We are a MSSP and we have a large number of customers when it comes to Azure Sentinel. We are currently ingesting Sentinel incidents in SOAR using a connector for each customer.
Is there a way to use only one connector?
Question
How to ingest multiple Sentinel Workspaces incidents using only one connectors?
+3- Bronze 1
+16
It’s not possible currently to configure one connector to fetch data from multiple Azure Sentinel environments. This is by design, because if you have 1 connector running for everyone, then it will cause artificial delay. Also, credential management, becomes very messy.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.