Forum Discussion
Adding "relevant analytics templates" to custom data connector
Trying to code a Sentinel data connector which ingests data via Azure Functions. On the 'Next steps' page on the data connector, I can see "Recommended workbooks", "Query samples" and also "Relevant analytics templates".
I can easily add "Query samples" with the following code:
"sampleQueries": [
{
"description": "1",
"query": "SOMETHING\n| sort by TimeGenerated desc"
}
],
How can I add custom analytics templates under "Relevant analytics templates"?
1 Reply
I would look into using a Microsoft Sentinel solution. It will allow you to push not only the data connector but the analytic rules, workbooks, playbooks, etc. https://docs.microsoft.com/EN-US/azure/sentinel/sentinel-solutions
