Buffer en Azure Monitor Agent

asked 2023-01-02T14:35:44.433+00:00
Abel Cajaraville Capote 1 Reputation point

We are migrating our onpremise SIEM to Azure Sentinel.
We have 3 forwarding servers with the AMA agent (2 syslog/CEF and 1 Wec).
We want that when a VPN tunnel goes down the agent buffer is able to store at least 10 GB.
Is this possible?
If not, what is the limit and where can we configure them for Linux and Windows agents?

Thank you very much

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
1,804 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. answered 2023-01-02T16:25:35.817+00:00
    Andrew Blumhardt 6,636 Reputation points Microsoft Employee

    I am not certain if the AMA for Linux buffer can be configured. Much like the MMA, there is a buffer but the details do not appear to be published. I recommend working with your Microsoft support contacts to request more information if possible.

    https://learn.microsoft.com/en-us/azure/azure-monitor/faq#what-happens-to-application-insight-s-telemetry-when-a-server-or-device-loses-connection-with-azure-

    No comments