We are a MSSP and we have a large number of customers when it comes to Azure Sentinel. We are currently ingesting Sentinel incidents in SOAR using a connector for each customer.
Is there a way to use only one connector?
Page 1 / 1
It’s not possible currently to configure one connector to fetch data from multiple Azure Sentinel environments. This is by design, because if you have 1 connector running for everyone, then it will cause artificial delay. Also, credential management, becomes very messy.
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.