Skip to content

Commit 1f5444b

Browse files
committed
remove tabbed section
1 parent aabcd83 commit 1f5444b

File tree

1 file changed

+2
-15
lines changed

1 file changed

+2
-15
lines changed

articles/sentinel/connect-cef-syslog-ama.md

Lines changed: 2 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -103,25 +103,12 @@ The setup process for the CEF via AMA connector has two parts:
103103
104104
---
105105
106-
107-
108106
### Install the AMA and create a Data Collection Rule (DCR)
109107
110-
# [Syslog](#tab/syslog)
111-
112108
You can perform this step in one of two ways:
113-
- Deploy and configure the **Syslog via AMA** data connector in the [Microsoft Sentinel portal](?tabs=syslog%2Cportal#install-the-ama-and-create-a-data-collection-rule-dcr). With this setup, you can create, manage, and delete DCRs per workspace. The AMA will be installed automatically on the VMs you select in the connector configuration.
109+
- Deploy and configure the **Syslog via AMA** or **Common Event Format (CEF) via AMA** data connector in the Microsoft Sentinel portal. With this setup, you can create, manage, and delete DCRs per workspace. The AMA will be installed automatically on the VMs you select in the connector configuration.
114110
**—OR—**
115-
- Send HTTP requests to the [Logs Ingestion API](?tabs=syslog%2Capi#install-the-ama-and-create-a-data-collection-rule-dcr). With this setup, you can create, manage, and delete DCRs. This option is more flexible than the portal. For example, with the API, you can filter by specific log levels, where with the UI, you can only select a minimum log level. The downside is that you have to manually install the Azure Monitor Agent on the log forwarder before creating a DCR.
116-
117-
# [CEF](#tab/cef)
118-
119-
You can perform this step in one of two ways:
120-
- Deploy and configure the **Common Event Format (CEF) via AMA** data connector in the [Microsoft Sentinel portal](?tabs=cef%2Cportal#install-the-ama-and-create-a-data-collection-rule-dcr). With this setup, you can create, manage, and delete DCRs per workspace. The AMA will be installed automatically on the VMs you select in the connector configuration.
121-
**—OR—**
122-
- Send HTTP requests to the [Logs Ingestion API](?tabs=cef%2Capi#install-the-ama-and-create-a-data-collection-rule-dcr). With this setup, you can create, manage, and delete DCRs. This option is more flexible than the portal. For example, with the API, you can filter by specific log levels, where with the UI, you can only select a minimum log level. The downside is that you have to manually install the Azure Monitor Agent on the log forwarder before creating a DCR.
123-
124-
---
111+
- Send HTTP requests to the Logs Ingestion API. With this setup, you can create, manage, and delete DCRs. This option is more flexible than the portal. For example, with the API, you can filter by specific log levels, where with the UI, you can only select a minimum log level. The downside is that you have to manually install the Azure Monitor Agent on the log forwarder before creating a DCR.
125112
126113
Select the appropriate tab below to see the instructions for each way.
127114

0 commit comments

Comments
 (0)