The next step is to create a consumer group within the event hub you set up earlier.
To create a consumer group:
- Go to the Event Hubs namespace page.
This will be listed under All resources on your Azure Portal dashboard. - Go to the event hub.
This will be at the bottom of the Event Hubs namespace page. - Click Consumer groups in the side navigation pane.
- Click +Consumer group.
- Enter a unique name for the consumer group.
This can include alphanumeric characters, underscores, hyphens, and periods. The name must start and end with a letter or number.
Note: if you have previously configured a consumer group for Microsoft Entra ID, you will need to use a different name for your Microsoft 365 Defender consumer group. - Click Create.
- Send the consumer group name to SOC.