Remove custom logs from Azure Sentinel

Question

Hi folks,&nbsp;I have connected Logstash datasource to Azure Sentinel, I'm pushing the logs to a custom log tabe as "SQLAuthenticationLogs_CL".&nbsp;&nbsp;I would like to know how to:1- Clear these custom logs2- Remove the customer table&nbsp;Thanks&nbsp;

clivewatson · Accepted Answer

nafejeries&nbsp;
&nbsp;
Logs will be removed when the retention period has been reached.&nbsp; This is the #1 method.&nbsp;
&nbsp;
For specific GDPR use cases (this isn't a method you should be using often) there is article you should read - please pay close attention to the many WARNING and IMPORTANT messages on this page:
&nbsp;
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/personal-data-mgmt#how-to-export-and-delete-private-data

Forum Discussion

Remove custom logs from Azure Sentinel

Share

Resources