Automatic uploads

As mentioned previously, one benefit of MCAS is the ability to automate the uploading of log files. You can use either container or virtual appliance (deprecated) as your deployment mode.

Container involves running a Docker image with Ubuntu or RHEL as your OS and can handle up to 50 GB per hour.

Virtual appliance uses Hyper-V, but since this is a deprecated and less flexible method, I'll use the container option for the following steps.

To begin setting up automatic uploading, we'll create a data source, and then a log collector in the CAS portal settings. It's recommended you create a data source for each network device to facilitate better monitoring and investigation. The following steps show how to create a data source ...

Get Microsoft 365 Mobility and Security - Exam Guide MS-101 now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.