Skip to content

Commit 8b08947

Browse files
Merge pull request #239782 from limwainstein/health-audit-clarification
Adding note about enabling health and audit via API
2 parents 7ed713f + 0f8821e commit 8b08947

File tree

1 file changed

+11
-8
lines changed

1 file changed

+11
-8
lines changed

articles/sentinel/enable-monitoring.md

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,17 @@ To get health data from the *SentinelHealth* data table, or to get auditing info
1515

1616
This article instructs you how to turn on these features.
1717

18+
To implement the health and audit feature using API (Bicep/ARM/REST), review the [Diagnostic Settings operations](/rest/api/monitor/diagnostic-settings).
19+
20+
To configure the retention time for your audit and health events, see [Configure data retention and archive policies in Azure Monitor Logs](../azure-monitor/logs/data-retention-archive.md).
21+
22+
> [!IMPORTANT]
23+
>
24+
> The *SentinelHealth* and *SentinelAudit* data tables are currently in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
25+
>
26+
27+
## Data tables and resource types
28+
1829
When the feature is turned on, the *SentinelHealth* and *SentinelAudit* data tables are created at the first event generated for the selected resources.
1930

2031
The following resource types are currently supported for health monitoring:
@@ -27,14 +38,6 @@ The following resource types are currently supported for health monitoring:
2738
2839
Only the analytics rule resource type is currently supported for auditing.
2940

30-
31-
To configure the retention time for your audit and health events, see [Configure data retention and archive policies in Azure Monitor Logs](../azure-monitor/logs/data-retention-archive.md).
32-
33-
> [!IMPORTANT]
34-
>
35-
> The *SentinelHealth* and *SentinelAudit* data tables are currently in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
36-
>
37-
3841
## Turn on auditing and health monitoring for your workspace
3942

4043
1. In Microsoft Sentinel, under the **Configuration** menu on the left, select **Settings**.

0 commit comments

Comments
 (0)