How to get details of all data connectors and data source?

Question

How to get details of all data connectors and data source?

Sayooj Santhosh 20

Is there any kql to get all the details data source and their data type with their current status. Is it possible to get those details?

Givary-MSFT 35,916 Reputation points Microsoft Employee Moderator

2024-09-10T07:33:17.1766667+00:00

@Sayooj Santhosh Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

Answer accepted by question author

0 additional answers

Your answer

Givary-MSFT 35,916 Reputation points Microsoft Employee Moderator

2024-09-10T07:33:17.1766667+00:00

@Sayooj Santhosh Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

Answer 1

This data is in SentinelHealth - if you have that enabled but its not for all Connectors

source: https://learn.microsoft.com/en-us/azure/sentinel/monitor-data-connector-health#supported-data-connectors

Otherwise you need to use the api to access Data Connector info (and ingest the results to use KQL) or use a Workbook.

SentinelHealth
| where SentinelResourceType == "Data connector"
| extend ConnectorDataType_ = tostring(ExtendedProperties.ConnectorDataType)
| extend DestinationTable_ = tostring(ExtendedProperties.DestinationTable)
| summarize make_set(DestinationTable_), arg_max(TimeGenerated, Status, Description, OperationName, SentinelResourceType, ExtendedProperties) by SentinelResourceKind