Hi,
so, aiming to replace ISA/TMG with Application Proxy for a variety of use case scenarios, the main question that is arising relates to logging.
are application proxy logs automatically available via OMS as they are part of Azure Active Directory authentication?
what about apps with no authentication?
the key information is the source IP, username, application(destination), which is available with the CSV log file download from application proxy, but the UI doesnt provide any information or automation around generating the log file, or connecting to the live data stream.
the big goal being intrusion detection, identification, and tracking.
is OMS the product to use for this?
what if the customer wished to use splunk or some other third party option, how do we connect to/parse the logs in that instance?
cheers
Pete
