Integrating Sentinel CEF AMA with Secret Server
The Common Event Format (CEF) is a vendor-neutral format for logging data from network and security devices and appliances, such as firewalls, routers, detection and response solutions, and other systems like web servers. By integrating Secret Server with Microsoft Sentinel using Common Event Format (CEF) and Azure Monitor Agent (AMA), logs and events from Secret Server are efficiently imported into Sentinel for comprehensive monitoring and analysis. For more information on setting up logs in Secret Server, click here.