Share via

Different between Data connector and log analytics agent

ABHISHEK BAJPAI 0 Reputation points
2023-02-06T07:30:47.94+00:00

Hi,

I want to know that what is the different between data connector and log analytics agent, do we need to use data connector even if we already have agent on machine, in which condition we use log analytics agent and in which condition we use data connect.

Microsoft Security Microsoft Entra Microsoft Entra ID
Microsoft Security Microsoft Sentinel

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Clive Watson 7,866 Reputation points MVP Volunteer Moderator
    2023-02-06T12:25:30.0366667+00:00

    Microsoft Sentinel Data Connectors or Content Hub Solutions use various methods to get data from a Device or Service. Generally if you look at the Data Connector it tells you which method it supports, which maybe an Agent or a api connection to a SaaS solution (and many more).
    If the agent is already on a Machine, for example a Syslog server you have previous setup then the Data Connector could use that (assuming you are happy to). The Agent remains the same, it where its pointing it data to that might change i.e. If the agent sent its data to Log Analytics workspace "A" before, it may now also need to go Workspace "B".

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.