You have a custom analytics rule to detect threats in Azure Sentinel.

Microsoft SC-200 Question Answer

You discover that the analytics rule stopped running. The rule was disabled, and the rule name has a prefix of AUTO DISABLED.

What is a possible cause of the issue?

There are connectivity issues between the data sources and Log Analytics.

The number of alerts exceeded 10,000 within two minutes.

The rule query takes too long to run and times out.

Permissions to one of the data sources of the rule query were modified.

SC-200 PDF/Engine

Get 60% Discount on All Products, Use Coupon: "8w52ceb345"