SOLVED

How to export list of all connectors

Copper Contributor

Hi,

 

I'm trying to export all the connectors (both connected and not) for review.

I've experimented with the Powershell module, az.securityinsights, which does give me the command get-AzSentinelDataConnector.  However this only produces the following:-

 

AzureSecurityCenter
AzureActiveDirectory
AzureAdvancedThreatProtection
MicrosoftCloudAppSecurity
MicrosoftDefenderAdvancedThreatProtection
Office365
ThreatIntelligence

 

yet there are 125 in total.

 

What might I be doing wrong ?

 

Thanks,

Jamie

4 Replies
Nothing wrong, but the api used is for the Microsoft connectors, not "All"
Oh ok, thanks.

So there's no way to achieve what I'm trying to do ?
best response confirmed by DevonJay (Copper Contributor)
Solution

@DevonJay

 

Not via 'Connector' that I'm aware of, its why most of the reports are done per Table instead (which isn't a 1 to 1 mapping to Connector)

Take a look at Workbooks: Workspace Usage or Data Collection Health Monitoring for Table examples.

 

In "Workspace Usage" - Weekly Report tab, you can see the Connector vs, Tables mapping but only where there is a Rule Template and its per Rule.    

Clive_Watson_0-1644340031407.png

 

Sentinel Health (Preview) may support this eventually?

 Monitor the health of your Microsoft Sentinel data connectors | Microsoft Docs

Thanks, I'll look into these options.
1 best response

Accepted Solutions
best response confirmed by DevonJay (Copper Contributor)
Solution

@DevonJay

 

Not via 'Connector' that I'm aware of, its why most of the reports are done per Table instead (which isn't a 1 to 1 mapping to Connector)

Take a look at Workbooks: Workspace Usage or Data Collection Health Monitoring for Table examples.

 

In "Workspace Usage" - Weekly Report tab, you can see the Connector vs, Tables mapping but only where there is a Rule Template and its per Rule.    

Clive_Watson_0-1644340031407.png

 

Sentinel Health (Preview) may support this eventually?

 Monitor the health of your Microsoft Sentinel data connectors | Microsoft Docs

View solution in original post