Forum Discussion
AshleyMartin
Microsoft
Jan 20, 2022New Blog Post | An Analytics Rule to Report on Analytics Rules in Microsoft Sentinel
With the public preview release of our Microsoft Sentinel Health Monitoring capability, this gives customers the ability to monitor more about the tool’s environment than just Data Connectors and ingestion failures. It also provides a way to create alerts when Analytics Rules fail – or partially fail – to fire.
The following query can be used to create a Scheduled Analytics Rule that runs each day to report on Analytics Rule failures.
No RepliesBe the first to reply