Forum Discussion

DevonJay's avatar
DevonJay
Copper Contributor
Feb 08, 2022

How to export list of all connectors

Hi,

 

I'm trying to export all the connectors (both connected and not) for review.

I've experimented with the Powershell module, az.securityinsights, which does give me the command get-AzSentinelDataConnector.  However this only produces the following:-

 

AzureSecurityCenter
AzureActiveDirectory
AzureAdvancedThreatProtection
MicrosoftCloudAppSecurity
MicrosoftDefenderAdvancedThreatProtection
Office365
ThreatIntelligence

 

yet there are 125 in total.

 

What might I be doing wrong ?

 

Thanks,

Jamie

  • DevonJay

     

    Not via 'Connector' that I'm aware of, its why most of the reports are done per Table instead (which isn't a 1 to 1 mapping to Connector)

    Take a look at Workbooks: Workspace Usage or Data Collection Health Monitoring for Table examples.

     

    In "Workspace Usage" - Weekly Report tab, you can see the Connector vs, Tables mapping but only where there is a Rule Template and its per Rule.    

     

    Sentinel Health (Preview) may support this eventually?

     Monitor the health of your Microsoft Sentinel data connectors | Microsoft Docs

  • Clive_Watson's avatar
    Clive_Watson
    Bronze Contributor
    Nothing wrong, but the api used is for the Microsoft connectors, not "All"
    • DevonJay's avatar
      DevonJay
      Copper Contributor
      Oh ok, thanks.

      So there's no way to achieve what I'm trying to do ?
      • Clive_Watson's avatar
        Clive_Watson
        Bronze Contributor

        DevonJay

         

        Not via 'Connector' that I'm aware of, its why most of the reports are done per Table instead (which isn't a 1 to 1 mapping to Connector)

        Take a look at Workbooks: Workspace Usage or Data Collection Health Monitoring for Table examples.

         

        In "Workspace Usage" - Weekly Report tab, you can see the Connector vs, Tables mapping but only where there is a Rule Template and its per Rule.    

         

        Sentinel Health (Preview) may support this eventually?

         Monitor the health of your Microsoft Sentinel data connectors | Microsoft Docs

Resources