Microsoft Sentinel

What Control Center uses

Alerts, incidents and log search.

Listed under SIEM and managed SOC.

What you need

A Microsoft Entra app with a Microsoft Sentinel role on the workspace. Log search runs through the Azure Monitor Logs API.

Also have ready:

• An admin sign-in for Microsoft Sentinel, with permission to create an API key or register an app.
• A Microsoft Sentinel plan that includes API access.
• Your region or instance address, if Microsoft Sentinel uses one.

API documentation

Public docs: anyone can read them.

Connect it with your AI

Have your AI walk you through it, from this page and the vendor’s own docs.

Prompt for Microsoft Sentinel

Copy promptChatGPTClaudeCopilot

Read https://www.resultsiq.ai/docs/tools/sentinel/index.md and the vendor's API docs at https://learn.microsoft.com/en-us/rest/api/securityinsights/ .

I'm connecting Microsoft Sentinel to ResultsIQ Control Center for my MSP. Take me through getting the access it needs:
1. First check what we need: the right Microsoft Sentinel plan, an admin sign-in, and our region or instance address if it uses one.
2. Then tell me exactly where to go in Microsoft Sentinel and what to create, one step at a time. Wait for me before the next step.

Use only those sources, and say when they don't cover something. Never ask me for the API key or password itself: I enter those in Control Center, not in this chat.

In Control Center

When your onboarding opens, you add Microsoft Sentinel in Control Center with that access, then choose which clients it covers and which API operations it can use. The key goes in Control Center’s vault, never in a chat.

Step-by-step screens for this connection are coming to this page. Until then, How connections work covers the rules every connection follows.

Product names belong to their owners. Listing a tool shows that Control Center can work with it, not a partnership or endorsement. Vendors change their APIs and plans, so their own docs are the final word. This page was checked against the vendor’s own site in November 2026.