Is it necessary to pull logs from at least one VM to be able to pull Azure AD logs?
the article on log integration azure ad (https://docs.microsoft.com/en-us/azure/security/security-azure-log-integration-ad) says "you must have completed steps in started article (https://docs.microsoft.com/en-us/azure/security/security-azure-log-integration-get-started)". started article describes installing azure log integration and setting collect logs vm. logically vm-related steps should not necessary not 100% clear 2 articles if skipping ok if want collect logs azure ad. please can confirm?
hi simon -
good point!
let review statement , make sure more clear on absolute requirements are. you're correct, if don't want collect vm events, don't need collect them.
thanks!
tom
Microsoft Azure > Azure Log Integration
Comments
Post a Comment