Microsoft Azure log source parameters for Microsoft Azure Event Hubs

If QRadar does not automatically detect the log source, add a Microsoft Azure Event Hubs log source on the QRadar Console by using the Microsoft Azure protocol.

When using the Microsoft Azure protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Microsoft Azure events from Microsoft Azure Event Hubs:
Table 1. Microsoft Azure log source parameters for the Microsoft Azure Event Hubs DSM
Parameter Description
Log Source type Microsoft Azure
Protocol Configuration Microsoft Azure Event Hubs
Log Source Identifier

An identifiable name or IP address for the log source. When the Use as Gateway Log Source field is selected, the Log Source Identifier value is not used.

For a complete list of Microsoft Azure Event Hubs protocol parameters and their values, see Microsoft Azure Event Hubs protocol configuration options.