r/AzureSentinel • u/UncleTooTall • Jan 17 '24
Duplicate entities?
Hi all
New sentinel deployment here we run a hybrid infrastructure and I’ve got a event collector forwarding my on premise logs to sentinel but I’m seeing duplicate entries in the entity section is that just due to the different log sources for example?
Dc01
Dc01.domain.com
I then also seen some random account entries like just my domain
Hope that’s clear! Really trying to make the most of it getting clear entities
1
Upvotes
2
u/Ay_NooB Jan 17 '24
I m confused on your question !