Forum Discussion

stuart355's avatar
stuart355
Copper Contributor
Jan 24, 2020

Log windows security event to Azure

Hi

Can anyone help me with this please

I know how to log application and System but not sure on how to log security

 

  • Histuart355 

    This is not possible trough Log Management feature for Security event log. Due to the nature of the logs (high velocity) you have to use either Azure Security Center that enables the Security solution which gathers those logs. Keep in mind that ASC just uses Log Analytics as platform and because of that there is separate pricing that occurs when you enable that.

  • Hi stuart355 

     

    Windows Security Events configuration done on ASC.  Below is the path

     

    ASC->Pricing and settings -> Select subscription->Data Collection-> Windows Security Events

     

    I hope this answered your ask.

  • Histuart355 

    This is not possible trough Log Management feature for Security event log. Due to the nature of the logs (high velocity) you have to use either Azure Security Center that enables the Security solution which gathers those logs. Keep in mind that ASC just uses Log Analytics as platform and because of that there is separate pricing that occurs when you enable that.

Resources