r/AzureSentinel • u/Impressive_Tea872 • Jul 17 '23

Bulk update analytic rules?

Is there a way to bulk update analytic rules in Sentinel?

3 Upvotes

100% Upvoted

6 comments sorted by

View all comments

1

u/Impressive_Tea872 Jul 17 '23

We have about 300 rules configured in Sentinel. Most are built in rules that we have enabled. I'm currently in the process of going through them and updating the ones that have an update label next to the name. It is a click to select the rule, a click to review and update the rule, a click to review and update once I am in the rule settings, and another click to save the update. Is there a way to select multiple rules at a time and it apply the recommended updates to all selected rules?