Which Log Analytics tables should you query?

DRAG DROP

You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.

You need to use Azure Log Analytics design an alerting strategy for security-related events.

Which Log Analytics tables should you query? To answer, drag the appropriate tables to the correct log types. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent

Windows Event logs –> Information sent to the Windows event logging system. Syslog –> Information sent to the Linux event logging system.