Hello @Matt_Lowe , thank you for the great article. It makes the process
really simple and fast.We have tried to use the template you provided
and got the following error: "code": "BadRequest", "message": "Invalid
Properties. Error messages: Data collection rule with ImmutableId
'dcr-XXXX' does not ...
Hey, there is a nice little scrip to now complete this. Configuring
Microsoft Sentinel archive period for tables at Mass for Data Retention
within Log Analytics Workspace (substack.com)
For anyone having the same issue as @Youssef6dh if using a dev tenant -
I found that I needed to run this using a GA in the original tenant to
populate properly. Delegated owner permissions did not work. Hope that
helps someone.
Latest Comments