Exam AZ-500 topic 4 question 71 discussion

No longer under advanced settings. You need to configure it from 'Agents configuration'

Now its under Settings -> Legacy agents management Under Windows event logs Log Name: System - check Error, Warning, Information Click Apply

1. Create a DCR 2.in the resources, add the server(s) you want to get the logs from 3. in data sources: select Windows event logs. Tick the options under System category. in Destination tab above, select the LAW where you wanna save the logs.(WS12345678) 4.save

Sign in to the Azure portal. Navigate to Log Analytics workspaces. Select your workspace, in this case, it’s WS12345678. In the workspace’s left-hand menu, under Workspace Data Sources, select Windows Servers. Click on Add the connected sources and follow the instructions to connect your Windows servers. Once the servers are connected, go back to your workspace and select Advanced settings. Under DATA, select Windows Event Logs. Enter ‘System’ into the text box and click the ‘+’ button to add it to the list. Click Save at the top of the page.

Go to Log Analytics Workspaces, select your workspace Go to Classic, then Legacy Agent Management Under Windows event logs, choose the ones you want

Its now under 'Legacy Agent Management'

No longer under advance settings. Refer https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events

Answer Sign in to Azure Portal Go to Log Analytics Workspaces, select your workspace Go to Agents configuration Select Windows event logs Click Add windows event log, select the event Select Error, Warning, Information event type Click Apply goto VM from Monitoring, select logs Enable

in Exam 31 Dec 2021.

https://docs.microsoft.com/en-us/azure/azure-monitor/vm/quick-collect-azurevm#enable-the-log-analytics-vm-extension Don't forget to connect vm to log analytics