Blog Post

Microsoft Defender for Cloud Blog
4 MIN READ

Protect non-Azure resources using Azure Arc and Microsoft Defender for Cloud

Lior Arviv's avatar
Lior Arviv
Icon for Microsoft rankMicrosoft
Apr 18, 2021
Microsoft Defender for Cloud monitors the security posture of your Azure resources. Today, organizations are extending their hybrid footprint and using additional public clouds. Microsoft Defender fo...
Updated Nov 02, 2021
Version 2.0
sudeepb2021's avatar
sudeepb2021
Copper Contributor
Jul 17, 2021

So if I have 100s of site and each site have 40 servers, lets say I have 400 servers in total and approx. 4TB of log/metrics from each site(total over 100 sites),

then is there a mechanism to consolidate the logs/metrics to a site specific central agent/server (one option I observe was SCOM server but it could be very costly).

Looks like the steps involve installing azcmagent, is that same as Azure Monitoring Agent (AMA) ?  whats the difference ? any site explaining the differences ?

Also if there is a way for this azcmagent to consolidate the metrics for all servers in a site(40 servers) before sending to Azure (using cost effective mechanism and not having a SCOM server entirely) ?