182 votes8 comments · Azure Monitor-Log Analytics » Security and Audit Solution · Flag idea as inappropriate… · Admin →
This feature is currently being reviewed and worked upon by the team , which is exploring new methods for longer retention, will keep this thread updated accordingly.
An error occurred while saving the commentNicklas Westerberg commented
We need to keep data longer than 365 days (premium subscription), as this is an audit point of requirements on security events, so what we ask for is the possibility of a custom subscription or several choices for retaining data longer than one year.
7 votes2 comments · Azure Monitor-Log Analytics » Workspace Settings / Administration · Flag idea as inappropriate… · Admin →
Thanks for your feedback. Indeed. In SCOM, you can look at those rules.
The old ‘Configuration Assessment – that was opaque. But all the new solutions just import MP’s whose rules you can see in SCOM, take apart, and study. All in all, we think this is much more transparent approach than the older one… does it make sense?