topic Re: Microsoft sentinel data to Microsoft Fabric Lakeshouse in Data Engineering

Microsoft sentinel data to Microsoft Fabric Lakeshouse

Anonymous — Wed, 12 Feb 2025 02:43:32 GMT

Hi Team,

I got a requirement to Move Microsoft Sentinel data to Fabric, can you please help me with steps. I tried few blogs but didn't helped. Any help is appreciated.

Re: Microsoft sentinel data to Microsoft Fabric Lakeshouse

nilendraFabric — Wed, 12 Feb 2025 18:16:45 GMT

Hello @Anonymous

Microsoft Sentinel stores logs and security data in Azure Log Analytics. To export this data for use in Fabric, you need to configure continuous export or use an Event Hub for streaming data.

All logs ingested into Microsoft Sentinel are stored in Azure Log Analytics, which acts as the central repository for data collection and storage

from here there are 2 ways to ingest data in Fabric

1. continuously streaming data by setting Azure event hub bu using data export option.

2. Using azure storage by Configure Data Export from log analytics workspace.

Select the tables you want to export (e.g., `SigninLogs`, `SecurityAlert`, etc.).

Once data is in storage or event hub then you can use RTI in fabric for eventhub or even use pipelines , shortcuts etc for azure storage data

hope this helps

Re: Microsoft sentinel data to Microsoft Fabric Lakeshouse

Adityakumar — Mon, 17 Feb 2025 07:28:34 GMT

Data is stored in blob storage, I tried to create a pipeline with copy activity but it failed. Can you please share step by step process if possible.