https://live.paloaltonetworks.com/t5/cortex-xsiam-discussions/azure-xsiam/m-p/1255313#M415 <P>How is on-boarding logs using Microsoft Azure integration different from using the Azure Event hub integration?&nbsp;</P> <P><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Onboard-Microsoft-Azure" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Onboard-Microsoft-Azure</A>&nbsp;<BR /><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Ingest-Logs-from-Microsoft-Azure-Event-Hub" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Ingest-Logs-from-Microsoft-Azure-Event-Hub</A>&nbsp;</P> <P>Also any details on what specifically is the automation features that the Microsoft Azure integration provides would be helpful? Does this replace the need to deploy agents?</P> <P>&nbsp;</P> <P><LI-PRODUCT title="Cortex XSIAM" id="Cortex_XSIAM"></LI-PRODUCT>&nbsp;<LI-PRODUCT title="Azure" id="Azure"></LI-PRODUCT>&nbsp;</P> Wed, 03 Jun 2026 10:57:45 GMT bridgetlitt 2026-06-03T10:57:45Z https://live.paloaltonetworks.com/t5/cortex-xsiam-discussions/azure-xsiam/m-p/1255313#M415 <P>How is on-boarding logs using Microsoft Azure integration different from using the Azure Event hub integration?&nbsp;</P> <P><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Onboard-Microsoft-Azure" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation/Onboard-Microsoft-Azure</A>&nbsp;<BR /><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Ingest-Logs-from-Microsoft-Azure-Event-Hub" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Ingest-Logs-from-Microsoft-Azure-Event-Hub</A>&nbsp;</P> <P>Also any details on what specifically is the automation features that the Microsoft Azure integration provides would be helpful? Does this replace the need to deploy agents?</P> <P>&nbsp;</P> <P><LI-PRODUCT title="Cortex XSIAM" id="Cortex_XSIAM"></LI-PRODUCT>&nbsp;<LI-PRODUCT title="Azure" id="Azure"></LI-PRODUCT>&nbsp;</P> Wed, 03 Jun 2026 10:57:45 GMT https://live.paloaltonetworks.com/t5/cortex-xsiam-discussions/azure-xsiam/m-p/1255313#M415 bridgetlitt 2026-06-03T10:57:45Z