-
Notifications
You must be signed in to change notification settings - Fork 3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Q2 2024 updates #11049
base: master
Are you sure you want to change the base?
Q2 2024 updates #11049
Conversation
Hi |
Hi @v-prasadboke, @v-atulyadav do we have any news on the analysis of this PR ? |
Hi itsjusthaif, we are waiting for review from MS Sentinel team. We will update you as soon as possible. |
Hello @nlepagnez & @itsjusthaif Sorry for the delay in response. Had some priority tasks on my name. Will get on this PR and update you soon |
@v-prasadboke any update ? |
@v-prasadboke, the "DataConnector" test detects that ESI-Opt6ExchangeMessageTrackingLogs.json and ESI-Opt7ExchangeHTTPProxyLogs.json are "Azure Function" Data connector, but it's completely false. The detection has this conclusion because the table is not "Event" table and because he find "Deploy to Azure" in instruction but :
Can you please correct the test because I cannot add a "Virtual" permission in my Data connector to request "Website permission" only to satisfy the test and create a confusion for end user. |
Hi @nlepagnez, any update on this, please? Still waiting to go ahead or will have to manually map our what changes were made and reflect that to our environment. |
Hi @itsjusthaif, no news on the Microsoft Sentinel team. As you can see, I don't received any answer on my last comment. |
Hello @nlepagnez & @itsjusthaif, Apologies for the inconvenience but I was on leave from 2nd of October till 6th of October IST But I still see some validation failure for Provided permissions does not match with Azure Function Connector Template from last commit. |
Hi @v-prasadboke, as you can see in my previous comment, this connector is not an Azure Function Connector, but an Azure Monitor Connector ingesting data in a custom table. I will not add a permission "Website permission" to my connector just to satisfy a test, a permission that will confuse users. The test script detect my connector as Azure function connector because it's a custom table (not event table) and it found the word "Azure Deploy" inside instruction. Is it means that we cannot use Azure Deploy to deploy the DCRs needed by the "New" AMA ?! So again, I ask you to correct the test to be compatible with AMA collecting custom data, not adapting a Data connector because the test do not works. |
Hi @v-prasadboke please see the comment above and help progress this. We have customers waiting on this solution and this is now delayed by a good margin. |
Any update on this one please? |
Hello @nlepagnez & @itsjusthaif, We skipvalidated the template but still not able to get this PR merged We are working on this |
Hi, Is this still being looked into? I was hoping this would have been merged by now. |
Hello @itsjusthaif, We are discussing this internally and Nicolas is part of this discussion |
Required items, please complete
Change(s):
Reason for Change(s):