SOLVED

DNS Data Connector not receiving logs via AMA?

Copper Contributor

We have moved our domain controllers from logging via MMA as this was intermittent.  We have them logging reliably via ARC / AMA but now we have lost the DNSEvents.  Please can you confirm if AMA can be set to log DNS Events also?  If not, why not and when do you hope to resolve this omission considering the timeframe you are mandating the removal of MMA / OMA ingestion?

1 Reply
best response confirmed by markscottuk (Copper Contributor)
Solution

@markscottuk 

DNS is a supported feature (Preview) https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview#supported-services-and-f...


Did you enable the DNS Connector in Sentinel?

Clive_Watson_0-1661525650143.png

 



1 best response

Accepted Solutions
best response confirmed by markscottuk (Copper Contributor)