Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
1 year ago

Microsoft sentinel data to Microsoft Fabric Lakeshouse

Hi Team,

 

I got a requirement to Move Microsoft Sentinel data to Fabric, can you please help me with steps. I tried few blogs but didn't helped. Any help is appreciated.

Need Help

2 Replies

  • nilendraFabric's avatar
    nilendraFabric
    Super User
    1 year ago

    Hello Anonymous 

     

    Microsoft Sentinel stores logs and security data in Azure Log Analytics. To export this data for use in Fabric, you need to configure continuous export or use an Event Hub for streaming data.

     

    All logs ingested into Microsoft Sentinel are stored in Azure Log Analytics, which acts as the central repository for data collection and storage

     

    from here there are 2 ways to ingest data in Fabric

     

    1. continuously streaming data by setting Azure event hub bu using data export option. 

    2.  Using azure storage by Configure Data Export from log analytics workspace. 

     

    Select the tables you want to export (e.g., `SigninLogs`, `SecurityAlert`, etc.).

     

    Once data is in storage or event hub then you can use RTI in fabric for eventhub or even use pipelines , shortcuts etc for azure storage data

     

    hope this helps

    • Adityakumar's avatar
      Adityakumar
      Advocate I
      1 year ago

      Data is stored in blob storage, I tried to create a pipeline with copy activity but it failed. Can you please share step by step process if possible.