Lucid audit logs ingestor for Azure Sentinel

Question

Hello,

I am a new admin for Lucid Chart at my company, and I am being tasked with trying to push audit logs to our Azure Sentinel SIEM. I see there is a script for this purpose with Splunk being used as an example, but don’t know what I would need to do to get this working with Azure Sentinel. Can someone provide me some guidance on what I need to do to get logs pushed to Azure Sentinel? I am not a developer, and again new to this space so any information to get that working is appreciated.

Script I am referencing: sample-lucid-rest-applications/audit-logs-ingestor at main · lucidsoftware/sample-lucid-rest-applications · GitHub

Thank you,

Taylor Lowe

Caden E · Answer

Hi Taylor,Our apologies for not answering you sooner; this message appears to have slipped past us.I hope you’ve been able to work out a solution to your issue. Unfortunately we don’t have any recommendations to offer for how to ingest your audit logs into Sentinel, but things like this do get asked about from time to time, so I’ll bring this upto product leadership. Hopefully the example script can at least serve as a good starting point.

Create an account in the community

Log in to the community