Configuring continuous export to a Log Analytics workspace
Specific recommendations or alerts can be sent to a Log Analytics workspace, where these events can be viewed, queried, analyzed, and processed further.
Getting ready
Before you complete the steps in this recipe, you must have a Log Analytics workspace available.
Open a web browser and navigate to https://portal.azure.com.
How to do it…
To configure the continuous export of Microsoft Defender for Cloud alerts and recommendations data to a Log Analytics workspace, complete the following steps:
- In the Azure portal, open Microsoft Defender for Cloud.
- From the left menu, under Management, select Pricing & Settings.
- Click on an Azure subscription where you want to configure the data export.
- From the left menu, select Continuous export.
- From the right blade, click on the Log Analytics Workspace tab.
- The Export enabled button allows you to enable or disable a data export. Select...