You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/connect-azure-information-protection.md
+5-7Lines changed: 5 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -58,17 +58,15 @@ However, if logging information from Azure Information Protection is going to a
58
58
59
59
Use the following instructions if you haven't configured a Log Analytics workspace for Azure Information Protection, or you need to change the workspace that stores the Azure Information Protection logging information.
60
60
61
-
1. In Azure Sentinel, select **Data connectors**, and then **Azure Information Protection**.
61
+
1. In Azure Sentinel, select **Data connectors**, and then **Azure Information Protection (Preview)**.
62
62
63
-
2.On the **Azure Information Protection** blade, select**Open connector page**.
63
+
2.Select**Open connector page**.
64
64
65
-
3. On the next blade, in the **Configuration** section, select **Azure Information Protection** to go to **Azure Information Protection analytics**.
65
+
3. On the **Configure analytics (Preview)**blade, select the workspace that you're currently using for Azure Sentinel. If you select a different workspace, the reporting data from Azure Information Protection won't be available to Azure Sentinel.
66
66
67
-
4.From the list of available workspaces, select the workspace that you're currently using for Azure Sentinel. If you select a different workspace, the reporting data from Azure Information Protection won't be available to Azure Sentinel.
67
+
4.When you have selected a workspace, select **OK** and the connector **STATUS** should now change to **Connected**.
68
68
69
-
5. When you have selected a workspace, select **OK** and the connector **STATUS** should now change to **Connected**.
70
-
71
-
6. The reporting data from Azure Information Protection is stored in the **InformationProtectionLogs_CL** table within the selected workspace.
69
+
5. The reporting data from Azure Information Protection is stored in the **InformationProtectionLogs_CL** table within the selected workspace.
72
70
73
71
To use the relevant schema in Azure Monitor for this reporting data, search for **InformationProtectionEvents**. For information about these event functions, see the [Friendly schema reference for event functions](https://docs.microsoft.com/azure/information-protection/reports-aip#friendly-schema-reference-for-event-functions) section from the Azure Information Protection documentation.
0 commit comments