
06.06.2025 Read More
Ingesting custom logs from Microsoft Sentinel Auxiliary tables using Logstash
On July 25, 2024 Microsoft announced the public preview for auxiliary logs. To date (May 2025) no general availability launch has been announced, however it can be used by anyone as it is in public preview. Since then, Sentinel Professionals have been trying their hand at working implementations for Auxiliary Logs.