Azure / Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.
https://azure.microsoft.com/en-us/services/azure-sentinel/
MIT License
4.59k stars 3.01k forks source link

App Insights Workspace Id in DigitalShadows connector #10100

Closed devang-metron closed 7 months ago

devang-metron commented 8 months ago

In DigitalShadows Microsoft Sentinel connector, recently one new field is introduced due to changes mentioned here.

Can you please elaborate if it is why it is mandatory for new installations?

image

v-sudkharat commented 8 months ago

Hi @devang-metron, As Classic Application Insights is retired on 29 February 2024, so you should do your migration from Classic Application Insights to Log Analytic Workspace. To do this, it is mandatory to fill App Insights Workspace Resource ID in new installations. In simple term now onwards, you will be able to see the app inside data into the log analytic workspace going forward.

Hope we answer your question. Thanks!

devang-metron commented 7 months ago

Hey @v-sudkharat , What if I don't want to add this? Shouldn't the app work without it?

Thanks, Devang

v-sudkharat commented 7 months ago

Hi @devang-metron,

  1. When you do the fresh custom deployment using the template and not filled the - App Insights Workspace Resource ID, then the deployment gets failed.
  2. If you have the existing app installed, it will not stop the working, but later on you need to do the configuration it with Manul configuration to use the new features and improvements. Sharing the MS-doc for reference - https://learn.microsoft.com/en-us/azure/azure-monitor/app/convert-classic-resource Please let us know if we have answered your question, so we can close this issue. Thanks!
devang-metron commented 7 months ago

Hey @v-sudkharat,

Thanks for the information.

v-sudkharat commented 7 months ago

@devang-metron, Welcome.