Forum Discussion
Help Ingesting PingID Logs into Microsoft Sentinel
Hello, Microsoft Sentinel has a Data Connector for PingFederate, however this does not capture other PingIdentity products. Namely, PingID logs. Making this post asking if there are any ways...
hi colinc10
I'm also testing out PingID log ingestion.
There may be 2 options:
- webhook configuration - PingOne supports webhooks - so you'd need to set up a DCE/DCR configuration which uses a SAS token in the url to authenticate - Ping doesn't support OAuth so I think a SAS token/url would be the only way. I'm hoping to try this method this week.
- syslog - IF the Ping Federate syslog connector also pulls in the PingID logs then that's a supported method - have you tried this?
