Configuring a Log Analytics agent for Azure VMs extension deployment
Similar to configuring the level of data that's collected by Log Analytics Workspace, you can configure data collection tiers at the Azure Subscription level, and it will affect the number and type of events stored for the Azure Subscription as well. The data that's collected by Microsoft Defender for Cloud is stored in Log Analytics Workspace so that you can search for, audit, and investigate stored events.
Getting ready
Open a web browser and navigate to https://portal.azure.com.
How to do it…
To configure the Log Analytics Agent extension's deployment settings, complete the following steps:
- In the Azure portal, open Microsoft Defender for Cloud. You can open Microsoft Defender for Cloud in multiple ways: by typing Microsoft Defender for Cloud in a search bar, clicking on a favorite link, or by going to All Services.
- On the Microsoft Defender for Cloud – Overview...