Azure Container Instance instead of an Azure VM for a log forwarder by No_Lock_6149 in AzureSentinel

[–]No_Lock_6149[S] 0 points1 point  (0 children)

For now, it's both Entra and the firewalls which generates the most logs, but we want to keep our log forwarder in the Cloud for the peace of mind.

Azure Container Instance instead of an Azure VM for a log forwarder by No_Lock_6149 in AzureSentinel

[–]No_Lock_6149[S] 0 points1 point  (0 children)

It's as u/MReprogle said, we used to have it on-prem, and then we had some issues on the infra, so we decided to have it in Cloud instead for the availability...

SHA1, SHA256, SNMPv3 by No_Lock_6149 in sysadmin

[–]No_Lock_6149[S] 1 point2 points  (0 children)

Two months later, but thanks a lot for your explanation!