Microsoft Sentinel’s Ingestion Shift: Moving from Legacy APIs to CCF and DCRs
Microsoft Sentinel’s legacy HTTP Data Collector API support ends on September 14, 2026. Here’s how I would redesign custom security ingestion around CCF, DCRs and the Logs Ingestion API.