Antonio
Reputation: 77
Is it possible to automatically update rule analytics on Sentinel?
The Microsoft analytics rule templates get updates from time to time to include additional constraints within their KQL. Currently I'm manually updating each of the rule templates that have been updated by Microsoft.
I was wondering if it is possible to somehow automate this process to avoid having to update each rule manually?
Upvotes: 1
Views: 606
Answers (0)
Related Questions
- Take output from query and use in subsequent KQL query
- Azure Stream Analytics: How can I update Query at runtime and Programmatically?
- Azure Sentinel referencing large sets of data
- Execute Kusto query present in the Table result
- Azure Sentinel Heartbeat Monitor
- Azure Sentinel Kusto query table with data from another query
- Kusto Search across Sentinel workspaces from a watchlist
- Azure monitoring Data Collection Rules(DCR) through DevOps
- Azure Analysis Services - Incremental Refresh
- Is it possible to invoke cosmos db trigger from stream analytics?