Question
You have 50 on-premises servers that run Windows Server.
You have an Azure subscription.
You plan to monitor the on-premises servers by using Azure Monitor.
You need to collect event logs from the on-premises servers.
What should you do first?
- A. From the Azure portal, create a storage account.
- B. From the Azure portal, create a Log Analytics workspace. Correct
- C. From the on-premises servers, run azuremonitoragentclientsetup.msi.
- D. From the Azure portal, create a data collection rule (DCR) in Azure Monitor.
Explanation
A Log Analytics workspace is required to store and analyze the event logs collected from on-premises servers. Creating this workspace first ensures that there is a destination for the data collected by Azure Monitor agents installed on the servers.
