Merge pull request #267427 from cwatson-cat/2-27-24-ama-dcr

JamesJBarnett · web-flow · commit 2be76e696f36 · 2024-02-27T11:35:36.000-07:00
Sentinel - data connectors upd ama DCR support
diff --git a/articles/sentinel/data-connectors/cisco-asa-ftd-via-ama.md b/articles/sentinel/data-connectors/cisco-asa-ftd-via-ama.md
@@ -17,7 +17,7 @@ The Cisco ASA firewall connector allows you to easily connect your Cisco ASA log
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com/) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-akamai-security-events-via-ama.md b/articles/sentinel/data-connectors/recommended-akamai-security-events-via-ama.md
@@ -17,7 +17,7 @@ Akamai Solution for Microsoft Sentinel provides the capability to ingest [Akamai
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (AkamaiSecurityEvents)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-aruba-clearpass-via-ama.md b/articles/sentinel/data-connectors/recommended-aruba-clearpass-via-ama.md
@@ -17,7 +17,7 @@ The [Aruba ClearPass](https://www.arubanetworks.com/products/security/network-ac
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (ArubaClearPass)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com/) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-broadcom-symantec-dlp-via-ama.md b/articles/sentinel/data-connectors/recommended-broadcom-symantec-dlp-via-ama.md
@@ -17,7 +17,7 @@ The [Broadcom Symantec Data Loss Prevention (DLP)](https://www.broadcom.com/prod
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (SymantecDLP)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** |[Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-cisco-secure-email-gateway-via-ama.md b/articles/sentinel/data-connectors/recommended-cisco-secure-email-gateway-via-ama.md
@@ -17,7 +17,7 @@ The [Cisco Secure Email Gateway (SEG)](https://www.cisco.com/c/en/us/products/se
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (CiscoSEG)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-claroty-via-ama.md b/articles/sentinel/data-connectors/recommended-claroty-via-ama.md
@@ -17,7 +17,7 @@ The [Claroty](https://claroty.com/) data connector provides the capability to in
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (Claroty)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-fireeye-network-security-nx-via-ama.md b/articles/sentinel/data-connectors/recommended-fireeye-network-security-nx-via-ama.md
@@ -17,7 +17,7 @@ The [FireEye Network Security (NX)](https://www.fireeye.com/products/network-sec
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (FireEyeNX)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-forcepoint-casb-via-ama.md b/articles/sentinel/data-connectors/recommended-forcepoint-casb-via-ama.md
@@ -17,7 +17,7 @@ The Forcepoint CASB (Cloud Access Security Broker) Connector allows you to autom
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (ForcepointCASB)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Community](https://github.com/Azure/Azure-Sentinel/issues) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-forcepoint-csg-via-ama.md b/articles/sentinel/data-connectors/recommended-forcepoint-csg-via-ama.md
@@ -17,7 +17,7 @@ Forcepoint Cloud Security Gateway is a converged cloud security service that pro
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (Forcepoint CSG)<br/> CommonSecurityLog (Forcepoint CSG)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** |[Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent)|
 | **Supported by** | [Community](https://github.com/Azure/Azure-Sentinel/issues) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-forcepoint-ngfw-via-ama.md b/articles/sentinel/data-connectors/recommended-forcepoint-ngfw-via-ama.md
@@ -17,7 +17,7 @@ The Forcepoint NGFW (Next Generation Firewall) connector allows you to automatic
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (ForcePointNGFW)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Community](https://github.com/Azure/Azure-Sentinel/issues) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-illumio-core-via-ama.md b/articles/sentinel/data-connectors/recommended-illumio-core-via-ama.md
@@ -17,7 +17,7 @@ The [Illumio Core](https://www.illumio.com/products/) data connector provides th
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (IllumioCore)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-kaspersky-security-center-via-ama.md b/articles/sentinel/data-connectors/recommended-kaspersky-security-center-via-ama.md
@@ -17,7 +17,7 @@ The [Kaspersky Security Center](https://support.kaspersky.com/KSC/13/en-US/3396.
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (KasperskySC)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-netwrix-auditor-via-ama.md b/articles/sentinel/data-connectors/recommended-netwrix-auditor-via-ama.md
@@ -19,7 +19,7 @@ Netwrix Auditor data connector provides the capability to ingest [Netwrix Audito
 | **Kusto function alias** | NetwrixAuditor |
 | **Kusto function url** | https://aka.ms/sentinel-netwrixauditor-parser |
 | **Log Analytics table(s)** | CommonSecurityLog<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-nozomi-networks-n2os-via-ama.md b/articles/sentinel/data-connectors/recommended-nozomi-networks-n2os-via-ama.md
@@ -17,7 +17,7 @@ The [Nozomi Networks](https://www.nozominetworks.com/) data connector provides t
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (NozomiNetworks)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-ossec-via-ama.md b/articles/sentinel/data-connectors/recommended-ossec-via-ama.md
@@ -17,7 +17,7 @@ OSSEC data connector provides the capability to ingest [OSSEC](https://www.ossec
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (OSSEC)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com/) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-palo-alto-networks-cortex-data-lake-cdl-via-ama.md b/articles/sentinel/data-connectors/recommended-palo-alto-networks-cortex-data-lake-cdl-via-ama.md
@@ -17,7 +17,7 @@ The [Palo Alto Networks CDL](https://www.paloaltonetworks.com/cortex/cortex-data
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (PaloAltoNetworksCDL)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** |[Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-pingfederate-via-ama.md b/articles/sentinel/data-connectors/recommended-pingfederate-via-ama.md
@@ -17,7 +17,7 @@ The [PingFederate](https://www.pingidentity.com/en/software/pingfederate.html) d
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (PingFederate)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** |[Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent)|
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
diff --git a/articles/sentinel/data-connectors/recommended-trend-micro-apex-one-via-ama.md b/articles/sentinel/data-connectors/recommended-trend-micro-apex-one-via-ama.md
@@ -17,7 +17,7 @@ The [Trend Micro Apex One](https://www.trendmicro.com/en_us/business/products/us
 | Connector attribute | Description |
 | --- | --- |
 | **Log Analytics table(s)** | CommonSecurityLog (TrendMicroApexOne)<br/> |
-| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
+| **Data collection rules support** | [Azure Monitor Agent DCR](/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent) |
 | **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
 
 ## Query samples
