Skip to content

Commit 470f2f0

Browse files
committed
Updating syslog section with AMA
1 parent a35c374 commit 470f2f0

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/sentinel/connect-data-sources.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Microsoft Sentinel data connectors
33
description: Learn about supported data connectors, like Microsoft 365 Defender (formerly Microsoft Threat Protection), Microsoft 365 and Office 365, Azure AD, ATP, and Defender for Cloud Apps to Microsoft Sentinel.
44
author: yelevin
55
ms.topic: conceptual
6-
ms.date: 07/14/2022
6+
ms.date: 02/15/2023
77
ms.author: yelevin
88
---
99

@@ -70,7 +70,7 @@ Learn which firewalls, proxies, and endpoints connect to Microsoft Sentinel thro
7070

7171
### Syslog
7272

73-
You can stream events from Linux-based, Syslog-supporting devices into Microsoft Sentinel using the Log Analytics agent for Linux, formerly named the OMS agent. Depending on the device type, the agent is installed either directly on the device, or on a dedicated Linux-based log forwarder. The Log Analytics agent receives events from the Syslog daemon over UDP. If a Linux machine is expected to collect a high volume of Syslog events, it sends events over TCP from the Syslog daemon to the agent, and from there to Log Analytics. Learn how to [connect Syslog-based appliances to Microsoft Sentinel](connect-syslog.md).
73+
You can stream events from Linux-based, Syslog-supporting devices into Microsoft Sentinel using the [Azure Monitor Agent (AMA)](forward-syslog-monitor-agent.md). Depending on the device type, the agent is installed either directly on the device, or on a dedicated Linux-based log forwarder. The AMA receives events from the Syslog daemon over UDP. If a Linux machine is expected to collect a high volume of Syslog events, it sends events over TCP from the Syslog daemon to the agent, and from there to Log Analytics.
7474

7575
Here is a simple flow that shows how Microsoft Sentinel streams Syslog data.
7676

0 commit comments

Comments
 (0)