You have an Azure subscription that contains a storage account and 20 virtual machines.
You plan to use LogRhythm for aggregation and analysis of the virtual machine logs.
You need to configure AzLog to export the logs and push them to the storage account.
In which format should you export the logs?
To configure AzLog to export logs and push them to a storage account for use with LogRhythm, the logs should be exported in JSON format. JSON is the most compatible and widely used format for log aggregation and analysis in modern SIEM systems, including LogRhythm. JSON allows for easy parsing and mapping of fields to the LogRhythm Schema Dictionary and Guide, ensuring efficient and effective log analysis.
The LogRhythm Open Collector brings modern logs, usually in JSON format, from cloud log sources, flat file, or other formats, into the LogRhythm SIEM. It is designed for easy mapping of JSON fields to the LogRhythm Schema Dictionary and Guide.
A. JSON
correct Reference: https://docs.logrhythm.com/docs/OCbeats/logrhythm-open-collector
correct The LogRhythm Open Collector brings modern logs, usually in JSON format, from cloud log sources, flat file, or other formats, into the LogRhythm SIEM.
Agree with answer
Given Answer is Correct