From 0ec93d9c11f435bf97034d7850e0d243c781ec47 Mon Sep 17 00:00:00 2001 From: Javier Soriano Date: Tue, 24 Nov 2020 13:17:00 +0100 Subject: [PATCH] included REAMDE --- Tools/ARM-Templates/DataConnectors/Office365.json | 9 ++++----- Tools/ARM-Templates/DataConnectors/README.md | 11 +++++++++++ 2 files changed, 15 insertions(+), 5 deletions(-) create mode 100644 Tools/ARM-Templates/DataConnectors/README.md diff --git a/Tools/ARM-Templates/DataConnectors/Office365.json b/Tools/ARM-Templates/DataConnectors/Office365.json index c64f474c95..ff2bbeccfb 100644 --- a/Tools/ARM-Templates/DataConnectors/Office365.json +++ b/Tools/ARM-Templates/DataConnectors/Office365.json @@ -2,10 +2,6 @@ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { - "guidValue": { - "type": "string", - "defaultValue": "[newGuid()]" - }, "workspaceName": { "type": "string", "metadata": { @@ -44,12 +40,15 @@ } } }, + "variables": { + "connectorName": "uniquestring(resourceGroup().id)" + }, "resources": [ { "type": "Microsoft.OperationalInsights/workspaces/providers/dataConnectors", "apiVersion": "2020-01-01", "location": "[parameters('location')]", - "name": "[concat(parameters('workspaceName'),'/Microsoft.SecurityInsights/',parameters('guidValue'))]", + "name": "[concat(parameters('workspaceName'),'/Microsoft.SecurityInsights/',variables('connectorName'))]", "kind": "Office365", "properties": { "tenantId": "[parameters('tenantId')]", diff --git a/Tools/ARM-Templates/DataConnectors/README.md b/Tools/ARM-Templates/DataConnectors/README.md new file mode 100644 index 0000000000..f63c51e160 --- /dev/null +++ b/Tools/ARM-Templates/DataConnectors/README.md @@ -0,0 +1,11 @@ +# Data Connector sample templates + +The templates in this folder allow you to onboard several data connectors in Azure Sentinel. You can try them with the following links: + +| Data Connector | Deploy | +| :---| :---| +| [Office 365](https://github.com/javiersoriano/Azure-Sentinel/blob/javier-arm/Tools/ARM-Templates/DataConnectors/Office365.json) | [![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2Fjaviersoriano%2FAzure-Sentinel%2Fjavier-arm%2FTools%2FARM-Templates%2FDataConnectors%2FOffice365.json) | +| [Azure ATP](https://github.com/javiersoriano/Azure-Sentinel/blob/javier-arm/Tools/ARM-Templates/DataConnectors/Azure ATP.json) | [![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2Fjaviersoriano%2FAzure-Sentinel%2Fjavier-arm%2FTools%2FARM-Templates%2FDataConnectors%2FAzureATP.json) | +| [Azure Security Center](https://github.com/javiersoriano/Azure-Sentinel/blob/javier-arm/Tools/ARM-Templates/DataConnectors/AzureSecurityCenter.json) | [![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2Fjaviersoriano%2FAzure-Sentinel%2Fjavier-arm%2FTools%2FARM-Templates%2FDataConnectors%2FAzureSecurityCenter.json) | +| [MCAS](https://github.com/javiersoriano/Azure-Sentinel/blob/javier-arm/Tools/ARM-Templates/DataConnectors/MCAS.json) | [![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2Fjaviersoriano%2FAzure-Sentinel%2Fjavier-arm%2FTools%2FARM-Templates%2FDataConnectors%2FMCAS.json) | +| [Microsoft Defender ATP](https://github.com/javiersoriano/Azure-Sentinel/blob/javier-arm/Tools/ARM-Templates/DataConnectors/MDATP.json) | [![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2Fjaviersoriano%2FAzure-Sentinel%2Fjavier-arm%2FTools%2FARM-Templates%2FDataConnectors%2FMDATP.json) |