I have a scenario at my work where i need to send logs from multiple resources on azure to single log analytics workspace for compliance purpose and then ingest the same logs to Azure Sentinel workspace for SIEM services, i however cannot enable Azure Sentinel on the first workspace, any leads or solutions please.
sending logs to multiple Azure Log analytics workspaces
1.5k Views Asked by kay At
1
There are 1 best solutions below
Related Questions in AZURE
- S Cannot be resolved. Clojure. Cursive
- Rust Cursive EditView setText function
- Cursive: Clojure's *out*, different Writers, flushing and ordering inconsistency when multithreaded: what is going on?
- Clear Cursive REPL state before each test run
- how to run junit tests that require classes compiled from clojure in intelliJ
- How do I stop IntelliJ Cursive from re-formating my Clojure code?
- why cursive font does not Works in my browser?
- IntelliJ/Cursive unexpected issue
- Getting context help in Cursive IDE?
- IntelliJ (Cursive) REPL evaluation in namespace
Related Questions in AZURE-LOG-ANALYTICS
- S Cannot be resolved. Clojure. Cursive
- Rust Cursive EditView setText function
- Cursive: Clojure's *out*, different Writers, flushing and ordering inconsistency when multithreaded: what is going on?
- Clear Cursive REPL state before each test run
- how to run junit tests that require classes compiled from clojure in intelliJ
- How do I stop IntelliJ Cursive from re-formating my Clojure code?
- why cursive font does not Works in my browser?
- IntelliJ/Cursive unexpected issue
- Getting context help in Cursive IDE?
- IntelliJ (Cursive) REPL evaluation in namespace
Related Questions in AZURE-SENTINEL
- S Cannot be resolved. Clojure. Cursive
- Rust Cursive EditView setText function
- Cursive: Clojure's *out*, different Writers, flushing and ordering inconsistency when multithreaded: what is going on?
- Clear Cursive REPL state before each test run
- how to run junit tests that require classes compiled from clojure in intelliJ
- How do I stop IntelliJ Cursive from re-formating my Clojure code?
- why cursive font does not Works in my browser?
- IntelliJ/Cursive unexpected issue
- Getting context help in Cursive IDE?
- IntelliJ (Cursive) REPL evaluation in namespace
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Firstly I think your best option is to put everything into one log analytics workspace with the longer retention period but lets say that is not at all possible.
I can see 2 options here: The easiest is probably to set up 2 diagnostic settings on each resource which points to the separate log analytics work spaces.
A much harder option would be to use continuous export into Azure Storage (which could be all you need to do) or event hub and then process this back into log analytics with an Azure function.
Last comments would be that your going to be paying for the data ingest twice no matter what is done here which will at least double your costs for the lower retention time.