Skip to content

Commit 71c0610

Browse files
committed
Minor edit
1 parent eab7874 commit 71c0610

File tree

1 file changed

+9
-10
lines changed

1 file changed

+9
-10
lines changed

articles/sentinel/quickstart-onboard.md

Lines changed: 9 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: In this quickstart, you enable Microsoft Sentinel, and set up data
44
author: yelevin
55
ms.author: yelevin
66
ms.topic: quickstart
7-
ms.date: 05/18/2023
7+
ms.date: 06/01/2023
88
ms.custom: references_regions, ignite-fall-2021, mode-other
99
#Customer intent: As a security operator, set up data connectors in one place so I can monitor and protect my environment.
1010
---
@@ -36,6 +36,8 @@ Microsoft Sentinel comes with many data connectors for Microsoft products such a
3636

3737
## Enable Microsoft Sentinel <a name="enable"></a>
3838

39+
To get started, add Microsoft Sentinel to an existing workspace or create a new one.
40+
3941
1. Sign in to the [Azure portal](https://portal.azure.com/).
4042

4143
1. Search for and select **Microsoft Sentinel**.
@@ -44,21 +46,18 @@ Microsoft Sentinel comes with many data connectors for Microsoft products such a
4446

4547
1. Select **Add**.
4648

47-
1. Select the workspace you want to use or create a new one. You can run Microsoft Sentinel on more than one workspace, but the data is isolated to a single workspace. Note that default workspaces created by Microsoft Defender for Cloud are not shown in the list. You can't install Microsoft Sentinel on these workspaces.
49+
1. Select the workspace you want to use or create a new one. You can run Microsoft Sentinel on more than one workspace, but the data is isolated to a single workspace.
4850

4951
:::image type="content" source="media/quickstart-onboard/choose-workspace.png" alt-text="Screenshot of choosing a workspace while enabling Microsoft Sentinel.":::
50-
51-
>[!IMPORTANT]
52-
>
53-
> - Once deployed on a workspace, Microsoft Sentinel **does not currently support** the moving of that workspace to other resource groups or subscriptions.
54-
>
55-
> If you have already moved the workspace, disable all active rules under **Analytics** and re-enable them after five minutes. This should be effective in most cases, though, to reiterate, it is unsupported and undertaken at your own risk.
52+
53+
- The default workspaces created by Microsoft Defender for Cloud are not shown in the list. You can't install Microsoft Sentinel on these workspaces.
54+
- Once deployed on a workspace, Microsoft Sentinel **doesn't currently support** moving that workspace to another resource group or subscription.
5655

5756
1. Select **Add Microsoft Sentinel**.
5857

5958
## Install a solution from the content hub
6059

61-
The content hub in Microsoft Sentinel is the centralized location to discover and manage out-of-the-box (built-in) content including data connectors.
60+
The content hub in Microsoft Sentinel is the centralized location to discover and manage out-of-the-box (built-in) content including data connectors. For this quickstart, install the solution for Azure Activity.
6261

6362
1. In Microsoft Sentinel, select **Content hub**.
6463

@@ -70,7 +69,7 @@ The content hub in Microsoft Sentinel is the centralized location to discover an
7069

7170
## Set up the data connector
7271

73-
Microsoft Sentinel ingests data from services and apps by connecting to the service and forwarding the events and logs to Microsoft Sentinel. For this quickstart, you'll install the data connector to forward data for Azure Activity to Microsoft Sentinel.
72+
Microsoft Sentinel ingests data from services and apps by connecting to the service and forwarding the events and logs to Microsoft Sentinel. For this quickstart, install the data connector to forward data for Azure Activity to Microsoft Sentinel.
7473

7574
1. In the Azure portal, search for and select **Microsoft Sentinel**.
7675
1. In Microsoft Sentinel, select **Data connectors**.

0 commit comments

Comments
 (0)