Exam AZ-500 topic 5 question 54 discussion

1. Linux server and a Syslog forwarder daemon 2. Azure Log Analytics agent https://learn.microsoft.com/en-us/azure/sentinel/connect-log-forwarder?tabs=rsyslog To ingest Syslog and CEF logs into Microsoft Sentinel, particularly from devices and appliances onto which you can't install the Log Analytics agent directly, you'll need to designate and configure a Linux machine that will collect the logs from your devices and forward them to your Microsoft Sentinel workspace. This machine can be a physical or virtual machine in your on-premises environment, an Azure VM, or a VM in another cloud. This machine has two components that take part in this process: - A syslog daemon, either rsyslog or syslog-ng, that collects the logs. - The Log Analytics Agent (also known as the OMS Agent), that forwards the logs to Microsoft Sentinel.

Is this question probably outdated? Nowadays Azure Monitor Agent is used instead of Log Analytics Agent and deployed by first onboarding a machine to Azure Arc using connected Machine Agent/Azure Arc Agent. Then AMA is installed as a VM extension to the machine.

Same as Question 68. https://www.examtopics.com/discussions/microsoft/view/94659-exam-az-500-topic-5-question-68-discussion

Exam.6 case studies. 3 true/false questions. 47 multiple questions and no simulations. Alot of new questions thats not up here. Second box is Microsoft monitor agent

Deploy: A Linux server and a syslog forwarder deamon Forward events to Microsoft Sentinel: An Azure log analytics agent

It seems to be correct. https://docs.microsoft.com/en-us/azure/sentinel/connect-common-event-format