You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/monitor-data-connector-health.md
+12-6Lines changed: 12 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,10 +1,10 @@
1
1
---
2
2
title: Monitor the health of your Microsoft Sentinel data connectors
3
3
description: Use the SentinelHealth data table and the Health Monitoring workbook to keep track of your data connectors' connectivity and performance.
4
-
author: limwainstein
5
-
ms.author: lwainstein
4
+
author: yelevin
5
+
ms.author: yelevin
6
6
ms.topic: how-to
7
-
ms.date: 11/09/2022
7
+
ms.date: 02/11/2024
8
8
ms.service: microsoft-sentinel
9
9
---
10
10
@@ -14,7 +14,7 @@ To ensure complete and uninterrupted data ingestion in your Microsoft Sentinel s
14
14
15
15
The following features allow you to perform this monitoring from within Microsoft Sentinel:
16
16
17
-
-**Data connectors health monitoring workbook**: This workbook provides additional monitors, detects anomalies, and gives insight regarding the workspace’s data ingestion status. You can use the workbook’s logic to monitor the general health of the ingested data, and to build custom views and rule-based alerts.
17
+
-**Data collection health monitoring workbook**: This workbook provides additional monitors, detects anomalies, and gives insight regarding the workspace’s data ingestion status. You can use the workbook’s logic to monitor the general health of the ingested data, and to build custom views and rule-based alerts.
18
18
19
19
-***SentinelHealth* data table (Preview)**: Querying this table provides insights on health drifts, such as latest failure events per connector, or connectors with changes from success to failure states, which you can use to create alerts and other automated actions. The *SentinelHealth* data table is currently supported only for [selected data connectors](#supported-data-connectors).
20
20
@@ -26,9 +26,15 @@ The following features allow you to perform this monitoring from within Microsof
26
26
27
27
## Use the health monitoring workbook
28
28
29
-
1. From the Microsoft Sentinel portal, select **Workbooks** from the **Threat management** menu.
29
+
1. From the Microsoft Sentinel portal, select **Content hub** from the **Content management** section of the navigation menu.
30
30
31
-
1. In the **Workbooks** gallery, enter *health* in the search bar, and select **Data collection health monitoring** from among the results.
31
+
1. In the **Content hub**, enter *health* in the search bar, and select **Data collection health monitoring** from among the results.
32
+
33
+
1. Select **Install** from the details pane. When you see a notification message that the workbook is installed, or if instead of *Install*, you see *Configuration*, proceed to the next step.
34
+
35
+
1. Select **Workbooks** from the **Threat management** section of the navigation menu.
36
+
37
+
1. In the **Workbooks** page, select the **Templates** tab, enter *health* in the search bar, and select **Data collection health monitoring** from among the results.
32
38
33
39
1. Select **View template** to use the workbook as is, or select **Save** to create an editable copy of the workbook. When the copy is created, select **View saved workbook**.
0 commit comments