You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/summary-rules.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -257,7 +257,9 @@ This procedure describes a sample process for using summary rules with [auxiliar
257
257
258
258
1. Set up your custom CEF connector from Logstash:
259
259
260
-
1. Deploy our [ARM template](https://aka.ms/DeployCEFresources) to your Microsoft Sentinel workspace to create a custom table with data collection rules (DCR) and a data collection endpoint (DCE).
260
+
1. Deploy the following ARM template to your Microsoft Sentinel workspace to create a custom table with data collection rules (DCR) and a data collection endpoint (DCE):
261
+
262
+
[](https://portal.azure.com/#create/Microsoft.Template/uri/https://aka.ms/DeployCEFresources)
261
263
262
264
1. Note the following details from the ARM template output:
0 commit comments