skills.rest
dstreefkerk
dstreefkerkCOMMUNITY
Explore all skills by this author →
𝕏@egosumdnsGitHub

codeless-connectors

Validate Microsoft Sentinel Codeless Connector Framework ARM templates for deployment.

4|Updated Mar 9, 2026
Search Tags:#data ingestion#connector#sentinel#arm template#kql#microsoft sentinel#codeless
One-click install
npx skills add https://github.com/dstreefkerk/claude-skills --skill codeless-connectors
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: codeless-connectors
Source: https://github.com/dstreefkerk/claude-skills/tree/main/plugins/sentinel/skills/codeless-connectors
Command: npx skills add https://github.com/dstreefkerk/claude-skills --skill codeless-connectors

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert guidance and validation for building custom data connectors for Microsoft Sentinel using the Codeless Connector Framework (CCF), eliminating common deployment errors and ensuring best practices.

Core Features & Use Cases

  • Comprehensive Reference: Access detailed documentation on ARM template structure, authentication types, pagination, KQL transforms, and UI definitions.
  • Validation & Best Practices: Follow a strict checklist and utilize provided scripts to ensure your connector ARM templates are valid and deployable.
  • Use Case: You need to create a new connector for a SaaS application's API. This Skill guides you through defining the ARM template, configuring authentication, handling API responses, and packaging it correctly for Microsoft Sentinel's Content Hub.

Quick Start

Use the codeless-connectors skill to generate an ARM template for a new REST API data connector.

Frequently Asked Questions about codeless-connectors

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a Microsoft Sentinel data connector using the Codeless Connector Framework?▼

To build a Microsoft Sentinel data connector using the Codeless Connector Framework (CCF), define an ARM template that specifies authentication methods, pagination types, KQL transformation rules, and UI definition elements for deployment.

What authentication methods can I configure in a Sentinel codeless connector ARM template?▼

Sentinel codeless connector ARM templates support Basic, APIKey, OAuth2, and JWT authentication methods, allowing you to securely connect and ingest data from various REST APIs into your workspace.

How do I apply KQL transformation rules when ingesting data through a CCF connector?▼

You apply KQL transformation rules within the ARM template to parse, filter, and format incoming API responses, ensuring the ingested data aligns with your Microsoft Sentinel workspace schema requirements.

How do I validate a Sentinel codeless connector ARM template before deployment?▼

You validate a Sentinel codeless connector ARM template by running provided validation scripts against your JSON structure and following a strict checklist to ensure authentication, pagination, and UI definitions are deployable.

What's the best way to handle API pagination in a Microsoft Sentinel codeless connector?▼

The best way to handle API pagination in a Microsoft Sentinel codeless connector is to configure the supported pagination types within your ARM template, ensuring complete data ingestion across multiple response pages.

Why does my Sentinel codeless connector deployment fail during ARM template validation?▼

Sentinel codeless connector deployments often fail due to ARM template structural errors, missing UI definition elements, or incorrectly configured authentication and pagination parameters that validation scripts can detect.

Related Skills

Explore More Software Engineering Skills→
ammonfifeammonfife

preset

Automate Azure OpenAI model deployment to optimal regions via ARM REST API.

Community
Advanced
EmeaAppGbbEmeaAppGbb

Hosted Agents in Microsoft Foundry

Deploy and manage containerized AI agents on Microsoft Foundry with azd.

Official
Advanced
Liberty91LTDLiberty91LTD
15

kql-writing

Document KQL best practices for Microsoft Sentinel detection queries.

Official
Intermediate
SalesforceCommerceCloudSalesforceCommerceCloud
51

b2c-logs

Retrieve and monitor B2C Commerce logs via the b2c CLI.

Official
Intermediate