SecurityInsight settings · Settings > Sign-in & Azure resources
Data collection rules resource group
| Key | SI_DcrResourceGroup |
|---|---|
| Where | Settings > Sign-in & Azure resources > Log Analytics |
| Type | Text |
| Default | Not set: Risk Analysis uses DcrResourceGroup; setup uses rg-securityinsight |
| Edition | Community |
What it does
Resource group holding the data collection rules (and, by default, the endpoint) used to send data to Log Analytics.
When set
Tells engines where to find and create rules. A wrong group creates duplicate rules or refuses to post. Run health rows are not sent without it.
When blank or default
Left blank, the default applies: Not set: Risk Analysis uses DcrResourceGroup; setup uses rg-securityinsight
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Set at install; change only if you move the rules.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack