Skip to content

Commit b656d6d

Browse files
Merge pull request #219072 from AlizaBernstein/WI-1911598-add-continuous-export-different-tenant-via-API
WI-1911598-add-continuous-export-different-tenant-via-API
2 parents b1805b6 + f487a49 commit b656d6d

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

articles/defender-for-cloud/continuous-export.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to configure continuous export of security alerts and rec
44
author: bmansheim
55
ms.author: benmansheim
66
ms.topic: how-to
7-
ms.date: 11/06/2022
7+
ms.date: 11/30/2022
88
---
99
# Continuously export Microsoft Defender for Cloud data
1010

@@ -82,7 +82,7 @@ The steps below are necessary whether you're setting up a continuous export to L
8282

8383
:::image type="content" source="./media/continuous-export/include-security-findings-toggle.png" alt-text="Include security findings toggle in continuous export configuration." :::
8484

85-
1. From the "Export target" area, choose where you'd like the data saved. Data can be saved in a target on a different subscription (for example on a Central Event Hub instance or a central Log Analytics workspace).
85+
1. From the "Export target" area, choose where you'd like the data saved. Data can be saved in a target of a different subscription (for example on a Central Event Hub instance or a central Log Analytics workspace).
8686

8787
You can also send the data to an [Event hub or Log Analytics workspace in a different tenant](#export-data-to-an-azure-event-hub-or-log-analytics-workspace-in-another-tenant).
8888

@@ -180,6 +180,8 @@ To export data to an Azure Event hub or Log Analytics workspace in a different t
180180
1. For a Log Analytics workspace: After the user accepts the invitation to join the tenant, assign the user in the workspace tenant one of these roles: Owner, Contributor, Log Analytics Contributor, Sentinel Contributor, Monitoring Contributor
181181
1. Configure the continuous export configuration and select the Event hub or Analytics workspace to send the data to.
182182

183+
You can also configure export to another tenant through the REST API. For more information, see the automations [REST API](/rest/api/defenderforcloud/automations/create-or-update?tabs=HTTP).
184+
183185
## View exported alerts and recommendations in Azure Monitor
184186

185187
You might also choose to view exported Security Alerts and/or recommendations in [Azure Monitor](../azure-monitor/alerts/alerts-overview.md).

0 commit comments

Comments
 (0)