SOLVED

Enable multiple Sentinel Rules from Rule templates

%3CLINGO-SUB%20id%3D%22lingo-sub-2813345%22%20slang%3D%22en-US%22%3EEnable%20multiple%20Sentinel%20Rules%20from%20Rule%20templates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2813345%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3Eis%20there%20a%20way%20to%20enable%20multiple%20rules%20from%20Analytics%20%26gt%3B%20rule%20templates%20on%20once%20or%20do%20I%20need%20to%20click%20them%20one%20by%20one%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2813398%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20multiple%20Sentinel%20Rules%20from%20Rule%20templates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2813398%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1175767%22%20target%3D%22_blank%22%3E%40PawelB1645%3C%2FA%3E%26nbsp%3BThe%20UI%20only%20allows%20you%20do%20one%20at%20a%20time.%26nbsp%3B%20%26nbsp%3BIf%20you%20need%20more%20I%20would%20suggest%20using%20ARM%20templates%20or%20using%20the%20Azure%20Sentinel%20PowerShell%20module%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello,

is there a way to enable multiple rules from Analytics > rule templates on once or do I need to click them all one by one?

4 Replies
best response confirmed by PawelB1645 (Occasional Contributor)
Solution

@PawelB1645 The UI only allows you do one at a time.   If you need more I would suggest using ARM templates or using the Azure Sentinel PowerShell module

@Gary Bushey 

Thank you. Is there a repository of all the rules created by Microsoft available in Sentinel to download?

@PawelB1645 The Azure Sentinel Github repo has all the rules that are available in Azure Sentinel.  Keep in mind that these are stored in yaml format but there are tools that you can use to import them into your Azure Sentinel environment.