Forum Discussion
PhilippeAugras
Nov 26, 2021Brass Contributor
Azure Activity data collector with Azure Policy : data is not ingested
Hi, I have been fighting with the new Azure Activity data connector. I deploy the policy with the wizard the the connector page, scope it to my subscription but nothing happens. My Policy shows a...
- Dec 01, 2021I finally found out what the problem was. I had forgotten to enable a remediation during the policy creation. ow it works.
GaryBushey
Nov 29, 2021Bronze Contributor
PhilippeAugras Have you gone to the Activity log and checked the Diagnostics settings to verify that the settings were indeed pushed correctly?
- PhilippeAugrasNov 29, 2021Brass Contributor
GaryBushey , thank you for your answer. The diagnostic settings worked with the old version of the connector. The new one relies on an Azure Policy that i supposed to send the activity to Sentinel's log. Or do I also need to configure the diag settings for this new connector ? It's not mentioned in MS's docs.
Regards,
P.
- GaryBusheyNov 29, 2021Bronze ContributorYou don't need to configure the diag settings if the policy is working correctly. My suggestion was just to check to make sure the policy did work correctly.
- PhilippeAugrasDec 01, 2021Brass ContributorSorry for my misunderstanding. The policy show 100% Compliant, no errors. Problem - ? - is that the policy also tells me there's no ressource associated. I scoped it to the Subscription I want to monitor via Azure Activity connector - as per MS doc. But do I need to add my Sentinel Log Analytics workspace as a resource to this policy ?