|
1 | 1 | ---
|
2 |
| -title: Data Collection Endpoints in Azure Monitor (preview) |
| 2 | +title: Data collection endpoints in Azure Monitor (preview) |
3 | 3 | description: Overview of data collection endpoints (DCEs) in Azure Monitor including their contents and structure and how you can create and work with them.
|
4 | 4 | ms.topic: conceptual
|
5 | 5 | author: shseth
|
@@ -47,7 +47,7 @@ Click **Review + create** to review the details of the data collection endpoint.
|
47 | 47 | Next, you can use 'Data collection rules' in the portal to associate endpoints with a resource (e.g. a virtual machine) or a set of resources.
|
48 | 48 | Create a new rule or open an existing rule. In the **Resources** tab, click on the **Data collection endpoint** drop-down to associate an existing endpoint for your resource in the same region (or select multiple resources in the same region to bulk-assign an endpoint for them). Doing this creates an association per resource which links the endpoint to the resource. The Azure Monitor agent running on these resources will now start using the endpoint instead for uploading data to Azure Monitor.
|
49 | 49 |
|
50 |
| -[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-virtual-machines-dce.png#lightbox) |
| 50 | +[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-virtual-machines-with-endpoint.png#lightbox) |
51 | 51 |
|
52 | 52 | ## Create endpoint and association using REST API
|
53 | 53 |
|
@@ -100,8 +100,8 @@ You can use data collection endpoints to enable the Azure Monitor agent to commu
|
100 | 100 | 2. Add the data collection endpoints to a new or existing [Azure Monitor Private Link Scopes (AMPLS)](../logs/private-link-configure.md#connect-azure-monitor-resources) resource. This adds the DCE endpoints to your private DNS zone (see [how to validate](../logs/private-link-configure.md#review-and-validate-your-private-link-setup)) and allows communication via private links. You can do this from either the AMPLS resource or from within an existing DCE resource's 'Network Isolation' tab.
|
101 | 101 | > [!NOTE]
|
102 | 102 | > Other Azure Monitor resources like the Log Analytics workspace(s) configured in your data collection rules that you wish to send data to, must be part of this same AMPLS resource.
|
103 |
| -3. For your data collection endpoint(s), ensure **Accept access from public networks not connected through a Private Link Scope** option is set to **No** under the 'Network Isolation' tab of your endpoint resource in Azure Portal, as shown below. This ensures that public internet access is disabled, and network communication only happen via private links. |
104 |
| -4. Associate the data collection endpoints to the target resources, using the data collection rules experience in Azure Portal. This results in the agent using the configured the data collection endpoint(s) for network communications. See [Configure data collection for the Azure Monitor agent](../agents/data-collection-rule-azure-monitor-agent.md). |
| 103 | +3. For your data collection endpoint(s), ensure **Accept access from public networks not connected through a Private Link Scope** option is set to **No** under the 'Network Isolation' tab of your endpoint resource in Azure portal, as shown below. This ensures that public internet access is disabled, and network communication only happen via private links. |
| 104 | +4. Associate the data collection endpoints to the target resources, using the data collection rules experience in Azure portal. This results in the agent using the configured the data collection endpoint(s) for network communications. See [Configure data collection for the Azure Monitor agent](../agents/data-collection-rule-azure-monitor-agent.md). |
105 | 105 |
|
106 | 106 | 
|
107 | 107 |
|
|
0 commit comments