Chapter 2: Azure Monitor – Introduction to Log Analytics
In this chapter, we will explore the Azure Monitor Log Analytics platform, which is used to store all the log data that will be analyzed by Microsoft Sentinel. This is the first component that needs to be designed and configured when implementing Microsoft Sentinel and will require some ongoing maintenance to configure the data storage options and control the costs associated with the solution.
This chapter will also explain how to create a new Log Analytics Workspace using the Azure portal, PowerShell, and the CLI. Once a workspace has been created, we will learn how to attach various resources to it so that information can be gathered, and we will explore the other navigation menu options. ...
Get Microsoft Sentinel in Action - Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
