Jun 06 2019 08:02 AM
Hi Team,
I have created one sentinel and connected to ALA in LAB. Now i want to remove them.
So could anyone help me how to delete sentinel from subscription.
And one more thing if anyone can shed any link or other stuff to configure sentinel in production.
I have gone through MS blogs however it would be great if i will have something for deep-dive.
Thanks in advance!
Jun 11 2019 10:30 AM
Hey @GouravIN
If you want to remove Sentinel, you can just delete the workspace. First, go to the workspace settings within Sentinel (attachment #1).
Then press the 'Delete' button on the top when the page loads (attachment #2). Note that this will delete your data in the workspace and all other configurations.
If you want to just delete a data source you can disconnect them individually in the 'Data Connectors' page.
We hope this help!
Andrew
Jun 16 2019 03:37 AM
Solution
An additional procedure you can use is to remove the sentinel solution from the Workspace and restore it to be a Log Analytics workspace. Any Sentinel configuration such as connectors and alert rules will be deleted, but the data will be kept in the Workspace and can be used through the Log Analytics workspace.
To do that:
Apr 12 2023 12:38 AM
Jun 16 2019 03:37 AM
Solution
An additional procedure you can use is to remove the sentinel solution from the Workspace and restore it to be a Log Analytics workspace. Any Sentinel configuration such as connectors and alert rules will be deleted, but the data will be kept in the Workspace and can be used through the Log Analytics workspace.
To do that: