Data Connector Health Monitoring on Microsoft Sentinel

This article explains how to monitor and alert on Microsoft Sentinel data connector health and log ingestion using the built-in Data collection health monitoring workbook (Overview, Anomalies, Agent info) and the SentinelHealth table (status changes and failure summaries). It provides KQL queries to detect failures and status transitions, and demonstrates custom alerting via Log Analytics alerts and a Logic App that posts anomaly summaries to Microsoft Teams, enabling proactive detection and response to ingestion issues.