Blog Post

Microsoft Sentinel Blog
8 MIN READ

Deploy Microsoft Sentinel using Bicep

GBushey's avatar
GBushey
Former Employee
Oct 24, 2024
Bicep is a domain-specific language that uses declarative syntax to deploy Azure resources.  It provides benefits over Azure Resource Management (ARM) templates including smaller file size, integrate...
Updated Oct 24, 2024
Version 1.0
GBushey's avatar
Former Employee
Joined August 18, 2022
View Profile
Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

TomicaKaniski's avatar
TomicaKaniski
MVP
Nov 11, 2024

Thank you for the great article and scripts provided! 👏

It seems your PowerShell script is using a wrong $baseUri (missing the "/subscriptions/" part) - should be:
$baseUri = $serverUrl + "/subscriptions/" + $SubscriptionId + "/resourceGroups/${ResourceGroup}/providers/Microsoft.OperationalInsights/workspaces/${Workspace}"

Cheers,
Tom

KenzProfile's avatar
KenzProfile
Icon for Microsoft rankMicrosoft
Dec 10, 2024

Hi TomicaKaniski I tried those changes, and the script failed. It worked after reverting to the original.