Forum Discussion
securityninja
Jan 08, 2020Copper Contributor
Controlling visability and ingestion of custom logs
Hi, I've just been asked to look at the MS LA/Sentinel stack. I have a decent background in another popular log management SIEM that begins with S. Enjoying having a look through and the differen...
Nicholas DiCola (SECURITY JEDI)
Jan 09, 2020Former Employee
Hi
You are correct, there is no way to "target" custom log settings to specific machines. if you say collect d:\logs\YYYYMMDD.txt it will attempt on all machines. If you have a custom application that is writing these logs, one option would be to update the application to write directly to log analytics API then you could write to different custom logs.
Correct on permissions too. you can only set permissions that apply to all custom logs.