Forum Discussion
How to monitor multiple Github orgs with Github Enterprise Audit logs Data connector
As stated in the subject, I am trying to figure out how I can monitor multiple organizations using the Github enterprise Audit log Data connector. Sending logs from an org to sentinel using the ...
Theres 2 ways to go about this,
You can create individual Microsoft Sentinel workspaces for each Org
or
go to the following link and deploy the codeless connector template again and replicate the Github audit connector in your sentinel
https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/GitHub
Keep in mind that you will need to change the name(within the template) otherwise it will error out
Hope this helps 🙂
You can create individual Microsoft Sentinel workspaces for each Org
or
go to the following link and deploy the codeless connector template again and replicate the Github audit connector in your sentinel
https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/GitHub
Keep in mind that you will need to change the name(within the template) otherwise it will error out
Hope this helps 🙂
Creating multiple workspaces might work if you have two or three organizations. I have a customer with over 20 organizations. It is clearly not the best solution for us.