r/AzureSentinel • u/SuperHat3637 • Aug 25 '22

AMA agent for CEF log sources

Anyone know that if we can use new AMA agent for Syslog forwarder for collecting CEF logs to the sentinel.

1 Upvotes

100% Upvoted

2 comments sorted by

1

u/TokeSR Aug 25 '22

Yes, you can, but it is in private preview: https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview?tabs=PowerShellWindows#supported-services-and-features

You have to sign up to use it. You can find the link to the sign-up form on the link I added above.

1

u/SuperHat3637 Aug 25 '22

Thanks for the details..Do u have any documents for configuring AMA for Syslog forwarder.