Microsoft Sentinel Solution for Microsoft Power Platform

Gord B 0 Reputation points
2024-07-17T17:32:46.93+00:00

I’ve been testing the Microsoft Sentinel Solution for the Power Platform, and I’m encountering an issue with the Power Platform inventory data connector. This connector uses a Azure Function App to ingest inventory and usage data from an Azure Data Lake Storage into Sentinel Log Analytics tables. The data is exported to the Azure Data Lake Storage by the Power Platform self-service analytics.

PPDataExport

The problem I’m facing is that the Power Platform self-service analytics is only storing partial data in the data lake storage. Specifically:

  1. For PowerApps, I’m receiving only Environments and Usage data, while missing Applications, ConnectionReference, and Connections data as described in the self-service analytics schema definition.

  1. For PowerAutomate, I’m only getting Usage data, and missing Flows and FlowsConnectionReference data.

I understand that this feature is in preview, so it’s possible that not all inventory data is exportable. Has anyone else experienced the same issue, or is it just me?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,053 questions
Microsoft Power Platform Training
Microsoft Power Platform Training
Microsoft Power Platform: An integrated set of Microsoft business intelligence services.Training: Instruction to develop new skills.
215 questions
0 comments No comments
{count} votes