Azure Sentinel
Integrating Keeper SIEM event pushes to Azure Sentinel and Log Analytics
Overview
Keeper supports event streaming into Azure Sentinel / Log Analytics environments. External logging is real-time, and new events will appear almost immediately. Setup instructions are below.
In Azure, go to Log Analytics workspaces > Select Workspace and then "Agents Management". From here you can retrieve a Workspace ID and Key. Provide these two fields to Keeper to start streaming logs to your selected workspace.
![](https://docs.keeper.io/~gitbook/image?url=https%3A%2F%2F4290574019-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F-LO5CAzpxoaEquZJBpYz%252Fuploads%252FKI35hleFnzARHFWRZE2A%252Fimage.png%3Falt%3Dmedia%26token%3Dee8e3700-b5a8-4345-82f0-62e37d388d78&width=768&dpr=4&quality=100&sign=98793765&sv=1)
Last updated