README.md

Import-AzSentinelDataConnector

SYNOPSIS

Import Azure Sentinel Data Connectors

SYNTAX

Import-AzSentinelDataConnector [-SubscriptionId <String>] -WorkspaceName <String> -SettingsFile <FileInfo>
 [<CommonParameters>]

DESCRIPTION

This function imports Azure Sentinel Data Connectors

EXAMPLES

EXAMPLE 1

Import-AzSentinelDataConnector -WorkspaceName "" -SettingsFile ".\examples\DataConnectors.json"
In this example all the Data Conenctors configured in the JSON file will be created or updated

DataConnectors.json

{
  "AzureSecurityCenter": [
    {
      "subscriptionId": "ebdab2f1-0b79-4181-a70d-82f0ff39243e",
      "state": "Enabled"
    },
    {
      "subscriptionId": "ebdab2f1-0b79-4181-a70d-82f0ff39243e",
      "state": "Enabled"
    }
  ],
  "AzureActivityLog": [
    {
      "subscriptionId": "ebdab2f1-0b79-4181-a70d-82f0ff39243e"
    },
    {
      "subscriptionId": "ebdab2f1-0b79-4181-a70d-82f0ff39243e"
    }
  ],
  "ThreatIntelligenceTaxii": [
    {
      "friendlyName": "testserver",
      "taxiiServer": "https://limo.anomali.com/api/v1/taxii2/feeds/",
      "collectionId": "107",
      "username": "guest",
      "password": "guest",
      "state": "enabled"
    }
  ]
}