You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 17, 2024. It is now read-only.
Microsoft Sentinel relies on api.loganalytics.io, which is the documented API endpoint for Azure's Log Analytics. An example of issued request is the following one:
POST https://api.loganalytics.io/v1/subscriptions/REDACTED/resourceGroups/REDACTED/providers/Microsoft.OperationalInsights/workspaces/REDACTED/metadata?select=categories,solutions,tables,workspaces
The api.loganalytics.io domain is however indirectly blocked as it is a CNAME for api.monitor.azure.com which is on the block-list.
Microsoft Sentinel relies on
api.loganalytics.io
, which is the documented API endpoint for Azure's Log Analytics. An example of issued request is the following one:The
api.loganalytics.io
domain is however indirectly blocked as it is a CNAME forapi.monitor.azure.com
which is on the block-list.This causes Azure to break.
![image](https://private-user-images.githubusercontent.com/46688461/298047004-db83f8c8-d9bc-4298-99f0-e3f9c6464a0b.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.ho7WeDb75-es92KDWpEgZUSEmocKEphcyOeb6xc6Ssw)
While I have added an exception for it, it might be worth considering whether the
api.monitor.azure.com
block is intentional.The text was updated successfully, but these errors were encountered: