Azure Sentinel (now Microsoft Sentinel) is enabled per Log Analytics workspace . Each workspace opera tes independently; analytics rules in one Sentinel workspace cannot directly query another workspace’s data unless Sentinel is also enabled there.

To use scheduled analytics rules against data in the LogsWest workspace, you must first add Microsoft Sentinel to that workspace . After Sentinel is enabled on LogsWest, you can create or connect analytics rules that query its data. You cannot simply modify workspace settings or connect data across regions without enabling Sentinel for the target workspace.