Forum Discussion
Sentinel mask or remove specific sensitive data field
Based on my understanding,
The process just like ETL
(1,Extract) Sources System (e.g. Exchange Online) -> (2,Transform) Data collection rules -> (3,Load) Sentinel Workspace
If mask or remove sensitive data before load to workspace required, it need done in (2,Transform) state, please apply KQL in Data collection rules to do that.
Pan DT
Based on my understanding,
The process just like ETL
(1,Extract) Sources System (e.g. Exchange Online) -> (2,Transform) Data collection rules -> (3,Load) Sentinel Workspace
If mask or remove sensitive data before load to workspace required, it need done in (2,Transform) state, please apply KQL in Data collection rules to do that.
Pan DT
TDPan1 ,
Great idea. The Data Collection Rules can help here.
CyrilChu please, check the following links:
Data Collection Rules in Azure Monitor - Azure Monitor | Microsoft Docs
