When trying to make a list of all enabled Data Connectors for Sentinel, not all of them show

David Ivashenko 5 Reputation points
2023-01-25T22:05:49.04+00:00

When I try to list all the data connectors I have enabled in Sentinel (I have 10), I get the following list.

  • AzureActiveDirectory
  • AzureSecurityCenter
  • MicrosoftCloudAppSecurity
  • AzureAdvancedThreatProtection
  • MicrosoftDefenderAdvancedThreatProtection
  • Office365

But none of my Cisco, Palo Alto connectors are showing. When I go into Azure portal, Sentinel shows I have 10 connectors. I tried using :

  • azure cli "az sentinel data-connector list"
  • and the REST API [https://learn.microsoft.com/en-us/rest/api/securityinsights/stable/data-connectors/list?tabs=HTTP

Neither seems to get me better results. Is there a better way to grab a list of all the connectors I have enabled?

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
41,886 questions
0 comments No comments
{count} vote

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.