Azure-docs: Existing workspace to deploy agents

[Ayanmullick]

Is there a way to configure Security Center so that it uses the existing connected workspace and not an additionally created Default Workspace to deploy agents on VM's?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 52631c70-1c13-324f-29db-23d80f756e47
• Version Independent ID: f8f06c19-4bf7-7ede-12f0-e3867c6cd889
• Content: Azure Security Center FAQ - questions about existing Log Analytics agents
• Content Source: articles/security-center/faq-azure-monitor-logs.md
• Service: security-center
• GitHub Login: @memildin
• Microsoft Alias: memildin

[SaurabhSharma-MSFT]

@Ayanmullick Thanks for your feedback! We will investigate and update as appropriate.

[SaurabhSharma-MSFT]

@Ayanmullick To use an existing Log Analytics workspace you can go to Security Center > Pricing & Settings > Data Collection blade on Azure portal. You can select a different workspace under Use another workspace drop down. Please refer to the documentation.

[memildin]

As @SaurabhSharma-MSFT said, you can use any workspace and the quickstarts all refer to that option.

please-close

[Ayanmullick]

I was unable to contact @SaurabhSharma-MSFT through Teams. @memildin, there are gaps in the documentation. This is what I see in 'Data Collections'.

Here it says a Default workspace is created for agent deployment irrespective of selecting one's existing workspace. How does one point to the existing workspace for agent deployment?

[SaurabhSharma-MSFT]

@Ayanmullick As per discussion over call I am reopening this issue and will provide you the information you are looking for.