Legacy Data Connectors being updated to use Content Hub

Question

Legacy Data Connectors being updated to use Content Hub

sam.holmes 5

We've inherited a Sentinel setup using Data Connectors not connected to the content hub packages.

Examples are Azure KeyVault, XDR, Entra etc.

If we were to install these content hub packages to utilise the content provided what happens to the existing data connectors? The only option I'm provided with is "Install Solution".

I've read the documentation here https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/sentinel/sentinel-content-centralize.

Where it states "This change does not affect active or custom items (created from templates or otherwise). Specifically, this change doesn't affect the following items:

Data connectors with Status = Connected."

Can someone give a definitive answer, if I install the solution from Content Hub will this require any reconfiguration of the existing data connector or will it continue to function as normal.

Navya 16,290 Reputation points Microsoft External Staff

2025-03-03T02:29:47.39+00:00

Hi @sam.holmes

Following up to see if the below answer was helpful. Please remember to "Accept Answer" if answer helped you. This will help us as well as others in the community who might be researching similar questions. if you have any further query do let us know.
SrideviM 755 Reputation points Microsoft External Staff

2025-03-04T10:30:27.3266667+00:00

Hello @sam.holmes,

Following up to see if the below answer was helpful. Please remember to "Accept Answer" if answer helped you. If you have any further query do let us know.

1 answer

Your answer

Navya 16,290 Reputation points Microsoft External Staff

2025-03-03T02:29:47.39+00:00

Hi @sam.holmes

Following up to see if the below answer was helpful. Please remember to "Accept Answer" if answer helped you. This will help us as well as others in the community who might be researching similar questions. if you have any further query do let us know.
SrideviM 755 Reputation points Microsoft External Staff

2025-03-04T10:30:27.3266667+00:00

Hello @sam.holmes,

Following up to see if the below answer was helpful. Please remember to "Accept Answer" if answer helped you. If you have any further query do let us know.

Answer 1

Hi @sam.holmes

Thank you for posting this in Microsoft Q&A.

I understand your query regarding the impact of installing Content Hub packages on existing data connectors.

If you install a solution from the Microsoft Sentinel Content Hub, it will not affect existing data connectors that are already connected. The documentation explicitly states that active or custom items, including data connectors with a status of "Connected," will remain unchanged.

Installing the solution will simply add additional content and capabilities (such as workbooks, analytics rules, and hunting queries) to your Microsoft Sentinel setup without requiring reconfiguration of the existing connected data connectors.

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

Legacy Data Connectors being updated to use Content Hub

1 answer

Your answer