How to get details of all data connectors and data source?

Question

Is there any kql to get all the details data source and their data type with their current status. Is it possible to get those details?

Answer 1

This data is in SentinelHealth - if you have that enabled but its not for all Connectors

source: https://learn.microsoft.com/en-us/azure/sentinel/monitor-data-connector-health#supported-data-connectors

Otherwise you need to use the api to access Data Connector info (and ingest the results to use KQL) or use a Workbook.

SentinelHealth
| where SentinelResourceType == "Data connector"
| extend ConnectorDataType_ = tostring(ExtendedProperties.ConnectorDataType)
| extend DestinationTable_ = tostring(ExtendedProperties.DestinationTable)
| summarize make_set(DestinationTable_), arg_max(TimeGenerated, Status, Description, OperationName, SentinelResourceType, ExtendedProperties) by SentinelResourceKind