Mar 10 2022 12:52 AM
Mar 10 2022 06:23 AM
Looking at the documents, it looks like basic logs will apply at a table level, and only certain types of tables are supported.
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-configure?tabs=api-1%2Cportal-1
Looking at the types of tables that are supported for basic logs, it does not look like you could do this with logon info and dns data from regular windows servers, unless you somehow use a REST API client with the Data Collection Rule (DCR)-based custom logs API.
Mar 15 2022 02:30 AM
Ah yes interesting. But if you have a log aggregator in the middle like a logstash or fluentd, you can convert them to custom logs and send all that info to basic logs ? Of course this means you have to be very well aware of your own generated logs.
Mar 15 2022 06:52 AM