How To: Use UFW(Uncomplicated Firewall) and Send the logs to Sentinel and Parse with a function for easy querying/viewing

Want to use your Firewall logs in Sentinel to check for connections and network activity? This guide will explain it all.

[https://medium.com/@truvis.thornton/how-to-use-ufw-uncomplicated-firewall-and-send-the-syslogs-to-sentinel-and-parse-the-events-for-48dccb8adc13](https://medium.com/@truvis.thornton/how-to-use-ufw-uncomplicated-firewall-and-send-the-syslogs-to-sentinel-and-parse-the-events-for-48dccb8adc13)


Not sure how to get logs into Sentinel? Check this:

[https://medium.com/@truvis.thornton/how-to-install-and-setup-azure-arc-ama-azure-monitor-agent-and-dcr-data-collection-rules-for-47381ee9d312](https://medium.com/@truvis.thornton/how-to-install-and-setup-azure-arc-ama-azure-monitor-agent-and-dcr-data-collection-rules-for-47381ee9d312)

blueteamsec check connections easy firewall function guide logs network network activity send sentinel