We are in the process of deploying Microsoft Sentinel and there is a requirement of sending logs to Microsoft Sentinel Securely without traversing public internet (traffic must always pass via Azure backbone). To meet this we have deployed Site-to-site VPN along with Azure ARC and Azure monitor Private Endpoints to use private link.

However for one such deployment the syslog collectors are not hosted in on-premises, instead in an another azure subscription, What we need to know is what will be the best possible way to connect two azure Vnets (one where log collectors are hosted and another one where the sentinel instance is deployed) to send the logs securely and also not traversing public internet instead traffic must remain in azure backbone. I explored Vnet peering with private link connection but could not find any reference articles for this. Any help and suggestion will be highly appreciated.

​We are in the process of deploying Microsoft Sentinel and there is a requirement of sending logs to Microsoft Sentinel Securely without traversing public internet (traffic must always pass via Azure backbone). To meet this we have deployed Site-to-site VPN along with Azure ARC and Azure monitor Private Endpoints to use private link.However for one such deployment the syslog collectors are not hosted in on-premises, instead in an another azure subscription, What we need to know is what will be the best possible way to connect two azure Vnets (one where log collectors are hosted and another one where the sentinel instance is deployed) to send the logs securely and also not traversing public internet instead traffic must remain in azure backbone. I explored Vnet peering with private link connection but could not find any reference articles for this. Any help and suggestion will be highly appreciated.  Read More

​