Security Events via DCR or AMA
having a bit of confusion , like there are two options in Azure to collect Security Events
1. Log Analytics Workspace blade –> agents –> Create DCR –> Add machines to DCR
2. Via Content hub solution “Win Secuirty Events via AMA”
log level selection are a bit different in both
having a bit of confusion , like there are two options in Azure to collect Security Events 1. Log Analytics Workspace blade –> agents –> Create DCR –> Add machines to DCR2. Via Content hub solution “Win Secuirty Events via AMA”log level selection are a bit different in both Read More
