Integration with Microsoft Sentinel
Integrating flow data with Microsoft Sentinel provides a robust foundation for analyzing network traffic patterns, empowering proactive threat detection, network performance optimization, and comprehensive visibility for effective troubleshooting. Leveraging Microsoft Sentinel's advanced analytics, machine learning, and AI capabilities, organizations can uncover actionable insights with unparalleled accuracy and efficiency. This integration strengthens security postures, enhances threat intelligence, and enables streamlined network operations, ensuring organizations stay ahead of emerging threats and challenges.
You can see NFO output in Sentinel Logs.
You can integrate NetFlow Optimizer with Microsoft Microsoft Sentinel by sending NFO data directly to Azure Analytics Workspace. See configuring Azure Log Analytics Workspace in Outputs section of NFO Administration Guide for more details.