Forum Discussion
Log Analytics Gateway
Hi folks Some clarification needed please. I want to ingest data from my on-prem Windows computers to Azure Sentinel. I understand that I can use a Log Analytics Gateway (LAG) on-prem to ...
1. Install the Gateway
"On the Port and proxy address page:
a. Enter the TCP port number to be used for the gateway. Setup uses this port number to configure an inbound rule on Windows Firewall. The default value is 8080."
https://techcommunity.microsoft.com/t5/azure-sentinel/log-analytics-gateway/m-p/2280290
2. Configure Agents with Proxy set to the Gateway name and its port
UI: "If the computer needs to communicate through a proxy server to the Log Analytics service, click Advanced and provide the URL and port number of the proxy server. "
PS: "OPINSIGHTS_PROXY_URL URI for the proxy to use"
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows#install-agent-using-command-line
"On the Port and proxy address page:
a. Enter the TCP port number to be used for the gateway. Setup uses this port number to configure an inbound rule on Windows Firewall. The default value is 8080."
https://techcommunity.microsoft.com/t5/azure-sentinel/log-analytics-gateway/m-p/2280290
2. Configure Agents with Proxy set to the Gateway name and its port
UI: "If the computer needs to communicate through a proxy server to the Log Analytics service, click Advanced and provide the URL and port number of the proxy server. "
PS: "OPINSIGHTS_PROXY_URL URI for the proxy to use"
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows#install-agent-using-command-line