↳ GitHub sourceConnector

Garrison ULTRA Remote Logs

Description

The [Garrison ULTRA](https://www.garrison.com/en/garrison-ultra-cloud-platform) Remote Logs connector allows you to ingest Garrison ULTRA Remote Logs into Microsoft Sentinel.

Declared status: 1
Declared author / publisher: Garrison

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

Garrison_ULTRARemoteLogs_CL

Declared permissions

read and write permissions on the workspace are required.

Workspace

Workspace

read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).

Keys

Workspace

Garrison ULTRA

To use this data connector you must have an active [Garrison ULTRA](https://www.garrison.com/en/garrison-ultra-cloud-platform) license.

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Deployment - Azure Resource Manager (ARM) Template

These steps outline the automated deployment of the Garrison ULTRA Remote Logs data connector using an ARM Tempate. 1. Click the **Deploy to Azure** button below. [![Deploy To Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Frefs%2Fheads%2Fmaster%2FSolutions%2FGarrison%2520ULTRA%2FData%2520Connectors%2FGarrisonULTRARemoteLogs%2Fazuredeploy_DataCollectionResources.json) 2. Provide the required details such as Resource Group, Microsoft Sentinel Workspace and ingestion configurations > **NOTE:** It is recommended to create a new Resource Group for deployment of these resources. 3. Mark the checkbox labeled **I agree to the terms and conditions stated above**. 4. Click **Purchase** to deploy.

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/Garrison ULTRA/Data Connectors/GarrisonULTRARemoteLogs/GarrisonULTRARemoteLogs_ConnectorUI.json ↗
Commit: 629d1d3 ↗
Source identifier: GarrisonULTRARemoteLogs

Additional source files 2

Solutions/Garrison ULTRA/Data Connectors/GarrisonULTRARemoteLogs/GarrisonULTRARemoteLogs_ConnectorUI.jsonsource ↗Solutions/Garrison ULTRA/Data/Solution_GarrisonULTRARemoteLogs.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.