Share via

Changing Log Analytic workspace for Sentinel

AsAdmin 396 Reputation points
2021-09-27T06:29:31.163+00:00

I need to change the Sentinel workspace due to some business reason. Can this be changed now ? I dont see any way of doing it. Can someone help ? Is this even possible ?

Microsoft Security | Microsoft Sentinel
0 comments
Answer accepted by question author
  1. Vipul Sparsh 16,331 Reputation points Microsoft Employee Moderator
    2021-09-27T09:12:41.467+00:00

    @AsAdmin Thanks for reaching out.

    Currently it is not possible to change the workspace when you have already enabled Sentinel on this. If you want the Sentinel on any other workspace, you will have to create another Sentinel Instance for that LAWS and delete the sentinel from previous one which you are not using.

    Let me know if this helps.

    -----------------------------------------------------------------------------------------------------------------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Poojith Kumar BL 1 Reputation point
    2021-12-25T20:57:04.363+00:00

    As suggested by vipul you can create new Sentinel in LAW where you want to move.

    You can move most of your analytics all in one shot by using export/ import(New inclusion) option in analytics tab which will be extremely handy while moving sentinel.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.