/
Microsoft Log and Monitoring Agent Guides

Microsoft Log and Monitoring Agent Guides

Owned by Deepanshu Marwah
27 April 2023

Native ingestion of Linux logs and Windows events are available through two (2) agents maintained by Microsoft.

  • Microsoft Monitoring Agent - Windows

  • OMS Agent - Linux

Microsoft Monitoring Agent (MMA)

The Microsoft Monitoring Agent is a native Windows agent for Azure Sentinel. MMA allows you to configure proxies or set up gateways for aggregation.

https://docs.microsoft.com/en-us/services-hub/health/mma-setup

Operations Management Suite (OMS) Agent

The OMS Agent is a native Linux agent that utilises Fluentd for log collection. The OMS Agent repository is open-source and can be found on GitHub.

https://github.com/microsoft/OMS-Agent-for-Linux

The OMS Agent has several dependencies and are packaged alongside the universal installer, including the Ruby runtime needed for Fluentd. Fluentd offers numerous customisations for the log collection process, including tagging, mutating and parsing events.

Related content