Skip to content

Commit 4ae033c

Browse files
Merge pull request #285500 from yelevin/patch-2
Update api-dcr-reference.md
2 parents 4616e32 + d762768 commit 4ae033c

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

articles/sentinel/api-dcr-reference.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,14 +29,16 @@ PUT https://management.azure.com/subscriptions/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeee
2929

3030
#### Syslog/CEF DCR creation request body
3131

32-
The following is an example of a DCR creation request. For each stream—you can have several in one DCR—change the value of the `"Streams"` field according to the source of the messages you want to ingest:
32+
The following is an example of a DCR creation request. For each data source stream—you can have several in one DCR—add a new subsection under `"syslog"` in the `"dataSources"` section and set the value of the `"streams"` field according to the source of the messages you want to ingest:
3333

34-
| Log source | `"Streams"` field value |
34+
| Log source | `"streams"` field value |
3535
| --- | --- |
3636
| **Syslog** | `"Microsoft-Syslog"` |
3737
| **CEF** | `"Microsoft-CommonSecurityLog"` |
3838
| **Cisco ASA** | `"Microsoft-CiscoAsa"` |
3939

40+
See the example of multiple streams sections in the following code sample:
41+
4042
```json
4143
{
4244
"location": "centralus",

0 commit comments

Comments
 (0)