Garrison ULTRA Remote Logs (using Azure Functions) connector for Microsoft Sentinel
The Garrison ULTRA Remote Logs connector allows you to ingest Garrison ULTRA Remote Logs into Microsoft Sentinel.
This is autogenerated content. For changes, contact the solution provider.
Connector attributes
| Connector attribute | Description |
|---|---|
| Log Analytics table(s) | Garrison_ULTRARemoteLogs_CL |
| Data collection rules support | Not currently supported |
| Supported by | Garrison |
Query samples
Last 10 logs
Garrison_ULTRARemoteLogs_CL
| top 10 by TimeGenerated desc
Prerequisites
To integrate with Garrison ULTRA Remote Logs (using Azure Functions) make sure you have:
- Garrison ULTRA: To use this data connector you must have an active Garrison ULTRA license.
Vendor installation instructions
Deployment - Azure Resource Manager (ARM) Template
These steps outline the automated deployment of the Garrison ULTRA Remote Logs data connector using an ARM Template.
Click the Deploy to Azure button below.
Provide the required details such as Resource Group, Microsoft Sentinel Workspace and ingestion configurations
Note
It is recommended to create a new Resource Group for deployment of these resources.
Mark the checkbox labeled I agree to the terms and conditions stated above.
Click Purchase to deploy.
Next steps
For more information, go to the related solution in the Azure Marketplace.