Monitor a single resource group in Microsoft Sentinel

Question

Hi,

I have a single resource group that contains the production resources, how can I monitor only the resources in this RG and not the whole subscription?

Answer 1

Hello Najam,
Thank you for your question.

Follow the steps below to monitor the resources in your resource group.
Create a Log Analytics Workspace and Connect Resources to the Workspace: Ensure that you have a Log Analytics workspace set up. This workspace will collect and analyze data from your resources. Then you go ahead and connect the resources in yiur specific resource group to the LOG Analytic workspace.

Configure Data Collection Rules: In Microsoft Sentinel, you can create data collection rules to specify which logs and metrics to collect from the resources in your resource group. This helps in filtering out unnecessary data from other resources in the subscription. - Ref doc: https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-overview

Set Up Alerts and Workbooks: Create custom alerts and workbooks in Sentinel to monitor the specific metrics and logs from your resource group. This allows you to focus on the data that is relevant to your production resources.

Use Resource Group Scope: When configuring Sentinel, ensure that you set the scope to the specific resource group. This can be done in the Sentinel settings where you define the scope of the data collection and monitoring.

I hope this helps to answer your question. If the ask was different please do let me know and I will look into it.