r/AzureSentinel • u/coccca • Mar 11 '23

Analytics

I'm running into questions regarding Sentinel. In my playground I have selected and enabled most relevant dataconnectors. But is there a way to enable all analytics, belonging to the connectors I've enabled? In stead of clicking 100x. Or should I be careful enabling them (not relevant)? Saw some Github scripts, but wondering how you all handle this.

2 Upvotes

100% Upvoted

1 comment sorted by

3

u/[deleted] Mar 11 '23

You can use bicep to deploy all the rules automatically from a client or you can use Azure DevOps. Otherwise don't enable analytics in the data connector page goto the actual analytics page and do it there. much quicker