Forum Discussion
How to delete sentinel
Hi Team,
I have created one sentinel and connected to ALA in LAB. Now i want to remove them.
So could anyone help me how to delete sentinel from subscription.
And one more thing if anyone can shed any link or other stuff to configure sentinel in production.
I have gone through MS blogs however it would be great if i will have something for deep-dive.
Thanks in advance!
An additional procedure you can use is to remove the sentinel solution from the Workspace and restore it to be a Log Analytics workspace. Any Sentinel configuration such as connectors and alert rules will be deleted, but the data will be kept in the Workspace and can be used through the Log Analytics workspace.
To do that:
- Select "Workspace settings"
- Select "Solutions"
- Select the SecurityInsights solutions
- Use the delete button at the top
- Ofer_Shezaf
Microsoft
An additional procedure you can use is to remove the sentinel solution from the Workspace and restore it to be a Log Analytics workspace. Any Sentinel configuration such as connectors and alert rules will be deleted, but the data will be kept in the Workspace and can be used through the Log Analytics workspace.
To do that:
- Select "Workspace settings"
- Select "Solutions"
- Select the SecurityInsights solutions
- Use the delete button at the top
- Hello Team, Please use below link for more information
https://learn.microsoft.com/en-us/azure/sentinel/offboard
It may help...
- Andrew Harris (AZURE SEC)
Hey GouravIN
If you want to remove Sentinel, you can just delete the workspace. First, go to the workspace settings within Sentinel (attachment #1).
Then press the 'Delete' button on the top when the page loads (attachment #2). Note that this will delete your data in the workspace and all other configurations.
If you want to just delete a data source you can disconnect them individually in the 'Data Connectors' page.
We hope this help!
Andrew
