This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 8%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKC%3C/text%3E%3C/svg%3E)
can we able to transfer the security event logs of windows server of one resource group to an log analytics workspace (Microsoft Sentinel) which is deployed with other resource group
Microsoft Sentinel is (usually) deployed in its own Resource Group, the Servers (or any Azure resource) sending data will be in their own Subscription/RG normally.
Have you hit an issue or are you just asking before you deploy?
Thanks for your reply.
I have deployed Microsoft sentinel with resource group called Sentinel-RG and it was connected with three Non-Azure windows servers (Those are Domain servers connected with Azure Arc) with Azure monitoring agent (AMA), and I have two more windows servers (Azure local)with other Resource group called Management_EUS. Here I want to send the Security events from Management_EUS resource group servers to an Microsoft sentinel log analytics workspace deployed with Sentinel-RG respouce group.
The AMA will send the logs to Microsoft Sentinel (regardless of the RG) so Management_EUS or any RG will work