codeless-connectors

Validate Microsoft Sentinel Codeless Connector Framework ARM templates for deployment.

4|Updated Mar 9, 2026

Search Tags:#data ingestion #connector #sentinel #arm template #kql #microsoft sentinel #codeless

Ready to run

npx skills add https://github.com/dstreefkerk/claude-skills --skill codeless-connectors

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: codeless-connectors
Source: https://github.com/dstreefkerk/claude-skills/tree/main/plugins/sentinel/skills/codeless-connectors
Command: npx skills add https://github.com/dstreefkerk/claude-skills --skill codeless-connectors

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert guidance and validation for building custom data connectors for Microsoft Sentinel using the Codeless Connector Framework (CCF), eliminating common deployment errors and ensuring best practices.

Core Features & Use Cases

Comprehensive Reference: Access detailed documentation on ARM template structure, authentication types, pagination, KQL transforms, and UI definitions.
Validation & Best Practices: Follow a strict checklist and utilize provided scripts to ensure your connector ARM templates are valid and deployable.
Use Case: You need to create a new connector for a SaaS application's API. This Skill guides you through defining the ARM template, configuring authentication, handling API responses, and packaging it correctly for Microsoft Sentinel's Content Hub.

Quick Start

Use the codeless-connectors skill to generate an ARM template for a new REST API data connector.

Frequently Asked Questions about codeless-connectors

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I build a Microsoft Sentinel data connector using the Codeless Connector Framework?▼

To build a Microsoft Sentinel data connector using the Codeless Connector Framework (CCF), define an ARM template that specifies authentication methods, pagination types, KQL transformation rules, and UI definition elements for deployment.

What authentication methods can I configure in a Sentinel codeless connector ARM template?▼

Sentinel codeless connector ARM templates support Basic, APIKey, OAuth2, and JWT authentication methods, allowing you to securely connect and ingest data from various REST APIs into your workspace.

How do I apply KQL transformation rules when ingesting data through a CCF connector?▼

You apply KQL transformation rules within the ARM template to parse, filter, and format incoming API responses, ensuring the ingested data aligns with your Microsoft Sentinel workspace schema requirements.

How do I validate a Sentinel codeless connector ARM template before deployment?▼

You validate a Sentinel codeless connector ARM template by running provided validation scripts against your JSON structure and following a strict checklist to ensure authentication, pagination, and UI definitions are deployable.

What's the best way to handle API pagination in a Microsoft Sentinel codeless connector?▼

The best way to handle API pagination in a Microsoft Sentinel codeless connector is to configure the supported pagination types within your ARM template, ensuring complete data ingestion across multiple response pages.

Why does my Sentinel codeless connector deployment fail during ARM template validation?▼

Sentinel codeless connector deployments often fail due to ARM template structural errors, missing UI definition elements, or incorrectly configured authentication and pagination parameters that validation scripts can detect.