Forum Discussion
Sentinel across multiple environments
We are currently planning a new Azure presence. Each of our environments is distinct (Prod/Pre-Prod/Non-Prod) within different subscriptions with each having its own Log Analytic Workspace. When look...
CliveWatson
Microsoft
MicrosoftAzure Lighthouse is needed if the workspaces are in different tenants, if the three workspaces are within the same tenant/AAD you can view Incidents across all three from the UI.
See Module 3: https://techcommunity.microsoft.com/t5/azure-sentinel/become-an-azure-sentinel-ninja-the-complete-level-400-training/ba-p/1246310
and https://docs.microsoft.com/en-us/azure/sentinel/extend-sentinel-across-workspaces-tenants#cross-workspace-monitoring
See Module 3: https://techcommunity.microsoft.com/t5/azure-sentinel/become-an-azure-sentinel-ninja-the-complete-level-400-training/ba-p/1246310
and https://docs.microsoft.com/en-us/azure/sentinel/extend-sentinel-across-workspaces-tenants#cross-workspace-monitoring
- Thanks - I hadn't spotted that. Great!
