question

AsAdmin-9453 avatar image
0 Votes"
AsAdmin-9453 asked vipulsparsh-MSFT answered

How to enable weekly reporting in Sentine?

How can we enable reporting in Sentinel do we have option to send weekly reports from sentinel?
Like how many incidents in a week and other reports like most targeted system in last week.

microsoft-sentinel
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered

@AsAdmin-9453 Thanks for reaching out.

Currently Sentinel does not have any inbuilt reporting mechanism which you can use, however as Stan mentioned you can use Logic apps to to run query and send the reports as attachment to any email dl.

You can also check power BI and Azure Sentinel integration, this can give you a little extra options when it comes to reporting. Here is a step by step method on how to use it :
https://docs.microsoft.com/en-us/azure/sentinel/powerbi

For logic Apps, you can try something like this :
145777-image.png



Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.




image.png (70.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

stan avatar image
0 Votes"
stan answered

Hi,
Out of the box there is no way to send reports. I would suggest to use some Automation services like Logic Apps to query the data from Log Analytics and/or Sentinel REST API and send it via e-mail.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.