Forum Discussion
Monitoring with Log Analytics & SNMP
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblogs.technet.microsoft.com%2Fmsoms%2F2016%2F09%2F21%2Fcollecting-snmp-data-with-operations-management-suite%2F&data=02%7C01%7CClive.Watson%40microsoft.com%7C16f94a30137f43e5478b08d70658230c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636984848748202498&sdata=SqdPC6X4EfDP%2F%2Bd%2FIJHI49a1fHS02tmvqcHuKKY3Hww%3D&reserved=0
Also linked from; https://techcommunity.microsoft.com/t5/azure-sentinel/azure-sentinel-syslog-cef-logstash-and-other-3rd-party/ba-p/803891
Thank you for answering.
So just to make it clear: The OMS Linux Agent is the same as when i'm talking of the "MMA Agent" or "Log Analyics Agent"?
Because i didn't use that before it would be very kind if you could answer some more questions:
- The MS Docs are pointing me to use linux (syslog). Do i have any option to do this without a linux machine?
- The main process is e.g.: Network Component (e.g. Switch or a UPS) > SNMP Traps fetched by Linux > the servers log agent sends these to Log Analytics. Is that right?
- Because i'm totally unexperienced in linux (i'm going to ask a colleague later): How do i know which facility name i have to add in my Log Analytics Workspace to be fetched?
Thank you very much. 🙂
Yes they are the same (there have been some branding changes over the past few years) but essentially we have the MMA (SCOM agent, ASC agent, OMS Agent, Log Analytics Agent etc...)
1. There are Syslog services that run on Windows - but I don't have one to recommend. Please search on "syslog servers for windows server", mainly (from my experience) people use the native Linux capability.
2. The flow is the SNMP trap to the Syslog server (see #1) then onto Log Analytics
3. I think that depends on the product you use (see #1)
