SOLVED

Backup - Analytics rules and workbooks

%3CLINGO-SUB%20id%3D%22lingo-sub-2651347%22%20slang%3D%22en-US%22%3EBackup%20-%20Analytics%20rules%20and%20workbooks%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2651347%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3EI%20am%20looking%20automated%20solution%20for%20backing%20up%20Analytical%20rules%20and%20workbooks%20created%20within%20Sentinel.%3C%2FP%3E%3CP%3EWhat%20is%20the%20the%20best%20way%20of%20doing%20it%20%3F%20We%20are%20not%20using%20DevOps%20to%20deploy%20the%20solution%2C%20all%20Analytics%20rules%20created%20manually.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20a%20lot%20for%20anyone's%20time%20on%20assisting%20me%20on%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2651834%22%20slang%3D%22en-US%22%3ERe%3A%20Backup%20-%20Analytics%20rules%20and%20workbooks%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2651834%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F605530%22%20target%3D%22_blank%22%3E%40msraj%3C%2FA%3E%26nbsp%3BI%20would%20say%20a%20Logic%20App%20that%20uses%20the%20Azure%20Sentinel%20REST%20API%20to%20read%20the%20rules%20would%20take%20care%20of%20the%20rules.%26nbsp%3B%20Not%20sure%20if%20there%20is%20a%20way%20to%20automatically%20save%20workbooks%20since%20you%20cannot%20save%20them%20via%20the%20UI%20(there%20is%20only%20a%20generic%20text%20download%20option)%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello,

I am looking automated solution for backing up Analytical rules and workbooks created within Sentinel.

What is the the best way of doing it ? We are not using DevOps to deploy the solution, all Analytics rules created manually.

 

Thanks for anyone's time on assisting me on this.

 

Cheers

2 Replies
best response confirmed by msraj (Occasional Contributor)
Solution

@msraj I would say a Logic App that uses the Azure Sentinel REST API to read the rules would take care of the rules.  Not sure if there is a way to automatically save workbooks since you cannot save them via the UI (there is only a generic text download option)

Thanks @Gary. yes, I have same idea. Thanks for the response.