Microsoft Sentinel
Cloud and workloads

Connect Azure Stack

In brief

Updated the page metadata, clarified that dashboards use data collected from Azure Stack Hub virtual machines, identified them as Microsoft Sentinel dashboards, and refined the screenshot description.

What Defender admins need to know

Administrators get clearer guidance when reviewing Azure Stack Hub monitoring documentation; no action is indicated.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

#Customer intent: As a security engineer, I want to connect Azure Stack Hub virtual machines to Microsoft Sentinel so that analysts can efficiently monitor and manage security threats across our hybrid cloud environment.

With Microsoft Sentinel, you can monitor your VMs running on Azure and Azure Stack Hub in one place. To on-board your Azure Stack machines to Microsoft Sentinel, you first need to add the virtual machine extension to your existing Azure Stack Hub virtual machines.

After you connect Azure Stack Hub machines, choose from a gallery of dashboards that surface insights based on data collected from your data. TheseAzure Stack Hub virtual machines. Microsoft Sentinel dashboards can be easily customized to your needs.

Add the virtual machine extension

  1. Select the Azure Monitor, Update, and Configuration Management extension and select Create. The Install extension configuration window opens.

    Screenshot of the Azure Stack Hub portal showing the Install extension settings for the Azure Monitor, Update, and Configuration Management extension.