---
title: "Executing and Monitoring Infoblox TIDE Data Connector"
canonical: "https://docs.infoblox.com/space/DeploymentGuideInfobloxAppforSentinel/774997469/Executing%20and%20Monitoring%20Infoblox%20TIDE%20Data%20Connector"
format: markdown
---
Once you have successfully installed and deployed all the components of Infoblox Sentinel Integration, follow these steps to execute and monitor the TIDE data connector.

1. Check the status of all function apps. For the TIDE data connector, there are a total of 14 function apps as follows.
  1. For getting historical data of various types like IP, URL, HOST, HASH and Email, there are 5 function apps.
  2. For getting current data of various types like IP, URL, HOST, HASH and Email, there are 5 function apps.
  3. For parsing of historical data there is 1 function app.
  4. For uploading threat indicators of historical data to Azure Sentinel, there is 1 function app.
  5. Similarly, 1 parsing app for current data and 1 to upload the current TIDE data.

The historical function app goes from current time to past at a 3 hours range for every execution to fetch the historical TIDE data. Whereas the current function app brings the data of the last one hour for every iteration.

![image-20240711-102731.png](media://5cb37799-c681-423f-84cf-45abb650d427)

Make sure all function apps are in the **running **stage.

<u>*Note:*</u> As the multiple function apps run in parallel and use a common storage account. There is a delay added between function apps. Hence, you will get the threat indicators after around 1:15 hours of deploying the data connector and function apps.

2. To check the logs of function apps, go to any function app. Click on the Azure Function inside the function app

![image-20240711-133754.png](media://c2a7b6dd-a236-4935-b391-f116e823f99b)

3. Go to the **Invocations **section to check the logs and status of each execution. Check the error logs in case of any **Error**.

![image-20240711-133834.png](media://9e2b01aa-5a3e-47c6-8fcb-f02c759eff21)

4. The data connector maps the TIDE data to Microsoft Sentinel’s **Threat Intelligence Indicators** data.
5. You can see the threat indicators created based on Infoblox TIDE data in the **Threat Intelligence **section of Microsoft Sentinel.

![image-20240711-103019.png](media://f3a15873-80c3-4eaa-a622-ef29a1065afb)

6. You can also go to **Log Analytics Workspace**, choose your workspace and select the **Logs **section. Query for **ThreatIntelligenceIndicator** table to see the Threat Indicators created.

![image-20240711-103056.png](media://662ac2f9-ecf5-487f-be0c-0c452eeaecee)

7. You can filter the Threat Indicators created via Infoblox Data Connector by SourceSystem containing a value as **Infoblox-TIDE-Threats-Custom**.

![image-20240711-134013.png](media://f6969109-ec88-4c76-9dcd-483fb894bffc)