↳ Source GitHubConnecteur

Symantec Integrated Cyber Defense Exchange

Description

Symantec ICDx connector allows you to easily connect your Symantec security solutions logs with Microsoft Sentinel, to view dashboards, create custom alerts, and improve investigation. This gives you more insight into your organization’s network and improves your security operation capabilities.

Statut déclaré: 1
Auteur / éditeur déclaré: Symantec

Sources déclarées

Métadonnées du fichier source. Aucune dépendance déduite du KQL.

Types de données

SymantecICDx_CL

Permissions déclarées

read and write permissions.

Workspace

Workspace

read permissions to shared keys for the workspace. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key).

Keys

Workspace

Instructions du connecteur

Contenu publié dans le dépôt. Consultez le fichier original pour l’ensemble des paramètres.

Configure and connect Symantec ICDx

1. On the ICDx navigation bar, click **Configuration**. 2. At the top of the **Configuration** screen, click **Forwarders**, and next to Microsoft Sentinel (Log Analytics), click **Add**. 3. In the Microsoft Sentinel (Log Analytics) window that opens, click **Show Advanced**. [See the documentation to set advanced features](https://aka.ms/SymantecICDX-learn-more). 4. Make sure that you set a name for the forwarder and under Azure Destination, set these required fields: - Workspace ID: Paste the Workspace ID from the Microsoft Sentinel portal connector page. - Primary Key: Paste the Primary Key from the Microsoft Sentinel portal connector page. - Custom Log Name: Type the custom log name in the Microsoft Azure portal Log Analytics workspace to which you are going to forward events. The default is SymantecICDx. 5. Click Save and to start the forwarder, go to Options > More and click **Start**.

Workspace ID

Primary Key

Contenus associés

Liens établis à partir des identifiants déclarés et des manifests des solutions.

Traçabilité de la source

GitHub

Les valeurs affichées proviennent des fichiers du dépôt Azure/Azure-Sentinel. Elles décrivent le modèle publié, pas la configuration de votre workspace.

Fichier: Solutions/Symantec Integrated Cyber Defense/Data Connectors/SymantecICDX.JSON ↗
Commit: 629d1d3 ↗
Identifiant source: Symantec

Autres fichiers source 2

Solutions/Symantec Integrated Cyber Defense/Data Connectors/SymantecICDX.JSONsource ↗Solutions/Symantec Integrated Cyber Defense/Data/Solution_Symantec.jsonsolution-membership ↗

GSTEP / SUIVI DU CATALOGUE

Ajouté au catalogue : 16 sept. 2026 · 05:49 UTC
Dernier changement observé : 16 sept. 2026 · 05:49 UTC

Dates de synchronisation GSTEP, distinctes des dates de publication du contenu source.