Forum Discussion
Solved
Sentinel Watchlist stuck in queued state for days...
Dear Members, I recently read https://cryptsus.com/blog/enrich-geolocation-sentinel-siem.html how on how to do geolocation of IPv4 addresses in Sentinel efficiently. The Azure API with the 100 a...
- Hi there,
I spoke with Microsoft support who cleared the queued watchlists in a few different workspaces. They confirmed that there was no option for me to do this from the Azure Portal and if it happens again to just contact them to fix.
Bit of an odd one.
In the meantime, due to an unrelated issue, my watchlists were cleared, along with other things, so I had to recreate the watchlists in a new Sentinel instance in a new resource group, with the CSVs residing in a different storage account.
This time everything worked flawlessly, so my original problem is no more.
Thanks to everyone for trying to help, and sharing their thoughts.