Data Collection Tier in Azure Security Center

Sun, 25 Feb 2018 17:22:05 +0000

Within the Azure Security Center, Security Policy node, you can select a workspace and there define the data collection configuration for security events.

All Events
Common
Minimal
None

More details about the Azure Data Collection and the data collection tier can be found here. The page also has a list of all the Event IDs that are being collected within each tier.

To better understand the exact meaning of each Event ID, I’ve created the below lists containing the Event ID, Description, Event Provider and Event Level information.

Data-Collection on Anything About IT

Data Collection Tier in Azure Security Center