Azure-docs: Events from on-premises Windows

[GinoLock]

Is there a way to see Security Logs from on-premises Windows?, so far it is only showing System/Application logs. thanks!

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 6036c6de-a2e8-ffd7-50e9-44ae32bf1682
• Version Independent ID: f7ab9abc-abd0-09e1-4b64-9ec304495ee5
• Content: Connect hybrid machines to Azure from the Azure portal
• Content Source: articles/azure-arc/servers/onboard-portal.md
• Service: azure-arc
• Sub-service: azure-arc-servers
• GitHub Login: @MGoedtel
• Microsoft Alias: magoedte

[KrishnaG-MSFT]

@GinoLock Thanks for your comment! We will review and provide an update as appropriate.

[KrishnaG-MSFT]

@GinoLock AFAIK there is a way to see Security events from on-premises Windows and the way is using Security & Audit solution that's included in standard tier of Azure Security Center. Let me double check with the team internally and confirm you if there are any latest updates / changes.

[MGoedtel]

@GinoLock - Collection of security events from your Windows VMs or physical Windows systems is provided with Azure Security Center or Azure Sentinel depending on your requirements.

[MGoedtel]

@KrishnaG-MSFT - This isn't a doc issue so please close when you've completed the follow-up response to GinoLock. Thanks.

[KrishnaG-MSFT]

@MGoedtel Sure. Thanks for the response. 😊

[KrishnaG-MSFT]

@GinoLock This is a follow up comment to confirm that currently there are no other updates / changes and so above comment by Matt and myself holds good.

At this point it appears that there's no edits or updates needed for the referred Azure documentation so closing this issue for now. If there are further questions regarding this matter or feedback on the referred Azure documentation, please do let us know and we will gladly continue the discussion.