ASC Alert Connector

Brass Contributor

We have the Azure Security Center connector enabled to receive the alerts and it shows that the connector is enabled. However, the datatype SecurityAlert (ASC) is showing as disconnected and we have not received any logs. The Analytic rule for ASC is also created and enabled. There is a security alert, so it should appear in the SecurityAlert schema but there's nothing.

 

Are we missing a step here?

2 Replies

@leoszalkowski : I was not able to identify a missing step from your description. I think the best route is a support ticket.

@leoszalkowski Did you solve this? Same issue is having here.

TIA