Forum Discussion

Prashali_Shinde's avatar
Prashali_Shinde
Copper Contributor
Mar 09, 2023

Cohesity Integration with Sentinel

Hello,

I have integrated Cohesity with Sentinel by taking the connector from content hub by following below document integration process.

Cohesity (using Azure Function) connector for Microsoft Sentinel | Microsoft Learn.

I see that it will only ingest alerts from Cohesity, and I got one alert which states "Cohesity function app installation has completed correctly."

But why my data connector is still in not connected phase and Cohesity_CL table is also not generated.

Is there any further procedure I need to do?

apis
azure
integration
siem
  • Varun_Ghildiyal's avatar
    Varun_Ghildiyal
    Iron Contributor
    Mar 10, 2023
    Check that the Cohesity_CL table is not being blocked. If the table is blocked, you may need to unblock it to allow data to flow. To do this, go to the Log Analytics workspace, select "Advanced Settings" and then select "Data" and ensure that the table is not blocked.
    • Prashali_Shinde's avatar
      Prashali_Shinde
      Copper Contributor
      Mar 13, 2023
      Hi Varun,
      Thanks for the reply but I'm not able to see any Advanced Settings option in my Log Analytics Workspace and I do have contributor level access to the workspace.


Resources