What is Azure OneDsCollector service?

Question

Hi I see our office firewall record many traffic to the ip which is belong service tag is OneDsCollector (service tag from the ServiceTags_Public json file).
But I can not found any description about this service.
Could some one can tell me what is azure OneDsCollector service?
Thanks

Answer 1

Hello @Charles ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you would like to know what is Azure OneDsCollector service.

I checked internally and found that the OneDSCollector is a service that internal products (Windows, Office, Teams, Xbox, etc.) use for client telemetry. Its ranges should be Service Tagged, which is why you see them in the public JSON.

If you try to access any of those IPs securely via your browser, you can see the certificate data which will give you some information on the service:
issued by Microsoft Azure for * events.data.microsoft.com*

If you look for "events.data.microsoft.com" you can find the below doc:
Windows 10, version 20H2, connection endpoints for non-Enterprise editions - Windows Privacy | Microsoft Learn

Which explains that "events.data.microsoft.com" endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.
If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft.

We already have an open GitHub feedback to get this service tag added to our documentation for better clarity. I will follow-up with the docs team to get this updated at the earliest, if possible.
Refer : https://github.com/MicrosoftDocs/azure-docs/issues/91787

Kindly let us know if the above helped or you need further assistance on this issue.

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.