Skip to content

Commit dcc2cc5

Browse files
Merge pull request #295772 from batamig/patch-117263
Update offboard.md
2 parents cc217fa + e41d627 commit dcc2cc5

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

articles/sentinel/offboard.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,14 +21,15 @@ If you instead want to offboard Microsoft Sentinel from the Defender portal, see
2121

2222
## Prerequisites
2323

24-
Before you begin, review [Implications of removing Microsoft Sentinel from your workspace](offboard-implications.md).
24+
Before you begin, make sure that you understand the effects of removing Microsoft Sentinel from your environment.
2525

26+
For example, you can't manage Microsoft Sentinel tables in Log Analytics after removing Microsoft Sentinel, such as to set extended data retention. Therefore, to avoid extra data retention charges, we recommend that you set per-table retention to 90 days or less for Microsoft Sentinel tables stored in Log Analytics that will be inaccessible after removing Microsoft Sentinel.
27+
28+
For more information, see [Implications of removing Microsoft Sentinel from your workspace](offboard-implications.md).
2629
## Remove Microsoft Sentinel
2730

2831
Complete the following steps to remove Microsoft Sentinel from your Log Analytics workspace.
2932

30-
1. Before removing Sentinel, note that you will no longer have visibility to manage Sentinel tables, such as setting extended data retention, in the Log Analytics Tables UI. Please consider per-table retention to 90 days or less to avoid data retention charges for the Sentinel data that Log Analytics will store, but which you can no longer access after Sentinel is removed.
31-
3233
1. For Microsoft Sentinel in the [Azure portal](https://portal.microsoft.com), under **Configuration**, select **Settings**.<br>On the **Settings** page, select the **Settings** tab. <br><br> For Microsoft Sentinel in the [Defender portal](https://security.microsoft.com/), select **System** > **Settings** > **Microsoft Sentinel**.
3334

3435
1. Select **Remove Microsoft Sentinel**.

0 commit comments

Comments
 (0)