Microsoft sentinel data to Microsoft Fabric Lakeshouse

[Anonymous]

Hi Team,

I got a requirement to Move Microsoft Sentinel data to Fabric, can you please help me with steps. I tried few blogs but didn't helped. Any help is appreciated.

[nilendraFabric]

Hello @Anonymous 

Microsoft Sentinel stores logs and security data in Azure Log Analytics. To export this data for use in Fabric, you need to configure continuous export or use an Event Hub for streaming data.

All logs ingested into Microsoft Sentinel are stored in Azure Log Analytics, which acts as the central repository for data collection and storage

from here there are 2 ways to ingest data in Fabric

1. continuously streaming data by setting Azure event hub bu using data export option. 

2.  Using azure storage by Configure Data Export from log analytics workspace. 

Select the tables you want to export (e.g., `SigninLogs`, `SecurityAlert`, etc.).

Once data is in storage or event hub then you can use RTI in fabric for eventhub or even use pipelines , shortcuts etc for azure storage data

hope this helps

[Adityakumar]

Data is stored in blob storage, I tried to create a pipeline with copy activity but it failed. Can you please share step by step process if possible.