This Azure Sentinel Architecture Diagram is used to assist you in making important decisions about the architecture of your Microsoft Sentinel workspace. Microsoft Sentinel can run on workspaces in the majority, but not all, of the Log Analytics regions supported in GA. It may take time for newly supported Log Analytics regions to integrate the Microsoft Sentinel service. Incidents, bookmarks, and analytics rules generated by Microsoft Sentinel may contain some customer data sourced from the customer's Log Analytics workspaces. The Azure Sentinel Architecture Diagram below depicts a full decision tree flow chart to assist you in understanding how to best design your workspace. Try Azure Sentinel Architecture Diagram on EdrawMax to optimize your workspace design!
