Alert to get notified if an external connected device become unreachable.

[gsingh_]

Hi Guys

I would like to setup an alert to get notified if an external connected device (E.g. Cisco ASA) loose connection with RSyslog/Sentinel. I wonder what field in the table I can pull with the logic and would be great if some one can share a sample KQL query.. thanks

[#2]

@gsingh_ Take a look at this blog post as a good starting point

https://techcommunity.microsoft.com/t5/azure-sentinel/data-connector-health-push-notification-alerts...