Forum Discussion
Solved
How to check if Sentinel is enabled for a subscription (programmatic access)
Hello, Is it possible to query a Resource Provider/ARM property to see if Azure Sentinel has been enabled on a subscription? I was hoping we can use resource graph query or at a minimum an API ca...
You can check for a specific log analytics workspace if the sentinel log analytics solutions installed.
By running this REST call
https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces/listintelligencepacks
And look in the resource this solution name:
"name": "SecurityInsights", "enabled": true, "displayname": "Security Insights"
YanivSh
Microsoft
MicrosoftYou can check for a specific log analytics workspace if the sentinel log analytics solutions installed.
By running this REST call
https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces/listintelligencepacks
And look in the resource this solution name:
"name": "SecurityInsights",
"enabled": true,
"displayname": "Security Insights"