Why data connector display disconnected after setup

Question

I setup a data connector with Content source :Azure Activity however it shows disconnected,how to make it connected?

Answer 1

Hi Tester,

The Azure Activity data connector uses Azure Policies to configure and pipe subscription level events into Sentinel. If you navigate into the Azure Activity data connector it will provide you the instructions for configuring the Azure Policy. After configuring the policies, it can sometimes take a bit of time to show as connected (As the Azure Policy needs to propagate).

I would also double check that the policy has Remediation enabled, you can check this by locating the policy and checking the Remediation tab, make sure that 'Create a remediation task' is selected.

Answer 2

Hello Tester,
Thank you for your question.
Navigate to the data connectors Tab and locate the data connector and select it, then Click on the open connector page.
Review the Prerequisites. To configure the data connector, fulfill all the prerequisites.

Follow the steps outlined in the Configurations section.

For some connectors, find more specific configuration information in the Collect data section in the Microsoft Sentinel documentation.

After you configure the data connector, it might take some time for the data to be ingested into Microsoft Sentinel. When the data connector is connected, you see a summary of the data in the Data received graph, and the connectivity status of the data types.

Documentation Reference: https://learn.microsoft.com/en-us/azure/sentinel/configure-data-connector?tabs=azure-portal

If this answers your question, kindly accept the answer to help community members with a similar question.