Forum Discussion
Send retention policy and labels events to Sentinel
We wanted to manage the creation/modification/deletion events of retention policies and labels in Sentinel.
Currently, these events are not being sent to a Purview connector in Sentinel. We would like these events to be sent via a Purview connector in Sentinel.
In comparison, the creation/modification/deletion events of conditional access policies are sent to Sentinel, allowing us to generate alerts when detected by Sentinel.
How can we request this feature?
Have a look at the CCP Program. Depending on your status, you will be able to join. There is a category for Data Security:
Microsoft Customer Connection Program Sign-upThere are a number of ways you can request a feature, but specific to Purview/Sentinel these links should help.
If not, you can raise a support request direcrtly through your tenancy.
https://feedback.azure.com/d365community/forum/82d7bddb-fb24-ec11-b6e6-000d3a4f07b8https://feedback.azure.com/d365community/forum/37638d17-0625-ec11-b6e6-000d3a4f07b8
Hope this helps.
