Forum Discussion
JMSHW0420
Jul 26, 2023Iron Contributor
RE: How to disconnect a data connector
Hello to all, Is there a way to disconnect a data connector? For example, if I wanted to disconnect Amazon Web Services OR Fortinet data connector (from the Microsoft Sentinel) or Azure side,...
GBushey
Jul 26, 2023Former Employee
It really depends on the data connector. For something like Fortinet, you can turn off the Linux box that sends the CEF data. After a while, the data connector will not show as connected anymore.
JMSHW0420
Jul 30, 2023Iron Contributor
Hi GBushey,
Yes, regarding Fortinet, actually doing that. Understand from 'outside' of Sentinel, such as turning off the Linux server but wondered what was available from an Azure or Sentinel perspective.
I did see there is a Powershell module for Sentinel. Can you delete, disable or disconnect using command functions in there?
Sorry, I have just not had a chance to delve into it yet.
I hope Microsoft start to provide more guidance in this domain.
Yes, regarding Fortinet, actually doing that. Understand from 'outside' of Sentinel, such as turning off the Linux server but wondered what was available from an Azure or Sentinel perspective.
I did see there is a Powershell module for Sentinel. Can you delete, disable or disconnect using command functions in there?
Sorry, I have just not had a chance to delve into it yet.
I hope Microsoft start to provide more guidance in this domain.