Forum Discussion

Ousi12's avatar
Ousi12
Copper Contributor
May 26, 2020

Facility number 13 (log audit)

Hi All ,    I have configured and install Linux agent to receive syslog from an appliance that send log audit which is facility 13. the configuration file etc/rsyslog.d$ cat 95-omsagent.conf doesn...
data collection
Dev_Choudhary's avatar
Dev_Choudhary
Brass Contributor
May 26, 2020

Hi Ousi12 

 

You can write logs to a particular log file by defining in rsyslog.conf file and than you can define the path on Custom logs option under Sentinel advanced setting

Azure Sentinel workspaces --> Azure Sentinel | Settings --> Sentinel -->Advanced settings