Cisco eStreamer with FMC & Microsoft sentinel

[AshbyJohnDNV]

Hi, have a successful connection of FMC with eStreamer and can see syslog in Sentinel. However see this error against the DCR rule int Sentinel. Even though the DCR rule is created does this mean no events in CEF format reaching Sentinel? 

FMC is on version 7.4.1.1

Redhat Linux 9 Ent

Python 3

[Chekol Retta]

I wonder if someone can provide installation files and technical guides. 

[adrian_iovita]

For the Estreamer?

[Chekol Retta]

For eNcore and sentinel

[Chekol Retta]

Once the log reaches to Azure/syslog forwarders.