Forum Discussion
Azure Sentinel with Lighthouse
We have deployed Azure Lighthouse to manage Azure Sentinel with Azure Sentinel Contributor and Azure Logic App Contributor roles. we can access client's Sentinel. We've got a few incidents now. we ...
CliveWatson
Microsoft
Microsoft1. From which Log Analytics Table does that data come from, or which Alert (or is a custom one) is the Incident generated? Is it Signinlogs?
2. see #1
2. see #1
. From which Log Analytics Table does that data come from, or which Alert (or is a custom one) is the Incident generated? Is it Signinlogs?
this is an alert from Firewall related to Key vault access . this is not custom one
so my main issues are the i am using lighthouse to access customers sentinel and i can not see customers users when i want to assign an incident. so wondering if this is not possible at the moment or i need to do some role to do this.
second is that when i investigate an incident I can not see the user name of the account involved in that incident. is this also related to the some permission.
