Share via

Microsoft Sentinel Training Lab Deployment

Kevin Mejia 6 Reputation points
2022-09-15T21:12:55.633+00:00

I have an issue trying to deploy a Microsoft Sentinel Training Lab. I get this error "workspace is not onboarded to Microsoft sentinel". Does anyone knows how to fix this?

Microsoft Security | Microsoft Sentinel

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. David Broggy 6,371 Reputation points MVP Volunteer Moderator
    2022-09-16T19:35:29.72+00:00

    Hi Kevin,

    The instructions can be a bit confusing, but it's clear Javier has put a LOT of work into this lab, so I encourage you to read on!

    The lab expects you to already have a working Sentinel instance.
    Here's one way to make it work:

    1. Create a new resource group, log analytics workspace and Sentinel instance.
    2. NOW install the lab content pack.

    This method worked for me.

    You could also have applied the lab to any existing Sentinel instance.

    The lab usage is very well documented here:
    Azure-Sentinel-Training-Lab

    And there are some known issues documented here:
    known_issues.md

    2 people found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.