Connect your data sources to Microsoft Sentinel by using data connectors
Install and configure data connectors to ingest your data into Microsoft Sentinel. Data connectors are available as part of solutions from the content hub in Microsoft Sentinel. After you install a solution from the content hub, the related data connectors are available to enable and configure. To find and install solutions that include data connectors, see Discover and manage Microsoft Sentinel out-of-the-box content.
This article provides general information about how to enable a data connector and how to find more detailed installation instructions for other data connectors. For more information about data connectors in Microsoft Sentinel, see the following articles:
Important
Microsoft Sentinel is generally available within Microsoft's unified security operations platform in the Microsoft Defender portal. For preview, Microsoft Sentinel is available in the Defender portal without Microsoft Defender XDR or an E5 license. For more information, see Microsoft Sentinel in the Microsoft Defender portal.
Prerequisites
Before you begin, make sure you have the appropriate access and you or someone in your organization installs the related solution.
- You must have read and write permissions on the Microsoft Sentinel workspace.
- Install the solution that includes the data connector from the Content Hub in Microsoft Sentinel. For more information, see Discover and manage Microsoft Sentinel out-of-the-box content.
Enable a data connector
After you or someone in your organization installs the solution that includes the data connector you need, configure the data connector to start ingesting data.
For Microsoft Sentinel in the Azure portal, under Configuration, select Data connectors.
For Microsoft Sentinel in the Defender portal, select Microsoft Sentinel > Configurations > Data connectors.Search for and select the connector. If you don't see the data connector you want, install the solution associated with it from the Content Hub.
Select Open connector page.
Review the Prerequisites. To configure the data connector, fulfill all the prerequisites.
Follow the steps outlined in the Configurations section.
For some connectors, find more specific configuration information in the Collect data section in the Microsoft Sentinel documentation. For example, see the following articles:
- Connect Microsoft Sentinel to Azure, Windows, Microsoft, and Amazon services
- Find your Microsoft Sentinel data connector
After you configure the data connector, it might take some time for the data to be ingested into Microsoft Sentinel. When the data connector is connected, you see a summary of the data in the Data received graph, and the connectivity status of the data types.
Find support for a data connector
Both Microsoft and other organizations author Microsoft Sentinel data connectors. Find the support contact from data connector page in Microsoft Sentinel.
In the Microsoft Sentinel Data connectors page, select the relevant connector.
To access support and maintenance for the connector, use the support contact link in the Supported by field on the side panel for the connecter.
For more information, see Data connector support.
Related content
For more information about solutions and data connectors in Microsoft Sentinel, see the following articles.