Forum Discussion
avirat20
Feb 15, 2021Copper Contributor
Azure Sentinel with ASC and exsiting workspace
Hello There, Currently we have 2 workspaces created linked to ASC. One workspace for Production VMs and another for Non-Production VM. We are planning to deploy Sentinel and have few questions ...
Ofer_Shezaf
Microsoft
Feb 23, 2021
To the specific question about ASC and Azure Sentinl: you should use the same workspace. ASC itself does not use the workspace, and the value stems from Sentinel features.
What you may want to do, is split none security data to a seperate workspace for cost reasons. This would imply dual homing.