Forum Discussion
Solved
Cisco Secure Endpoint connector integration in sentinel
Hello, I am trying to send logs of Cisco AMP/secure endpoint to sentinel. I have select the ARM template deployment method. But I am not able to understand what exactly is "App insights workspace...
- Application Insights and Workspaces are the same technology (or at least very close), Microsoft are migrating people to one common product, so all App insight data is now stored in a log Analytic Workspace.
There was a change made 4mths ago, to get off of teh legacy App Insights. Are you using the version from the Content Hub? https://github.com/Azure/Azure-Sentinel/blob/754d9371b8c27313d7a05c48ffb7a84051c52eba/Solutions/Cisco%20Secure%20Endpoint/Data%20Connectors/azuredeploy_CiscoSecureEndpoint_API_FunctionApp.json
You can probably just put in the Sentinel workspace ID?
You can probably just put in the Sentinel workspace ID?
I installed the connector from Content Hub, it requests both the Sentinel workspace ID and the Application Insights workspace ID. How both can be same?
- Application Insights and Workspaces are the same technology (or at least very close), Microsoft are migrating people to one common product, so all App insight data is now stored in a log Analytic Workspace.
- Makes sense now. Thanks alot