question

AsAdmin-9453 avatar image
0 Votes"
AsAdmin-9453 asked AsAdmin-9453 commented

Changing Log Analytic workspace for Sentinel

I need to change the Sentinel workspace due to some business reason. Can this be changed now ? I dont see any way of doing it. Can someone help ? Is this even possible ?

azure-sentinel
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered AsAdmin-9453 commented

@AsAdmin-9453 Thanks for reaching out.

Currently it is not possible to change the workspace when you have already enabled Sentinel on this. If you want the Sentinel on any other workspace, you will have to create another Sentinel Instance for that LAWS and delete the sentinel from previous one which you are not using.

Let me know if this helps.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Ok, in that case how would I delete the sentinel then from workspace.

0 Votes 0 ·

@AsAdmin-9453 Go to your Sentinel Settings and remove it from there :
135543-image.png


0 Votes 0 ·
image.png (122.3 KiB)

Thanks a lot :-)

0 Votes 0 ·