Creating Workspace

You need to create a workspace on Azure Sentinel console for Azure Sentinel integration. After creating a workspace, you can use the workspace details such as workspace ID and primary key during integration.

Perform the following steps to create Workspace:

  1. Login to Azure portal (https://portal.azure.com/) and search Log Analytics workspaces in the search bar.
    azureimage_1.jpg
  2. Click Add to create a new Log Analytics workspace.
    azure_image2_new.png
  3. Provide the details such as Subscription, Resource group, Instance Details and so on. Click Review+Create to create the workspace.
    azureimage_3.jpg
  4. Go to Log Analytics workspaces and search for your workspace.
    azureimage_4.jpg
    Click the workspace to open.
  5. Go to Agents Management and locate the Workspace ID and Primary key to be used for Azure Sentinel Integration with Qualys.azure_image_5_new.png

Next Step

Configure integration with Qualys using Available APIs