Forum Discussion
Adding On-Prem Domain Controller Event Logs
We've added several sources (ASA, syslog, multiple Azure sources) .. what is the best way to get our on-prem domain controllers to feed into Sentinel?
unixdespair If you've got an Azure Security Centre standard subscription, you can install the Microsoft Monitoring Agent and link it to ASC. This will collect logs from the machine. You can then connect ASC to Sentinel.