Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Cohesity Integration with Sentinel

Copper Contributor

Hello,

I have integrated Cohesity with Sentinel by taking the connector from content hub by following below document integration process.

Cohesity (using Azure Function) connector for Microsoft Sentinel | Microsoft Learn.

I see that it will only ingest alerts from Cohesity, and I got one alert which states "Cohesity function app installation has completed correctly."

But why my data connector is still in not connected phase and Cohesity_CL table is also not generated.

Is there any further procedure I need to do?

2 Replies
Check that the Cohesity_CL table is not being blocked. If the table is blocked, you may need to unblock it to allow data to flow. To do this, go to the Log Analytics workspace, select "Advanced Settings" and then select "Data" and ensure that the table is not blocked.
Hi Varun,
Thanks for the reply but I'm not able to see any Advanced Settings option in my Log Analytics Workspace and I do have contributor level access to the workspace.