Forum Discussion

SecureSR's avatar
SecureSR
Copper Contributor
Sep 14, 2023

Unable to delete TAXII Data Connector

Hello,

 

When I open the TAXII Data Connector and try to remove the feed, I simply get "Failed to delete TAXII connector. TAXII connector 'AlienVault-OTX' could not be deleted due to an unexpected error."

 

Trying the same with powershell results in:

Get-AzSentinelDataConnector -ResourceGroupName "XXXXX" -WorkspaceName "XXXX" -id 6144f49d-d7ee-43bc-81f0-34206ae1482e | Remove-AzSentinelDataConnector
Remove-AzSentinelDataConnector : Internal server error

 

Any ideas what to do next?

 

data collection
threat intelligence

3 Replies

  • SecureSR's avatar
    SecureSR
    Copper Contributor
    Oct 02, 2023
    I could now successfully delete the Connector, so it was a problem in the backend in Azure Sentinel.
  • BillClarksonAntill's avatar
    BillClarksonAntill
    Iron Contributor
    Sep 14, 2023
    do you have the appropriate permissions to Microsoft Sentinel to delete data connectors

    you will need contributor and Microsoft sentinel contributor from memory as there is an underlying resource configuration change that will take affect when you try and delete the config
    • SecureSR's avatar
      SecureSR
      Copper Contributor
      Sep 15, 2023
      Hello, my account has owner rights on the Azure Subscription. I also tried to delete the connector using the initial admin account of the azure tenant and this also fails. I was able to delete another connector without any problems, but this TAXII Connector seems to be somehow messed up.

Resources