To trim the MMA log collection

%3CLINGO-SUB%20id%3D%22lingo-sub-2659570%22%20slang%3D%22en-US%22%3ETo%20trim%20the%20MMA%20log%20collection%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2659570%22%20slang%3D%22en-US%22%3E%3CP%3E%3CEM%3EHi%20team%20I'm%20looking%20out%20to%20trim%20by%20data%20collection%20through%20an%20MMA%20agent%20is%20that%20possible%20...How%20can%20I%20restrict%20the%20Log%20analytic%20agent%20only%20to%20pull%20a%20certain%20level%20of%20logs%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2659961%22%20slang%3D%22en-US%22%3ERe%3A%20To%20trim%20the%20MMA%20log%20collection%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2659961%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F567236%22%20target%3D%22_blank%22%3E%40Nayan007%3C%2FA%3E%26nbsp%3BIn%20Azure%20Sentinel%2C%20select%20%3CSTRONG%3ESettings%3C%2FSTRONG%3E%20from%20the%20navigation%20menu%20and%20then%20select%20%3CSTRONG%3EWorkspace%20settings%3C%2FSTRONG%3E%20in%20the%20header%20bar.%26nbsp%3B%20This%20will%20take%20you%20to%20the%20Log%20Analytics%20page.%26nbsp%3B%20In%20that%20navigation%20menu%2C%20select%20%3CSTRONG%3EAgents%20configuration%3C%2FSTRONG%3E.%26nbsp%3B%20This%20will%20allow%20you%20to%20select%20which%20logs%20and%20what%20levels%20to%20ingest.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMay%20also%20be%20worthwhile%20to%20take%20a%20look%20at%20the%20new%20Azure%20Monitor%20Agent%20as%20it%20will%20allow%20for%20even%20better%20filtering%20but%20may%20not%20yet%20fit%20your%20needs.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fagents%2Fazure-monitor-agent-overview%3Ftabs%3DPowerShellWindows%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Monitor%20agent%20overview%20-%20Azure%20Monitor%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi team I'm looking out to trim by data collection through an MMA agent is that possible ...How can I restrict the Log analytic agent only to pull a certain level of logs 

1 Reply

@Nayan007 In Azure Sentinel, select Settings from the navigation menu and then select Workspace settings in the header bar.  This will take you to the Log Analytics page.  In that navigation menu, select Agents configuration.  This will allow you to select which logs and what levels to ingest.

 

May also be worthwhile to take a look at the new Azure Monitor Agent as it will allow for even better filtering but may not yet fit your needs. Azure Monitor agent overview - Azure Monitor | Microsoft Docs