Welcome To Ask or Share your Answers For Others

artificial intelligence - Can Azure Sentinel aggregates data from devices running on-premises or in any cloud?

asked Feb 19, 2021 in Technique[技术] by 深蓝 (71.8m points)

Can Azure Sentinel aggregates data from devices running on-premises?

与恶龙缠斗过久,自身亦成为恶龙；凝视深渊过久,深渊将回以凝视…

992 views

Welcome To Ask or Share your Answers For Others

1 Answer

answered Feb 19, 2021 by 深蓝 (71.8m points)

Yes, check out the microsoft documentation: https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources

Default connectors can already ingest data from Windows Event logs and firewalls
External API's for Okta, Barracuda WAF, etc are there as well
Syslog data collected by an agent

Most/all of this can be done with the Log Analytics Agent

与恶龙缠斗过久,自身亦成为恶龙；凝视深渊过久,深渊将回以凝视…

...