Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
After you install a Microsoft Sentinel platform solution, you manage its components in different places. This article explains how to configure, update, and uninstall the main types of components.
Security Copilot agents
Configure
Manage Security Copilot agents in the Security Copilot portal, where you can enable, disable, or schedule them. For an overview of agent types, see Microsoft Security Copilot agents overview.
Update
Agents update automatically when Microsoft releases a new version in the Microsoft Security Store. Make sure your environment stays compatible to avoid breaking changes.
Uninstall
Uninstalling the solution doesn’t remove the agent from the catalog. Enabled or scheduled agents keep running until you disable them in the portal. This behavior prevents unexpected disruption.
Notebooks and notebook jobs
Configure
Use the Microsoft Sentinel Jobs page to enable, disable, schedule, or view notebook jobs. You can also review notebook content and execution history.
Update
To update notebooks or jobs, go to the Microsoft Security Store, find the solution, and install the latest version. This deployment overwrites existing notebooks and jobs that share the same name. Each solution and publisher uses unique names to prevent conflicts.
Important
Installing the updated solution deletes local edits, such as changes made in Visual Studio Code.
Uninstall
Uninstalling a solution doesn’t stop its notebook jobs. Jobs continue running until you disable them on the Microsoft Sentinel Jobs page.