How to add Azure Activity logs from multiple subscriptions to Microsoft Sentinel

Question

Hello,I need to add Azure Activity logs from multiple subscriptions to Microsoft Sentinel. With the new connection method, It looks like that I can only send log from one subscription only (https://www.channelpronetwork.com/blog/entry/azure-sentinel-blog-moving-azure-activity-connector-improved-method). Would anyone advise how to send Azure Activity logs from multiple subscriptions to Sentinel ?Best Regards,An

yaniys48565 · Answer

Hi&nbsp;myprofile490&nbsp;,&nbsp;Did you get any workarounds for this scenario. I'm stuck at a similar problem

myprofile490 · Answer

Hi Yaniys48565,Yes, the reason is that I forgot to enforce the policy. Please make sure you have done this step:"select the Remediation tab and mark the Create a remediation task check box."Regards,An

Forum Discussion

How to add Azure Activity logs from multiple subscriptions to Microsoft Sentinel

Share

Resources