SecurityInsight settings · Settings > Sign-in & Azure resources
Workspace resource group
| Key | SI_WorkspaceResourceGroup |
|---|---|
| Where | Settings > Sign-in & Azure resources > Log Analytics |
| Type | Text |
| Default | Taken from the workspace resource id; otherwise 'rg-securityinsight' |
| Edition | Community |
What it does
Names the Azure resource group of the Log Analytics workspace the engines write to.
When set
The workspace is looked up in this resource group (setup creates it there). A collection run creates nothing: a workspace it does not find is said in one line, and the send fails.
When blank or default
Left blank, the default applies: Taken from the workspace resource id; otherwise 'rg-securityinsight'
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Set once during setup to match your workspace; change only if the workspace moves.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack