How to add Azure Activity logs from multiple subscriptions to Microsoft Sentinel

Copper Contributor

Hello,

I need to add Azure Activity logs from multiple subscriptions to Microsoft Sentinel. With the new connection method, It looks like that I can only send log from one subscription only (https://www.channelpronetwork.com/blog/entry/azure-sentinel-blog-moving-azure-activity-connector-imp...). Would anyone advise how to send Azure Activity logs from multiple subscriptions to Sentinel ?

Best Regards,

An

2 Replies

Hi @myprofile490 ,

 

Did you get any workarounds for this scenario. I'm stuck at a similar problem

Hi Yaniys48565,
Yes, the reason is that I forgot to enforce the policy. Please make sure you have done this step:
"select the Remediation tab and mark the Create a remediation task check box."
Regards,
An