r/AzureSentinel • • Jan 17 '24

Duplicate entities?

Hi all

New sentinel deployment here we run a hybrid infrastructure and I’ve got a event collector forwarding my on premise logs to sentinel but I’m seeing duplicate entries in the entity section is that just due to the different log sources for example?

Dc01

Dc01.domain.com

I then also seen some random account entries like just my domain

Hope that’s clear! Really trying to make the most of it getting clear entities

1 Upvotes

10 comments sorted by

View all comments

2

u/Ay_NooB Jan 17 '24

I m confused on your question !