Skip to content

Commit 7905074

Browse files
committed
remove preview from SentinelAudit
1 parent 93d70ee commit 7905074

3 files changed

Lines changed: 5 additions & 18 deletions

File tree

articles/sentinel/enable-monitoring.md

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Monitor supported data connectors by using the SentinelHealth data
44
author: batamig
55
ms.author: bagol
66
ms.topic: how-to
7-
ms.date: 08/20/2025
7+
ms.date: 08/24/2025
88
appliesto:
99
- Microsoft Sentinel in the Microsoft Defender portal
1010
- Microsoft Sentinel in the Azure portal
@@ -13,19 +13,14 @@ appliesto:
1313

1414
---
1515

16-
# Turn on auditing and health monitoring for Microsoft Sentinel (Preview)
16+
# Turn on auditing and health monitoring for Microsoft Sentinel
1717

1818
Monitor the health and audit the integrity of supported Microsoft Sentinel resources by turning on the auditing and health monitoring feature in Microsoft Sentinel's **Settings** page. Get insights on health drifts, such as the latest failure events or changes from success to failure states, and on unauthorized actions, and use this information to create notifications and other automated actions.
1919

2020
To get health data from the [*SentinelHealth*](health-table-reference.md) data table, or to get auditing information from the [*SentinelAudit*](audit-table-reference.md) data table, you must first turn on the Microsoft Sentinel auditing and health monitoring feature for your workspace. This article instructs you how to turn on these features.
2121

2222
To implement the health and audit feature using API (Bicep/AZURE RESOURCE MANAGER (ARM)/REST), review the [Diagnostic Settings operations](/rest/api/monitor/diagnostic-settings). To configure the retention time for your audit and health events, see [Manage data retention in a Log Analytics workspace](/azure/azure-monitor/logs/data-retention-configure).
2323

24-
> [!IMPORTANT]
25-
>
26-
> The *SentinelAudit* data table is currently in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
27-
>
28-
2924
## Prerequisites
3025

3126
- Before you start, learn more about health monitoring and auditing in Microsoft Sentinel. For more information, see [Auditing and health monitoring in Microsoft Sentinel](health-audit.md).

articles/sentinel/health-audit.md

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn about the Microsoft Sentinel health and audit feature, which
44
author: batamig
55
ms.author: bagol
66
ms.topic: concept-article
7-
ms.date: 08/20/2025
7+
ms.date: 08/24/2025
88

99

1010
#Customer intent: As a security analyst, I want to monitor and audit Microsoft Sentinel's health and activity so that I can ensure the service is functioning correctly and detect any unauthorized actions.
@@ -36,11 +36,6 @@ The most common way you use this data is by querying these tables. For best resu
3636

3737
The *SentinelHealth* table isn't billable and incurs no charges for ingesting health data. The *SentinelAudit* table is billable, and as in other areas of Microsoft Sentinel, costs incurred depend on the log volume, which might be affected by the number of activities and changes made on related rules. For more information, see [Plan costs and understand Microsoft Sentinel pricing and billing](billing.md).
3838

39-
> [!IMPORTANT]
40-
>
41-
> The *SentinelAudit* data table is currently in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
42-
>
43-
4439
### Questions to verify service health and audit data
4540

4641
Use the following questions to guide your monitoring of Microsoft Sentinel's health and audit data:

articles/sentinel/monitor-analytics-rule-integrity.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Use the SentinelHealth data table to keep track of your analytics r
44
author: yelevin
55
ms.author: yelevin
66
ms.topic: conceptual
7-
ms.date: 08/20/2025
7+
ms.date: 08/24/2025
88

99

1010
#Customer intent: As a security analyst, I want to monitor and audit the health and integrity of my analytics rules so that I can ensure uninterrupted and tampering-free threat detection.
@@ -21,9 +21,6 @@ This article describes how to use Microsoft Sentinel's [auditing and health moni
2121

2222
For information on rule insights and manual rerunning of rules, see [Monitor and optimize the execution of your scheduled analytics rules](monitor-optimize-analytics-rule-execution.md).
2323

24-
> [!IMPORTANT]
25-
>
26-
> The *SentinelAudit* data table is currently in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
2724

2825
## Summary
2926

@@ -48,7 +45,7 @@ For information on rule insights and manual rerunning of rules, see [Monitor and
4845

4946
These logs are collected in the *SentinelAudit* table in Log Analytics.
5047

51-
## Use the SentinelHealth and SentinelAudit data tables (Preview)
48+
## Use the SentinelHealth and SentinelAudit data tables
5249

5350
To get audit and health data from the tables described above, you must first turn on the Microsoft Sentinel health feature for your workspace. For more information, see [Turn on auditing and health monitoring for Microsoft Sentinel](enable-monitoring.md).
5451

0 commit comments

Comments
 (0)