How to disable Microsoft data connectors

Brass Contributor

I was able to turn off custom log connectors by disabling the log source, but i'm stumped as to how I disable the microsoft connectors  like Azure Activity and others.

 

Can this be done from the Sentinel UI?

 

I can't shut down Sentinel entirely yet but I need to turn off all log sources.

 

Thanks.

 

1 Reply
Hello, The connectors will vary, however for Azure Activity, you need to go to "Policy" in the Azure portal --> compliance --> search for "Azure Activity" then "Delete assignment" Then follow: https://learn.microsoft.com/en-gb/azure/sentinel/offboard?WT.mc_id=Portal-Microsoft_Azure_Security_I...