Forum Discussion

PhilippeAugras's avatar
PhilippeAugras
Brass Contributor
Nov 26, 2021
Solved

Azure Activity data collector with Azure Policy : data is not ingested

Hi,

 

I have been fighting with the new Azure Activity data connector. I deploy the policy with the wizard the the connector page, scope it to my subscription but nothing happens. My Policy shows as Compliant, the Log Analytics workspace is in the scoped subscription but nothing happens. It's not the first time that I'm stuck with this problem and I think I've been applying MS' official documentation.

Any idea what I should check ?

Regards,

P.

  • I finally found out what the problem was. I had forgotten to enable a remediation during the policy creation. ow it works.

7 Replies

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor

    PhilippeAugras Have you gone to the Activity log and checked the Diagnostics settings to verify that the settings were indeed pushed correctly?

    • PhilippeAugras's avatar
      PhilippeAugras
      Brass Contributor

      GaryBushey , thank you for your answer. The diagnostic settings worked with the old version of the connector. The new one relies on an Azure Policy that i supposed to send the activity to Sentinel's log. Or do I also need to configure the diag settings for this new connector ? It's not mentioned in MS's docs.

      Regards,

       

      P.

      • GaryBushey's avatar
        GaryBushey
        Bronze Contributor
        You don't need to configure the diag settings if the policy is working correctly. My suggestion was just to check to make sure the policy did work correctly.

Resources