↳ GitHub sourceConnector
Infoblox IQ for Threat Defense Insight Data Connector via REST API
An inconsistency was detected in the sources: variants or an invalid file. Check the files and commit shown below.
Description
The Infoblox IQ for Threat Defense Insight Data Connector allows you to easily connect your Infoblox IQ for Threat Defense Insight data with Microsoft Sentinel. By connecting your logs to Microsoft Sentinel, you can take advantage of search & correlation, alerting, and threat intelligence enrichment for each log.
- Declared status
- 1
- Declared author / publisher
- Infoblox
Declared sources
Metadata from the source file. No dependencies inferred from KQL.
Data types
Declared permissions
read and write permissions are required.
Workspace
Workspace
read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).
Keys
Workspace
Connector instructions
Content published in the repository. Refer to the original file for all parameters.
Parsers
>This data connector depends on a parser based on a Kusto Function to work as expected called [**InfobloxInsight**](https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Infoblox/Parsers/InfobloxInsight.yaml) which is deployed with the Microsoft Sentinel Solution.
Infoblox IQ for Threat Defense
>This data connector assumes you have access to Infoblox IQ for Threat Defense. You can find more information about it [**here**](https://docs.infoblox.com/space/BloxOneThreatDefense/2448392230/Infoblox+IQ+for+Threat+Defense).
Follow the steps below to configure this data connector
1. Generate an Infoblox API Key and copy it somewhere safe
In the [Infoblox Cloud Services Portal](https://csp.infoblox.com/atlas/app/welcome), generate an API Key and copy it somewhere safe to use in the next step. You can find instructions on how to create API keys [**here**](https://docs.infoblox.com/space/BloxOneThreatDefense/230394187/How+Do+I+Create+an+API+Key%3F).
2. Configure the Infoblox-IQ-for-TD-Get-Insights-API playbook
Create and configure the **Infoblox-IQ-for-TD-Get-Insights-API** playbook which is deployed with this solution. Enter your Infoblox API key and the Log Analytics Workspace Name in the appropriate parameters when prompted.
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- File
- Solutions/Infoblox/Data Connectors/InfobloxSOCInsights/InfobloxSOCInsightsDataConnector_API.json ↗
- Commit
9800e51↗- Source identifier
InfobloxSOCInsightsDataConnector_API
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC