Sign inConnect your agent
breakingdeprecated

Logpush Connectors, Logs - Azure Functions-based Microsoft Sentinel connector deprecation

Announced
Effective
Sunset
Tags
Logpush-Connectors, Logs
Severity
breaking, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-08-26-sentinel-functions-connector-deprecation/

<p>Cloudflare Enterprise customers using the <a href="https://marketplace.microsoft.com/en-us/product/cloudflare.cloudflare_sentinel?tab=Overview" target="_blank" rel="noopener">Azure Functions-based Microsoft Sentinel connector<span class="external-link"> ↗︎</span></a> must migrate to the <a href="https://marketplace.microsoft.com/en-us/product/cloudflare.azure-sentinel-solution-cloudflare-ccf?tab=Overview" target="_blank" rel="noopener">Cloudflare for Microsoft Sentinel Codeless Connector Framework (CCF) connector<span class="external-link"> ↗︎</span></a> by 2026-09-14.</p> <p>Microsoft is deprecating the Azure Monitor HTTP Data Collector API. Support for the API ends on 2026-09-14. As a result, Cloudflare will no longer maintain the Azure Functions-based connector after that date.</p> <p>To migrate, follow the <a href="https://developers.cloudflare.com/analytics/analytics-integrations/sentinel/">Microsoft Sentinel integration setup guide</a>.</p> <div tabindex="-1" class="heading-wrapper level-h4"><h4 id="additional-resources">Additional resources</h4><a class="anchor-link" href="#additional-resources"><span aria-hidden="true" class="anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24"><path fill="currentcolor" d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 0 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 1 0-1.42-1.42Zm8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 0 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 1 0 1.42 1.42l3.88-3.89a4.49 4.49 0 0 0 0-6.33ZM8.83 15.17a1 1 0 0 0 1.1.22 1 1 0 0 0 .32-.22l4.92-4.92a1 1 0 0 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42Z"></path></svg></span></a></div> <ul> <li><a href="https://marketplace.microsoft.com/en-us/product/azure-application/cloudflare.azure-sentinel-solution-cloudflare-ccf?tab=Overview" target="_blank" rel="noopener">Download Cloudflare's CCF Sentinel Solution<span class="external-link"> ↗︎</span></a></li> <li><a href="https://learn.microsoft.com/en-us/azure/sentinel/datalake/sentinel-lake-overview" target="_blank" rel="noopener">Microsoft Sentinel data lake overview<span class="external-link"> ↗︎</span></a></li> <li><a href="https://learn.microsoft.com/en-us/azure/sentinel/create-codeless-connector" target="_blank" rel="noopener">About the CCF platform<span class="external-link"> ↗︎</span></a></li> </ul> <p>For more information, refer to Microsoft's <a href="https://learn.microsoft.com/en-us/previous-versions/azure/azure-monitor/logs/data-collector-api?tabs=powershell" target="_blank" rel="noopener">Azure Monitor HTTP Data Collector API deprecation notice<span class="external-link"> ↗︎</span></a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.