Skip to content

Commit 10eebf0

Browse files
Merge pull request #51274 from KenMAG/Bugs
Revised unit per triage feedback
2 parents 89aae06 + a725ae2 commit 10eebf0

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

learn-pr/wwl-sci/create-manage-azure-sentinel-workspaces/includes/2-plan-for-azure-sentinel-workspace.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ The three implementation options:
1212

1313
The single-tenant with a single Microsoft Sentinel workspace is the central repository for logs across all resources within the same tenant.
1414

15-
This workspace receives logs from resources in other regions within the same tenant. Because the log data (when collected) travels across regions and stored in another region, this creates two possible concerns. First, it can incur a bandwidth cost. Second, if there's a data governance requirement to keep data in a specific region, the single workspace option wouldn't be an implementation option.
15+
This workspace receives logs from resources in other regions within the same tenant. Because the log data (when collected) travels across regions and stored in another region, this creates two possible concerns. First, it can incur a bandwidth cost. Second, if there's a data governance requirement to keep data in a specific region, the single workspace option wouldn't be an implementation option.
1616

1717
:::image type="content" source="../media/single-tenant-workspace.png" alt-text="Diagram of a Single Tenant Microsoft Sentinel Workspace.":::
1818

@@ -51,10 +51,10 @@ TableName
5151

5252
## Multiple tenant workspaces
5353

54-
If you're required to manage a Microsoft Sentinel workspace, not in your tenant, you implement Multiple tenant workspaces using Azure Lighthouse. This security configuration grants you access to the tenants. The tenant configuration within the tenant (regional or multi-regional) is the same consideration as before.
54+
If you're required to manage a Microsoft Sentinel workspace, not in your tenant, you implement Multiple tenant workspaces using Azure Lighthouse. This security configuration grants you access to the tenants. The tenant configuration within the tenant (regional or multi-regional) is the same consideration as before.
5555

5656
:::image type="content" source="../media/multi-tenant-workspaces.png" alt-text="Diagram of Microsoft Sentinel Multiple tenant Workspaces.":::
5757

58-
## Use the same log analytics workspace as Microsoft Defender for Cloud
58+
## Use the same log analytics workspace for Microsoft Sentinel and Microsoft Defender for Cloud
5959

60-
Use the same workspace for both Microsoft Sentinel and Microsoft Defender for Cloud, so that all logs collected by Microsoft Defender for Cloud can also be ingested and used by Microsoft Sentinel. The default workspace created by Microsoft Defender for Cloud won't appear as an available workspace for Microsoft Sentinel.
60+
To streamline security operations, use the same workspace for both Microsoft Sentinel and Microsoft Defender for Cloud. All logs collected by Microsoft Defender for Cloud can also be used by Microsoft Sentinel. The default workspace created by Microsoft Defender for Cloud won't appear as an available workspace for Microsoft Sentinel.

0 commit comments

Comments
 (0)