VirtualMetric DataStream for Microsoft Sentinel

VirtualMetric DataStream is a powerful security data ingestion and processing solution that extends Microsoft Sentinel and Microsoft Sentinel data lake with advanced log collection and transformation capabilities. It enables organizations to collect security logs from diverse sources, normalize and parse them in line with ASIM schemas, apply filtering, and enrich events with contextual data.

A key advantage is its ability to reduce ingest costs and improve signal quality by removing unnecessary fields from security logs (>50% reduction), ensuring only valuable and actionable data flows into Microsoft Sentinel and related storage.

With built-in support for both ASIM normalized tables and standard security tables, including custom and native options, DataStream ensures flexibility and consistency in how security data is structured and consumed. Logs can be routed seamlessly to Microsoft Sentinel, Microsoft Sentinel data lake, Azure Data Explorer, or Azure Blob Storage, giving enterprises complete control over storage and analysis strategies.

By providing end-to-end data handling (collection, normalization, parsing, filtering, enrichment, garbage removal, and routing), VirtualMetric DataStream empowers security teams to optimize their data pipelines, reduce noise, and maximize the effectiveness of Microsoft Sentinel.

This Microsoft Sentinel solution includes three data connectors that accelerate and simplify the integration of VirtualMetric DataStream with your security operations:

• VirtualMetric DataStream for Microsoft Sentinel: Deploys Data Collection Rules to ingest security telemetry directly into Microsoft Sentinel standard and ASIM tables
• VirtualMetric DataStream for Microsoft Sentinel data lake: Enables cost-effective long-term storage with standard and ASIM tables in Microsoft Sentinel data lake
• VirtualMetric Director Proxy: Provides a secure Azure Function App bridge between VirtualMetric DataStream and Azure services, enabling flexible routing and advanced data handling scenarios

These connectors streamline deployment, reduce configuration complexity, and enable organizations to quickly realize value from their VirtualMetric DataStream investment within the Microsoft Sentinel ecosystem.