I am trying to set some Automation Rules, however I am missing the "Automation" blade in Azure sentinel for all but 2 of my subscriptions. Is anyone aware of how to enable this feature?
Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.
In general, Automation tile / blade is available in Log Analytics workspace resource but not in Azure Sentinel resource. Check below screenshots for reference. When you say "Automation blade in Azure sentinel", did you mean in "Automation blade in Log Analytics resource" ?
Log Analytics resource:
At the moment it looks like there has been a new feature added to Sentinel:
This blade has shown up in 2 of my sentinel workspaces, and looks like it has some great options in it. I'm looking for a way to add it to all of my subscriptions.
Oh yes, I just realized by creating a new sentinel resource. In that case, I will correct the tag to azure-sentinel so sentinel SME's would respond to the query. Thanks.
@PoidaThank you for your post and I apologize for the delayed response! I just wanted to check in and see if you were able to resolve this issue?
Based off my environment, which is similar to @tbgangav-MSFT, I wasn't able to see the automation option either. However, it does look like we might be under different resources based off the Azure Sentinel logos within the Portal.
If you're still having an issue with this, and would like to work closer with our support team, please let me know.Thank you for your time and patience throughout this issue.
@PoidaI just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know.Thank you for your time and patience throughout this issue.
4 people are following this question.
How to use AWS Cloudwatch Logs and what kind of things we can do with Azure Sentinel and AWS Cloudwatch logs
Will Azure Sentinel integrate with my organization’s existing tools?
What are “Incidents” in Azure Sentinel and how are they different from alerts?
What is Azure Sentinel, and how does it work?
Do I need an Azure subscription to use Azure Sentinel?