Blog: Export Pulumi Cloud audit logs to Microsoft Sentinel by hlynnj · Pull Request #18436 · pulumi/docs

hlynnj · 2026-04-08T17:59:28Z

Summary

Adds a blog post announcing Microsoft Sentinel as a new audit log export destination
Covers the connector setup (console and CLI), what gets ingested, and links to the full docs

Companion to the docs PR: #18432

Need to wait to merge until the UI has been deployed!

pulumi-bot · 2026-04-08T18:35:38Z

Your site preview for commit e49c866 is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-18436-e49c8660.s3-website.us-west-2.amazonaws.com

pulumi-bot · 2026-04-09T20:13:18Z

Lighthouse Performance Report

Commit: e49c866 | Metric definitions

Page	Device	Score	FCP	LCP	TBT	CLS	SI
Homepage	Mobile	🟡 69	2.4s	2.4s	858ms	0.014	6.7s
Homepage	Desktop	🟡 79	0.7s	0.9s	22ms	0.271	2.7s
Install Pulumi	Mobile	🔴 40	4.5s	5.9s	214ms	0.432	7.5s
Install Pulumi	Desktop	🟡 86	1.2s	1.5s	21ms	0.020	2.9s
AWS Get Started	Mobile	🟡 51	4.5s	5.9s	376ms	0.093	7.5s
AWS Get Started	Desktop	🟡 86	1.2s	1.5s	21ms	0.025	2.9s

hlynnj · 2026-04-09T20:19:14Z

@claude review this blog post for me again

claude · 2026-04-09T20:44:34Z

Social Media Review

No social copy to review — the blog post in this PR (Export Pulumi Cloud Audit Logs to Microsoft Sentinel) has a social: false block in its frontmatter and will not be promoted on social media.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Create lynn-jung author profile with avatar - Add feature.png (Azure + Pulumi logo variant) and meta.png - Fix title to Title Case - Link first mention of Pulumi Cloud to product page - Add feature_image to frontmatter Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Point template URLs to pulumi/examples instead of pulumi/sentinel-audit-log-connector - Update console setup description to match docs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Add canonical_url pointing to docs page - Add status = "active" to author profile - Add no_social: true (no social copy defined yet) - Fix tags: replace audit-logs/microsoft-sentinel with features/azure Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Docs: replace direct wizard link with gear icon > Configure export to Microsoft Sentinel > Deploy with Pulumi flow, add screenshot - Blog: update console instructions to match Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

claude · 2026-04-10T18:41:46Z

Social Media Review

No social media copy to review — this post has social: false set in its frontmatter and will not be promoted on social media.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

claude · 2026-04-10T18:46:29Z

Social Media Review

Post: Export Pulumi Cloud Audit Logs to Microsoft Sentinel
File: content/blog/audit-log-export-microsoft-sentinel/index.md

This blog post has a social: false block in its frontmatter and is opted out of social media promotion. No social copy was generated, and no review is required.

Nothing to review.

CamSoper

Nice blog post, Lynn! Clear and concise walkthrough of the Sentinel integration. The content is factually accurate and consistent with the companion docs page.

A couple of minor style nits (non-blocking):

The style guide prefers "select" over "click" — there are a few instances in both the blog post and the docs page (e.g., "click the gear icon" → "select the gear icon").
The author profile (lynn-jung.toml) is missing a title field — consider adding one per the BLOGGING.md guidance.

Approving as-is — these are easy follow-ups. 👍

Note: Per the PR description, don't merge until the UI PR is deployed.

hlynnj temporarily deployed to production April 8, 2026 17:59 — with GitHub Actions Inactive

hlynnj had a problem deploying to testing April 8, 2026 17:59 — with GitHub Actions Failure

This comment was marked as resolved.

Sign in to view

This comment was marked as duplicate.

Sign in to view

hlynnj temporarily deployed to testing April 8, 2026 18:29 — with GitHub Actions Inactive

hlynnj temporarily deployed to production April 8, 2026 18:29 — with GitHub Actions Inactive

This comment was marked as duplicate.

Sign in to view

hlynnj temporarily deployed to testing April 9, 2026 20:04 — with GitHub Actions Inactive

hlynnj temporarily deployed to production April 9, 2026 20:04 — with GitHub Actions Inactive

This comment was marked as duplicate.

Sign in to view

This comment was marked as resolved.

Sign in to view

hlynnj temporarily deployed to production April 9, 2026 20:42 — with GitHub Actions Inactive

hlynnj temporarily deployed to testing April 9, 2026 20:42 — with GitHub Actions Inactive

hlynnj and others added 5 commits April 10, 2026 14:37

Add blog post for Microsoft Sentinel audit log export

5a8bf53

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Update blog post to match merged docs

f76cb98

- Point template URLs to pulumi/examples instead of pulumi/sentinel-audit-log-connector - Update console setup description to match docs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Update console setup flow to match new Audit Logs UI

7458043

- Docs: replace direct wizard link with gear icon > Configure export to Microsoft Sentinel > Deploy with Pulumi flow, add screenshot - Blog: update console instructions to match Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

hlynnj force-pushed the lynn/sentinel-blog-post branch from f4ccd8c to 7458043 Compare April 10, 2026 18:39

hlynnj temporarily deployed to testing April 10, 2026 18:39 — with GitHub Actions Inactive

hlynnj temporarily deployed to production April 10, 2026 18:39 — with GitHub Actions Inactive

Remove KQL query from blog post, clarify data flow timing

e49c866

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

hlynnj temporarily deployed to testing April 10, 2026 18:43 — with GitHub Actions Inactive

hlynnj temporarily deployed to production April 10, 2026 18:43 — with GitHub Actions Inactive

CamSoper approved these changes Apr 10, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Blog: Export Pulumi Cloud audit logs to Microsoft Sentinel#18436

Blog: Export Pulumi Cloud audit logs to Microsoft Sentinel#18436
hlynnj wants to merge 6 commits intomasterfrom
lynn/sentinel-blog-post

hlynnj commented Apr 8, 2026 •

edited

Loading

Uh oh!

This comment was marked as resolved.

This comment was marked as duplicate.

This comment was marked as duplicate.

pulumi-bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

This comment was marked as duplicate.

pulumi-bot commented Apr 9, 2026 •

edited

Loading

Uh oh!

hlynnj commented Apr 9, 2026

Uh oh!

This comment was marked as resolved.

claude bot commented Apr 9, 2026

Uh oh!

claude bot commented Apr 10, 2026

Uh oh!

claude bot commented Apr 10, 2026

Uh oh!

CamSoper left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

hlynnj commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Uh oh!

This comment was marked as resolved.

This comment was marked as duplicate.

This comment was marked as duplicate.

pulumi-bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as duplicate.

pulumi-bot commented Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Lighthouse Performance Report

Uh oh!

hlynnj commented Apr 9, 2026

Uh oh!

This comment was marked as resolved.

claude bot commented Apr 9, 2026

Social Media Review

Uh oh!

claude bot commented Apr 10, 2026

Social Media Review

Uh oh!

claude bot commented Apr 10, 2026

Social Media Review

Uh oh!

CamSoper left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

hlynnj commented Apr 8, 2026 •

edited

Loading

pulumi-bot commented Apr 8, 2026 •

edited

Loading

pulumi-bot commented Apr 9, 2026 •

edited

Loading