Issues

• Support Multiple Box Instances/Connections in Microsoft Sentinel Box Solution

  Connectorenhancementfeature requestSolution
  Azure/Azure-Sentinel#15272 · Filter by author svc-gh-secops opened on Oct 6, 2026
  

• Snowflake connector OAuth support

  Connectorenhancementfeature request
  Azure/Azure-Sentinel#15266 · Filter by author RhysPFF opened on Oct 5, 2026
  

• Clarification on ASIM classification of Barracuda WAF SESSION_TIMEOUT events as Audit

  ASIM
  Azure/Azure-Sentinel#15250 · Filter by author wiperpaul opened on Oct 2, 2026
  

• ASIM Meraki: should site-to-site VPN lifecycle events be normalized as NetworkSession?

  ASIM
  Azure/Azure-Sentinel#15249 · Filter by author wiperpaul opened on Oct 2, 2026
  

• AtlassianOrganizationAuditConnector_CCF/Atlassian REST API Poller – Persistent Pagination Replay Causing Significant Duplicate Ingestion

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#15207 · Filter by author inquisitive-39 opened on Sep 28, 2026
  

• [GCP Pub/Sub Audit Logs] system_event entries are silently dropped at ingestion

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#15204 · Filter by author rabbanee-elsayed-cko opened on Sep 25, 2026
  

• Unable to create Rare Process as a Service Analytic Rule

  Analytic Rules
  Azure/Azure-Sentinel#15194 · Filter by author SudBuddy opened on Sep 24, 2026
  4

  

• ASIM custom unifying parsers (follow-up to #14880): the docs "line to add" table drops disabled/pack by construction; Im_DnsCustom eventtype=lookup vs Query-gating leaves; watchlist example uses the built-in-only key

  ASIMParser
  Azure/Azure-Sentinel#15172 · Filter by author spasaintk opened on Sep 22, 2026
  1

  

• Meraki Air Marshal - Missing Fields

  Connector
  Azure/Azure-Sentinel#15167 · Filter by author jamesglaves opened on Sep 22, 2026
  

• Microsoft Business Applications Dataverse Function App pagination bug

  Connector
  Azure/Azure-Sentinel#15128 · Filter by author ben1994mc opened on Sep 15, 2026
  

• Meraki API Switch

  ConnectorProblem Solution
  Azure/Azure-Sentinel#15115 · Filter by author jackbaz opened on Sep 14, 2026
  

• [CrowdStrike API CCF connector] Majority of V2_CL columns cannot be populated; device fields not extracted from the device object

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#15094 · Filter by author CaptainCook112 opened on Sep 10, 2026
  

• Amazon Web Services S3 - Connections Not Visible in Data Connector Page

  Connector
  Azure/Azure-Sentinel#15082 · Filter by author hernerwerzog opened on Sep 9, 2026
  

• AWS CloudTrail : connector validation failed there are two connectors with different names and the same kind and context id

  Connector
  Azure/Azure-Sentinel#15075 · Filter by author zahrajuma opened on Sep 8, 2026
  7

  

• Migrate GitHub (Webhooks) V2 connector Function to Flex Consumption plan

  Connectorenhancementfeature request
  Azure/Azure-Sentinel#15022 · Filter by author MKarimi-MTH opened on Sep 1, 2026
  

• Okta CCF connector: stuck poller re-ingests old events with new timestamps

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#14984 · Filter by author rabbanee-elsayed-cko opened on Aug 26, 2026
  

• Support FortiAnalyzer Azure Monitor Log Ingestion API with CommonSecurityLog Mapping

  ConnectorDCRenhancementfeature request
  Azure/Azure-Sentinel#14981 · Filter by author S3COPS opened on Aug 26, 2026
  

• Confluence Audit CCP connector: "Atlassian Confluence organization URL" field/placeholder is misleading for scoped API tokens (401 Unauthorized)

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#14909 · Filter by author SysAdminforCoffee opened on Aug 13, 2026
  2

  

• CCF Cisco Umbrella (AWS S3) Connector — S3B40034 due to duplicated/malformed S3 prefix construction

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#14866 · Filter by author jcmlico opened on Aug 10, 2026
  11

  

• OCI CCF - Error: "The config for this connector was malformed." - Sovereign Cloud

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#14843 · Filter by author S3COPS opened on Aug 5, 2026
  5

  

• TI Map Domain entity to Cloud App Events

  Analytic Rules
  Azure/Azure-Sentinel#14779 · Filter by author defend-pippa opened on Jul 28, 2026
  4

  

• AWS S3 Connector creates AWSGuardDuty records but all parsed fields remain empty for native GuardDuty Export Findings

  Connector
  Azure/Azure-Sentinel#14747 · Filter by author satheeshkumar5555 opened on Jul 23, 2026
  

• Azure DevOps Audit Logs connector: support app-only authentication or clarify why delegated authorization is required

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#14725 · Filter by author underl0ck opened on Jul 21, 2026
  3

  

• DocuSign Security Events Function app uses API going EOL mid-Sept

  Connector
  Azure/Azure-Sentinel#14701 · Filter by author chloec1-tech opened on Jul 17, 2026
  2

  

• GitHub Enterprise Audit Log (via Codeless Connector Framework) Fails to Connect

  Codeless Connector Framework (CCF) ConnectorConnector
  Azure/Azure-Sentinel#14695 · Filter by author ChristopherMank opened on Jul 16, 2026
  4