM macOS
NXLog DNS Logs 🔶	NXLog	1	NXLogDNSLogs
NXLog FIM 🔶	NXLog	1	NXLog FIM
NXLog LinuxAudit 🔶	NXLog	1	NXLog LinuxAudit
Orca Security Alerts 🔶	Orca Security	1	Orca Security Alerts
Palo Alto Prisma Cloud CWPP (using REST API) 🔶	Microsoft	1	Palo Alto Prisma Cloud CWPP
Perimeter 81 Activity Logs 🔶	Perimeter 81	1	Perimeter 81
Prancer Data Connector 🔶	Prancer	1	Prancer PenSuiteAI Integration
Red Canary Threat Detection 🔶	Red Canary	1	Red Canary
SaaS Security 🔶	Valence Security	1	Valence Security
Samsung Knox Asset Intelligence	Samsung	6	Samsung Knox Asset Intelligence
SenservaPro (Preview) 🔶	Senserva	1	SenservaPro
Sevco Platform - Devices ⚠️ 🔶	Sevco Security	1	SevcoSecurity
SINEC Security Guard	Siemens AG	1	SINEC Security Guard
Sonrai Data Connector 🔶	Sonrai	1	SonraiSecurity
Sophos Cloud Optix 🔶	Sophos	1	Sophos Cloud Optix
Squadra Technologies secRMM 🔶	Squadra Technologies	1	Squadra Technologies SecRmm
Symantec Integrated Cyber Defense Exchange 🔶	Symantec	1	Symantec Integrated Cyber Defense
Talon Insights 🔶	Talon Security	1	Talon
Theom 🔶	Theom	1	Theom
Zimperium Mobile Threat Defense 🔶	Zimperium	2	Zimperium Mobile Threat Defense

Deprecated Connectors 🚫

Connector	Publisher	Tables	Solution
🚫 [DEPRECATED] IONIX Security Logs (Push)	IONIX	1	IONIX

---

🚫 Deprecated: This connector has been deprecated and may be removed in future versions.

⚠️ Unpublished: This item is from a solution that is not yet published on Azure Marketplace or not installed in Content Hub.

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Methods Index