Blog Post

Microsoft Sentinel Blog
5 MIN READ

Split Microsoft Sentinel Tables with Multi-Destination Data Collection Rules

Matt_Lowe's avatar
Matt_Lowe
Icon for Microsoft rankMicrosoft
Jun 29, 2023
Thank you to my colleague Maria de Sousa-Valadas Castano, Adi Biran, and the Azure Monitor team for assisting in writing this content and demos.   Looking to better manage where logs go when they...
Updated Jun 30, 2023
Version 2.0
best practices
Data Collection
Data Retention
mikhailf's avatar
mikhailf
Steel Contributor
May 28, 2024

Grate article. Thank you. 

 

If we want to split logs from Syslog table to another Custom-Table1. Should the Custom-Table1 have the same schema as Syslog?

Is it possible to split logs from Syslog to 2 or more tables?