Alert to get notified if an external connected device become unreachable.

Question

Hi Guys&nbsp;I would like to setup an alert to get notified if an external connected device (E.g. Cisco ASA) loose connection with RSyslog/Sentinel. I wonder what field in the table I can pull with the logic and would be great if some one can share a sample KQL query.. thanks&nbsp;

garybushey · Answer

gsingh_&nbsp;Take a look at this blog post as a good starting point&nbsp;https://techcommunity.microsoft.com/t5/azure-sentinel/data-connector-health-push-notification-alerts/ba-p/1996442

Forum Discussion

Alert to get notified if an external connected device become unreachable.

1 Reply

Resources