Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Importing Legacy Data

Copper Contributor

Hi, I've got a bunch of connectors added and it's pulling data, but I know O365 and Azure for example have like 90 days of legacy data in there, is there a way to tell Sentinel to pull in all that data for events that have already occurred?

2 Replies

Hi Keith,

 

At the moment the collectors will collect the data generated after they were enabled.

We will consider adding support for history data later on.

 

Thanks,

Koby

Ah okay, thanks. Please do consider it, that would be super helpful.