Is it necessary to pull logs from at least one VM to be able to pull Azure AD logs?


the article on log integration azure ad (https://docs.microsoft.com/en-us/azure/security/security-azure-log-integration-ad) says "you must have completed steps in started article (https://docs.microsoft.com/en-us/azure/security/security-azure-log-integration-get-started)". started article describes installing azure log integration and setting collect logs vm. logically vm-related steps should not necessary not 100% clear 2 articles if skipping ok if want collect logs azure ad. please can confirm?

hi simon -

good point!

let review statement , make sure more clear on absolute requirements are. you're correct, if don't want collect vm events, don't need collect them.

thanks!

tom


learn more azure security @ azure security team blog



Microsoft Azure  >  Azure Log Integration



Comments

Popular posts from this blog

Azure DocumentDB Owner resource does not exist

BizTalk Server 2013 Azure VM Log Shipping and HA for hosts

How to Share webservice object to all user