Forum Discussion
Syslog notifications - duplicated by Sentinel?
If we are using Sentinel with the M365 Defender connector, is there any reason to configure the Syslog notifications for MDI, using these instructions Microsoft Defender for Identity notifications in Microsoft 365 Defender - Microsoft Defender for Identity | Microsoft Learn
- Martin_Schvartzman
Microsoft
Currently, the only way to forward MDI health alerts is using the syslog notifications.
Besides that, you could use the Sentinel connector in M365 defender only.
