Azure / Azure-Network-Security

Resources for improving Customer Experience with Azure Network Security

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Documentation

dmrellan opened this issue · comments

Describe the bug
What destination table do we need to select for Diagnostic Settings if we want to use Azure Firewall Workbook: "Azure diagnostic" option or "resource specific"?

Hi @dmrellan you can use Resource Specific tables as destination. You will find the new json file (Azure Firewall_ResourceSpecific_Gallery.json) to deploy the workbook in our GitHub repository: https://github.com/Azure/Azure-Network-Security/tree/master/Azure%20Firewall/Workbook%20-%20Azure%20Firewall%20Monitor%20Workbook

This new workbook, supporting Resource Specific tables is not available in Microsoft Sentinel yet.

commented

Closing this feedback. Please feel free to open it again if you have any questions