Alerting when a connector stops sending logs

Brass Contributor

Greetings,

 

I have been looking around and I'm quite sure someone has asked for a way to generate an alert if one(or more) of the log sources(connectors) stop sending logs. However, i have not been able to find out if this got a solution or not. I think this should possibly be a part of Sentinel out of the box, but if anyone has a different solution i would much appreciate it. 

2 Replies
Something like this? https://cda.ms/2qT

@Rod_Trent 

Yes, or at least quite similar. Although i had hoped there was some solution that wouldn't require to make a new alert for each table i want to track. Something a bit more dynamic. But thanks for the answer, it will do fine for now :smile: