|
| 1 | +--- |
| 2 | +title: 'Managing end-to-end lifecycle of deprecated solutions in Microsoft Sentinel' |
| 3 | +description: This article walks you through the process of identifying derprecated solutions in Microsoft Sentinel and managing the lifecycle of these solutions. |
| 4 | +author: anilgodavarthy |
| 5 | +ms.author: angodavarthy |
| 6 | +ms.service: microsoft-sentinel |
| 7 | +ms.topic: conceptual |
| 8 | +ms.date: 12/30/2024 |
| 9 | + |
| 10 | +#CustomerIntent: As a Microsoft Sentinel user, I should be able to find and manage the lifecycle deprecated solutions in Microsoft Sentinel so that I can always have the latest updates. |
| 11 | +--- |
| 12 | + |
| 13 | +# Identifying and managing the lifecycle of deprecated solutions in Microsoft Sentinel |
| 14 | + |
| 15 | +This document explains how to manage the lifecycle of out-of-the-box solutions in Microsoft Sentinel after they are no longer supported by the solution author. This document explains how to identify the solutions that are marked for deprecation and what actions to take on those solutions. |
| 16 | + |
| 17 | +## Reasons for solution deprecation |
| 18 | +Below are some of the primary reasons why Solutions are sometimes deprecated in Microsoft Sentinel - |
| 19 | +1. The upstream product or service from which data is being ingested into Microsoft Sentinel is deprecated or no longer supported by the software service provider. |
| 20 | +1. The ISV who originally published the solution is no longer actively supporting the solution or providing critical updates. |
| 21 | +1. For reasons such as acquisitions, the original solution providers must transfer ownership to a different entity. |
| 22 | + |
| 23 | +In these cases, users will have to uninstall the original solution and install alternate solutions where available. For more information on how to delete/uninstall solutions in Microsoft Sentinel, see [Delete installed Microsoft Sentinel out-of-the-box content and solutions](/azure/sentinel/sentinel-solutions-delete). |
| 24 | + |
| 25 | +## Identifying solutions that are marked as deprecated |
| 26 | +Solutions that are marked as deprecated can be identified using the **DEPRECATED** tag against the solution name in Microsoft Sentinel content hub. Solutions that are marked as deprecated are shown first in the content hub, followed by other solutions in alphabetical order. |
| 27 | + |
| 28 | + :::image type="content" source="media/sentinel-solution-deprecation/Solutions-marked-deprecated.png" alt-text="Screenshot of solutions marked as deprecated in Microsoft Sentinel content hub." lightbox="media/sentinel-solution-deprecation/Solutions-marked-deprecated.png"::: |
| 29 | + |
| 30 | +## Actions to take on solutions that are marked as deprecated |
| 31 | +1. Navigate to Microsoft Sentinel content hub and look for solutions that are flagged as **DEPRECATED** and the status shows **Installed**. |
| 32 | +1. Select the solution matching this criterion. If an alternate solution is available, **Navigate to solution** button will be visible at the bottom of the solutions details view. If the **Navigate to solution** button is not available, this means that there are no alternate solutions available. In this case, please proceed with uninstalling the deprecated solution. |
| 33 | + |
| 34 | + :::image type="content" source="media/sentinel-solution-deprecation/Deprecation-navigate-to-solution.png" alt-text="Screenshot showing navigate to solution option in content hub." lightbox="media/sentinel-solution-deprecation/Deprecation-navigate-to-solution.png" ::: |
| 35 | + |
| 36 | +1. Click on **Navigate to solution** button to go to the alternate solution and then click the **Install** button to install the new solution. |
| 37 | +1. After you install the new solution, you can proceed to uninstall the deprecated solution. This includes disconnecting the data connectors and removing the other content items that were part of the deprecated solution. For more information, see [Delete installed Microsoft Sentinel out-of-the-box content and solutions](/azure/sentinel/sentinel-solutions-delete). |
| 38 | +1. Configure the new solution. For more information, see [Discover and manage Microsoft Sentinel out-of-the-box content](/azure/sentinel/sentinel-solutions-deploy?tabs=azure-portal#discover-content). |
| 39 | + |
| 40 | +> [!NOTE] |
| 41 | +> Before configuring the alternate solution, please make sure to fully remove all the content items in the deprecated solution to ensure that data is not duplicated. |
| 42 | +
|
| 43 | +## Related content |
| 44 | + |
| 45 | +[Discover and manage Microsoft Sentinel out-of-the-box content](/azure/sentinel/sentinel-solutions-deploy?tabs=azure-portal#discover-content) |
0 commit comments