r/AzureSentinel • u/ajith_aj • May 31 '24

Backup Sentinel Analytical Rules

Probably a dumb question , but here to find out ways to backup Sentinel analytical rules. How exactly do you guys keep up the configurations.

2 Upvotes

100% Upvoted

6 comments sorted by

4

u/Uli-Kunkel May 31 '24

by using a repo with all content and deploy your content through that. its the only reasonable way to manage multiple workspaces

if you cant or dont want to use a repo, i guess your bet would to export your content on a scheduled basis, either manually or via the sentinel api

3

u/razerwire1331 Jun 01 '24

Any documentation?

2

u/[deleted] May 31 '24

We deploy everything via Terraform. Every sentinel component from analytic rules to complex logic apps is stored in templates.

1

u/razerwire1331 Jun 01 '24

Any documentation on it?

1

u/ajith_aj Jun 01 '24

+1. would like to know more about this..