Skip to content

Commit

Permalink
Merge pull request Azure#10582 from MeirLevinMicrosoft/feature/meirle…
Browse files Browse the repository at this point in the history
…vin/update_template_WindowsFirewallAma_MD

Update template_WindowsFirewallAma.JSON MD
  • Loading branch information
v-atulyadav authored Jun 5, 2024
2 parents cc01b6b + 5ed450d commit 21cc2b4
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"id": "WindowsFirewallAma",
"title": "Windows Firewall Events via AMA (Preview)",
"publisher": "Microsoft",
"descriptionMarkdown": "Windows Firewall is a Microsoft Windows application that filters information coming to your system from the internet and blocking potentially harmful programs. The firewall software blocks most programs from communicating through the firewall. Customers wishing to stream their Windows Firewall application logs collected from their machines can now use the AMA to stream those logs to the Microsoft Sentinel workspace. For more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2228623&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).",
"descriptionMarkdown": "Windows Firewall is a Microsoft Windows application that filters information coming to your system from the internet and blocking potentially harmful programs. The firewall software blocks most programs from communicating through the firewall. Customers wishing to stream their Windows Firewall application logs collected from their machines can now use the AMA to stream those logs to the Microsoft Sentinel workspace.\nNOTE: DCEs are required to be configured to be linked with the DCR created for the AMA to collect logs. For this connector, a DCE will automatically be created in the same region as the Workspace is. If you already use a DCE stored in the same region, it is possible to change the default created DCE and use your existing one through the API. DCEs can be located in your resources with SentinelDCE prefix in the resource name.\nFor more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2228623&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).",
"graphQueries": [
{
"metricName": "Total data received",
Expand Down

0 comments on commit 21cc2b4

Please sign in to comment.