Sentinel Agent not forwarding logs.

%3CLINGO-SUB%20id%3D%22lingo-sub-2677625%22%20slang%3D%22en-US%22%3ESentinel%20Agent%20not%20forwarding%20logs.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2677625%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHi%20All%2C%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%3EStill%20new%20to%20Azure%20sentinel%2C%20I%20tried%20the%20install%20windows%20agent%20%26amp%3B%20linux%20agent%20on%20two%20vm.%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%3EWindows%20agent%20try%20to%20collect%20windows%20security%20event%20logs.%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3ELinux%20agent%20was%20suppose%20to%20be%20cef%20forwarder%20to%20collect%20logs%20fortinet%20firewall.%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%3EBoth%20agents%20are%20reporting%20in%20the%20workspace.%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%3EBut%20still%20havent%20received%20any%20logs.%20Please%20help%20guide%20me%20on%20this.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2702590%22%20slang%3D%22en-US%22%3ERe%3A%20Sentinel%20Agent%20not%20forwarding%20logs.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2702590%22%20slang%3D%22en-US%22%3EHave%20you%20followed%20the%20two%20guides%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fagents%2Fagent-windows-troubleshoot%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fagents%2Fagent-windows-troubleshoot%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fagents%2Fagent-linux-troubleshoot%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fagents%2Fagent-linux-troubleshoot%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi All,

Still new to Azure sentinel, I tried the install windows agent & linux agent on two vm.

Windows agent try to collect windows security event logs.
Linux agent was suppose to be cef forwarder to collect logs fortinet firewall.

Both agents are reporting in the workspace.

But still havent received any logs. Please help guide me on this.

1 Reply