capability

Log Analytics Workspace

Microsoft Sentinel runs on a Log Analytics workspace that stores security data, analytics output, investigation records, and operational telemetry.

capabilitiesCurrent

Relationships

Microsoft Sentinel
Source productproductSecurityAlert
Related tabletableSecurityIncident
Related tabletableMicrosoft Sentinel REST API
API accessapi

Configuration Methods

MethodSupportReference or Gap
PortalSupported Reference
PowerShellGapNo product-specific PowerShell automation surface is recorded for this capability yet.
REST APISupported Reference
GraphGapNo supported Microsoft Graph configuration surface is recorded for this capability yet.
ARMSupported Reference
BicepSupported Reference
TerraformSupportedazurermazurerm_log_analytics_workspace Reference
GitHub ActionsSupported Reference
Azure DevOpsSupported Reference