Question
You have an Azure subscription that contains 300 virtual machines that run Windows Server 2019.
You need to centrally monitor all warning events in the System logs of the virtual machines.
What should you include in the solution? To answer, select the appropriate options in the answer area.
Explanation
To centrally monitor warning events in the System logs of the virtual machines, create a Log Analytics workspace where the log data can be stored and queried. Then install the Azure Monitor agent on each VM and use a data collection rule that collects Windows event logs (System log, Warning level) and sends them to the Log Analytics workspace.
