Forum Discussion
Azure Activity Data Connector
Hi All, My organization is currently working to stand up Sentinel and we are implementing our data connectors. However, we are unable to enable the Azure Activity data connector. All policies are...
How long have you waited so far, it can sometimes take an hour or more?
Have you actually checked to see if data is being sent - I've seen cases where its shown as "not connected" but you do get data?
We've attempted to do this a few times over the past few weeks with no success. We've put the policy in place and waited over the period of time that has been suggested, but still no connection.
- Did you do the remediation task ok? There is a step by step walkthrough here:
https://intothecloudverse.com/2021/08/24/azure-activity-data-connector-for-azure-sentinel-issue-and-solution/- It's really strange. I found that document as well. After a few minutes, it does register that the policy is compliant, but does not appear that it has connected.
Check if your policy scope is the resource group instead of the subscription. I made that mistake the first time deploying the connector in a similar situation than the one described.
For it to work, the scope must be the susbscription.
Hope this helps.
