Forum Discussion
Solved
Exporting Sentinel Analytics Rules on a Schedule
Hi all,
Has anyone come up with a method for automatically exporting analytics rules in an environment on a schedule? I understand that it's possible to do it through the GUI manually.
Is there a powershell script that can be executed to grab them all in JSON? Curious what others have done/are doing in this space.
- Hi @Regan,
I've posted an article about this with a script here I leave the link, if you can't see it contact me privately and I'll help you.
https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/azure-sentinel-import-alerts-with-powershell/ba-p/3269113
Best regards
- jocarolo
Microsoft
Hi @Regan,
I've posted an article about this with a script here I leave the link, if you can't see it contact me privately and I'll help you.
https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/azure-sentinel-import-alerts-with-powershell/ba-p/3269113
Best regards- Cheers, I'll have a look. Do you have a github repo for this anywhere? I'll try modifying it so it can be run off a CI pipeline to keep a Sentinel-As-Code Git repo up to date.
- jocaroloHi Regan,
Recently i forked a Github Repository for uploaded Sentinel Use cases and other topics related.
