Forum Discussion

Sidra_Raza's avatar
Sidra_Raza
Brass Contributor
May 07, 2024

Cisco Secure Endpoint connector integration in sentinel

Hello,

 

I am trying to send logs of Cisco AMP/secure endpoint to sentinel. I have select the ARM template deployment method. But I am not able to understand what exactly is "App insights workspace resource ID" that is highlighted in below image. I have not created any Application Insights and don't know much about it. Can anyone help? 

 

 

 

 

 

 

  • Application Insights and Workspaces are the same technology (or at least very close), Microsoft are migrating people to one common product, so all App insight data is now stored in a log Analytic Workspace.

Resources