Microsoft Sentinel Solution for Microsoft Power Platform
I’ve been testing the Microsoft Sentinel Solution for the Power Platform, and I’m encountering an issue with the Power Platform inventory data connector. This connector uses a Azure Function App to ingest inventory and usage data from an Azure Data Lake Storage into Sentinel Log Analytics tables. The data is exported to the Azure Data Lake Storage by the Power Platform self-service analytics.
The problem I’m facing is that the Power Platform self-service analytics is only storing partial data in the data lake storage. Specifically:
- For PowerApps, I’m receiving only Environments and Usage data, while missing Applications, ConnectionReference, and Connections data as described in the self-service analytics schema definition.
- For PowerAutomate, I’m only getting Usage data, and missing Flows and FlowsConnectionReference data.
I understand that this feature is in preview, so it’s possible that not all inventory data is exportable. Has anyone else experienced the same issue, or is it just me?