Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Sentinel Incident Tags or Azure Tags

Silver Contributor

Can anyone confirm my understanding that the "Tags" used with Sentinel Incidents have absolutely nothing to do with Azure Tags that are used for many of the resources in Azure. 


We got into a big debate yesterday about tags only to realize that we were talking about 2 different things that have the same name :). Has anyone else had this occur or is it just me. 

2 Replies
All the time. However for this a Sentinel Tag is a Sentinel thing - however you might have programmatically created the value from an Azure Resource Tag? ;)
that is exactly what we were discussing. I was talking about name-value pairs and then realized that concept does not apply in Sentinel. Are there any recommended practices for using Azure tags in Sentinel incidents?