Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Robert_van_Effe
Explorer

Log Exporter to Microsoft Defender for Cloud Apps

We are trying to setup Log Exporter to Microsoft Defender for Cloud Apps (formerly known as Microsoft Cloud App Security)
And we are seeing that data is sent to the Log Collector, but it doesn't show any data after it.

Has anyone managed to get it working with the settings like we have (see below) and if so yes, can someone tell me if they have altered some *.xml files?


name: XX-FW3-LOG
enabled: true
target-server: 20.71.xxx.xxx
target-port: 443
protocol: tcp
format: syslog
read-mode: raw

Thanks in advance

0 Kudos
2 Replies
Ryan_Ryan
Advisor

We have the same issue, did you get this resolved?

0 Kudos
Robert_van_Effe
Explorer

Yes, we sure did, we changed the format to CEF and also changed the Azure Log Collector to receive CEF. After that we could see the data coming in and create reports from it

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 20 May 2025 @ 11:30 AM (PDT)

    Las Vegas: Check Point Hybrid Mesh

    Wed 21 May 2025 @ 11:30 AM (MST)

    Tempe, AZ: Check Point Hybrid Mesh

    Tue 03 Jun 2025 @ 06:00 PM (EDT)

    Montreal: CPX Recap

    Tue 10 Jun 2025 @ 06:00 PM (EDT)

    Quebec City: CPX Recap
    CheckMates Events