Forum Discussion
Adding events from (on-prem) Windows Servers
Me again...
As far as I can tell, there is no (default) connector to pull in events from (on-premises) Windows Servers. However, Log Analytics can be configured to pull them in using the Window...
Yes, that's what worked for me. I actually added Sentinel to an existing workspace that had log analytics from on-premise servers, but same idea. Everything then just showed up in Sentinel.