Forum Discussion
jt-jt
Mar 04, 2022Copper Contributor
log via syslog server agent to Azure Sentinel (list of IPs?) & dual agent to two Log Analytics space
Hi, I am currently looking at setting up something like this: Security devices > syslog server > Microsoft Sentinel In order to tie down/restrict somewhat the access this syslog server has, is the...
GaryBushey
Mar 04, 2022Bronze Contributor
jt-jt Stealing a post that CliveWatson wrote in 2020 since syslog currently uses the MMA:
The MMA is owned by the Azure Monitor Team (as is "Log Analytics" a.k.a Azure Monitor Logs), so the docs are under their name not Azure Sentinel: https://docs.microsoft.com/en-us/azure/azure-monitor/app/ip-addresses