Failed to change SecurityEvents collection tier

%3CLINGO-SUB%20id%3D%22lingo-sub-2380119%22%20slang%3D%22en-US%22%3EFailed%20to%20change%20SecurityEvents%20collection%20tier%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2380119%22%20slang%3D%22en-US%22%3E%3CP%3EWe're%20getting%20this%20this%20error%20when%20trying%20to%20change%20SecurtyEvents%20from%20Common%20to%20All%20in%20Azure%20Sentinel%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22TS-noodlemctwoodle_0-1621843184117.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F283075iBEBCEE7BA23413D1%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22TS-noodlemctwoodle_0-1621843184117.png%22%20alt%3D%22TS-noodlemctwoodle_0-1621843184117.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20not%20sure%20it%20is%20permissions%20as%20we%20have%20owner%20on%20the%20the%20subscription.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20anyone%20know%20the%20solution%20on%20how%20to%20solve%20it%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2383243%22%20slang%3D%22en-US%22%3ERE%3A%20Failed%20to%20change%20SecurityEvents%20collection%20tier%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2383243%22%20slang%3D%22en-US%22%3EI%20would%20think%20you%20would%20need%20to%20open%20a%20ticket%20with%20MS%20if%20this%20continues.%3C%2FLINGO-BODY%3E
Occasional Contributor

We're getting this this error when trying to change SecurtyEvents from Common to All in Azure Sentinel? 

 

TS-noodlemctwoodle_0-1621843184117.png

 

I'm not sure it is permissions as we have owner on the the subscription.

 

Does anyone know the solution on how to solve it? 

 

1 Reply
I would think you would need to open a ticket with MS if this continues.