Seeking Guidance on Cross-Tenant & Cross-Region Microsoft Sentinel Migration with DCRs and Connectors

Question

Seeking Guidance on Cross-Tenant & Cross-Region Microsoft Sentinel Migration with DCRs and Connectors

zake 20

Hi everyone,

I'm currently working on a migration plan for Microsoft Sentinel that involves moving from one Azure tenant to another, and from the Southeast Asia region to the Indonesia (Central) region. This is not an in-tenant or in-region move it's a full cross-tenant, cross-region migration.

The scope includes:

The Sentinel workspace itself
Associated Log Analytics workspace
Data Collection Rules (DCRs)
All data connectors (e.g., Azure AD, Office 365, third-party security tools)

Additionally, we’re migrating resources in batches within the source subscription , and we need to ensure that during the transition:

There’s no double logging (to avoid redundant data ingestion)

There’s no double cost (especially since billing will be split across tenants and regions)

Could anyone share Best practices for cross-tenant Sentinel migration? or Any real-world experience with similar migrations?

Any advice or references would be incredibly helpful as we finalize our approach.

Thanks in advance !

Suchitra Suregaunkar 340 Reputation points Microsoft External Staff Moderator

2025-08-26T05:36:32.3266667+00:00

Hello zake,

Thank you for posting your query on Microsoft Q&A portal.

If you're planning to move Microsoft Sentinel across tenants or regions, here are some helpful Migration and Modernization Program. It guides you through each step of the process, gives you tools to monitor your progress, and provides expert support for things like converting rules, setting up automation, and bringing in older data.

Plan your migration to Microsoft Sentinel
Reference: https://learn.microsoft.com/en-us/azure/sentinel/migration

Prepare for multiple workspaces and tenants in Microsoft Sentinel
https://learn.microsoft.com/en-us/azure/sentinel/prepare-multiple-workspaces

Best practices for Microsoft Sentinel
https://learn.microsoft.com/en-us/azure/sentinel/best-practices

Use Azure Lighthouse to help manage multiple Microsoft Sentinel instances in different tenants.

Reference: https://learn.microsoft.com/en-us/azure/lighthouse/how-to/onboard-customer?tabs=azure-portal

Please refer the above provided document links and if you need any further assistance, please feel free to reach out.

Thanks,

Suchitra.

Your answer

Suchitra Suregaunkar 340 Reputation points Microsoft External Staff Moderator

2025-08-26T05:36:32.3266667+00:00

Hello zake,

Thank you for posting your query on Microsoft Q&A portal.

If you're planning to move Microsoft Sentinel across tenants or regions, here are some helpful Migration and Modernization Program. It guides you through each step of the process, gives you tools to monitor your progress, and provides expert support for things like converting rules, setting up automation, and bringing in older data.

Plan your migration to Microsoft Sentinel
Reference: https://learn.microsoft.com/en-us/azure/sentinel/migration

Prepare for multiple workspaces and tenants in Microsoft Sentinel
https://learn.microsoft.com/en-us/azure/sentinel/prepare-multiple-workspaces

Best practices for Microsoft Sentinel
https://learn.microsoft.com/en-us/azure/sentinel/best-practices

Use Azure Lighthouse to help manage multiple Microsoft Sentinel instances in different tenants.

Reference: https://learn.microsoft.com/en-us/azure/lighthouse/how-to/onboard-customer?tabs=azure-portal

Please refer the above provided document links and if you need any further assistance, please feel free to reach out.

Thanks,

Suchitra.

Share via

Seeking Guidance on Cross-Tenant & Cross-Region Microsoft Sentinel Migration with DCRs and Connectors

Your answer