Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into IPv6update

Author: siddomala

.openpublishing.redirection.sentinel.json

@@ -1089,6 +1089,11 @@
             "source_path_from_root": "/articles/sentinel/notebooks-with-synapse-hunt.md",
             "redirect_url": "/azure/sentinel/notebooks-hunt",
             "redirect_document_id": false
+        },
+        {
+            "source_path_from_root": "/articles/sentinel/data-connectors/dns.md",
+            "redirect_url": "/azure/sentinel/data-connectors/windows-dns-events-via-ama",
+            "redirect_document_id": false
         }
     ]
 }

articles/machine-learning/how-to-manage-labeling-projects.md

@@ -77,7 +77,10 @@ Additionally, when ML-assisted labeling is enabled, you can scroll down to see t
 
 ### Review data and labels
 
-On the **Data** tab, preview the dataset and review labeled data. 
+On the **Data** tab, preview the dataset and review labeled data.
+
+> [!TIP]
+> Before you review, coordinate with any other possible reviewers.  Otherwise, you might both be trying to approve the same label at the same time, which will keep one of you from updating it.
 
 Scroll through the labeled data to see the labels. If you see data that's incorrectly labeled, select it and choose **Reject** to remove the labels and return the data to the unlabeled queue.
 

articles/machine-learning/how-to-troubleshoot-data-labeling.md

@@ -17,7 +17,7 @@ ms.topic: troubleshooting
 
 If you have errors that occur while creating a data labeling project try the following troubleshooting steps.
 
-## Add Storage Blob Data Contributor access to the workspace identity
+## <a name="add-blob-access"></a> Add Storage Blob Data Contributor access 
 
 In many cases, an error creating the project could be due to access issues. To resolve access problems, add the Storage Blob Data Contributor role to the workspace identity with these steps:
 
@@ -48,7 +48,7 @@ In many cases, an error creating the project could be due to access issues. To r
 1. Select members.
 
     1. In the Members page, select **+Select members**.
-    1. Search for your workspace identity.  
+    1. Search for your workspace identity. 
         1. By default, the workspace identity is the same as the workspace name.
         1. If the workspace was created with user assigned identity, search for the user identity name.
     1. Select the **Enterprise application** with the workspace identity name.
@@ -57,16 +57,16 @@ In many cases, an error creating the project could be due to access issues. To r
         :::image type="content" source="media/how-to-troubleshoot-data-labeling/select-members.png" alt-text="Screenshot shows selecting members.":::
 
 1. Review and assign the role.
-    
+
     1. Select **Review + assign** to review the entry.
     1. Select **Review + assign** again and wait for the assignment to complete.
 
 ## Set access for external datastore
 
-If the data for your labeling project is accessed from an external datastore, set access for that datastore as well as the default datastore.  
+If the data for your labeling project is accessed from an external datastore, set access for that datastore and the default datastore. 
 
 1. Navigate to the external datastore in the [Azure portal](https://portal.azure.com).
-1. Follow steps above starting with [Add role assignment](#add) to add the Storage Blob Data Contributor role to the workspace identity.
+1. Follow the previous steps, starting with [Add role assignment](#add) to add the Storage Blob Data Contributor role to the workspace identity.
 
 ## Set datastore to use workspace managed identity
 
@@ -78,6 +78,36 @@ When your workspace is secured with a virtual network, use these steps to set th
 1. On the top toolbar, select **Update authentication**.
 1. Toggle on the entry for "Use workspace managed identity for data preview and profiling in Azure Machine Learning studio."
 
+## When data preprocessing fails
+
+Another possible issue with creating a data labeling project is when data preprocessing fails. You'll see an error that looks like this:
+
+:::image type="content" source="media/how-to-troubleshoot-data-labeling/data-error.png" alt-text="Screenshot shows a data preprocessing error.":::
+
+This error can occur when you use a v1 tabular dataset as your data source. The project first converts this data. Data access errors can cause this conversion to fail. To resolve this issue, check the way your datastore saves credentials for data access.
+
+1. In the left menu of your workspace, select **Data**.
+1. On the top tab, select **Datastores**.
+1. Select the datastore where your v1 tabular data is stored.
+1. On the top toolbar, select **Update authentication**.
+1. If the toggle for **Save credentials with the datastore for data access** is **On**, verify that the Authentication type and values are correct.
+1. If the toggle for **Save credentials with the datastore for data access** is **Off**, follow the rest of these steps to ensure that the compute cluster can access the data.
+
+When the **Save credentials with the datastore for data access** is **Off**, the compute cluster that runs the conversion job needs access to the datastore. To ensure that the compute cluster can access the data, find the compute cluster name and assign a managed identity, follow these steps: 
+
+1. In the left menu, select **Jobs**.
+1. Select experiment which includes the name **Labeling ConvertTabularDataset**.
+1. If you see a failed job, select the job. (If you see a successful job, the conversion was successful.)
+1. In the Overview section, at the bottom of the page is the **Compute** section. Select the **Target** compute cluster.
+1. On the details page for the compute cluster, at the bottom of the page is the **Managed identity** section. If the compute cluster doesn't have an identity, select the **Edit** tool to assign a system-assigned or managed identity.
+
+Once you have the compute cluster name with a managed identity, assign the Storage Blob Data Contributor role to the compute cluster. 
+
+Follow the previous steps to [Add Storage Blob Data Contributor access](#add-blob-access). But this time, you'll be selecting the compute resource in the **Select members** section, so that the compute cluster has access to the datastore.
+
+* If you're using a system-assigned identity, search for the compute name by using the workspace name, followed by `/computes/` followed by the compute name. For example, if the workspace name is `myworkspace` and the compute name is `mycompute`, search for `myworkspace/computes/mycompute` to select the member.
+* If you're using a user-assigned identity, search for the user-assigned identity name.
+
 ## Related resources
 
 For information on how to troubleshoot project management issues, see [Troubleshoot project management issues](how-to-manage-labeling-projects.md#troubleshoot-issues).

articles/machine-learning/media/how-to-troubleshoot-data-labeling/data-error.png

@@ -500,8 +500,6 @@
       href: data-connectors/digital-guardian-data-loss-prevention.md
     - name: Digital Shadows Searchlight (using Azure Functions)
       href: data-connectors/digital-shadows-searchlight-using-azure-functions.md
-    - name: DNS
-      href: data-connectors/dns.md
     - name: Dynamics 365
       href: data-connectors/dynamics-365.md
     - name: Dynatrace Attacks

articles/sentinel/TOC.yml

@@ -416,7 +416,6 @@ Data connectors are available as part of the following offerings:
 - [Azure Web Application Firewall (WAF)](data-connectors/azure-web-application-firewall-waf.md)
 - [Common Event Format (CEF)](data-connectors/common-event-format-cef.md)
 - [Common Event Format (CEF) via AMA](data-connectors/common-event-format-cef-via-ama.md)
-- [DNS](data-connectors/dns.md)
 - [Fortinet FortiWeb Web Application Firewall](data-connectors/fortinet-fortiweb-web-application-firewall.md)
 - [Microsoft 365 (formerly, Office 365)](data-connectors/microsoft-365.md)
 - [Microsoft Defender XDR](data-connectors/microsoft-365-defender.md)

articles/sentinel/data-connectors-reference.md

@@ -127,7 +127,7 @@ If your workload needs extra performance to meet peak demand, you can use burst
 
 Credits accumulate in a burst bucket whenever traffic for your file share is below baseline IOPS. Earned credits are used later to enable bursting when operations would exceed the baseline IOPS.
 
-Whenever a share exceeds the baseline IOPS and has credits in a burst bucket, it will burst up to the maximum allowed peak burst rate. Shares can continue to burst as long as credits are remaining, but this is based on the number of burst credits accrued. Each IO beyond baseline IOPS consumes one credit. Once all credits are consumed, the share wreturns to the baseline IOPS.
+Whenever a share exceeds the baseline IOPS and has credits in a burst bucket, it will burst up to the maximum allowed peak burst rate. Shares can continue to burst as long as credits are remaining, but this is based on the number of burst credits accrued. Each IO beyond baseline IOPS consumes one credit. Once all credits are consumed, the share returns to the baseline IOPS.
 
 Share credits have three states:
 

articles/sentinel/data-connectors/dns.md

@@ -65,7 +65,7 @@ The standard practice in signing is to countersign all signatures with an RFC316
 
 The countersignature provides a reliable date and time of when the signing occurred, so if the time stamp countersign is inside the signing certificate's validity period (and the Time Stamp Authority certificate's validity period) the signature is valid even long after the signing (and Time Stamp Authority) certificates have expired (unless either are revoked).
 
-Trusted Signing provides a generally available Time Stamp Authority endpoint at `http://acs.timestamp.microsoft.com`. We recommend that all Trusted Signing subscribers leverage this Time Stamp Authority endpoint for countersigning any signatures they're producing.
+Trusted Signing provides a generally available Time Stamp Authority endpoint at `http://timestamp.acs.microsoft.com`. We recommend that all Trusted Signing subscribers leverage this Time Stamp Authority endpoint for countersigning any signatures they're producing.
 
 ### Active monitoring