Forum Discussion

thomasdefise's avatar
thomasdefise
Brass Contributor
Jan 27, 2020
Solved

Cloud Smart Alert Correlation Engine

Hello,

 

Would it be possible to have more information about this feature?
I see that there is a page on the documentation https://docs.microsoft.com/en-us/azure/security-center/security-center-alerts-cloud-smart but I would like further information.

  • Are those incidents automatically sent towards the mail specified within the Azure Security Center settings?
  • Are those incidents logs within a specific table in a Log Analytics workspace table?

The main "Why ?" I'm asking those questions is that we would be sure, within our customers, that they correctly receive via mail, log analytics alerts, ..., without to having a look at the dashboard of Azure Security Center.

Kind Regards,

Thomas

  • tal_rosler's avatar
    tal_rosler
    Jan 31, 2020

    thomasdefise 

    Hi,

    1) Incidents with high severity are automatically sent  to the security contacts specified in ASC settings (the same as alerts).

     

    2) Incidents logs to the same table as the alerts in log analytics.

     

    Thanks,

    Tal.

2 Replies

  • tal_rosler's avatar
    tal_rosler
    Icon for Microsoft rankMicrosoft
    Jan 31, 2020

    thomasdefise 

    Hi,

    1) Incidents with high severity are automatically sent  to the security contacts specified in ASC settings (the same as alerts).

     

    2) Incidents logs to the same table as the alerts in log analytics.

     

    Thanks,

    Tal.

Resources