Adding data sources in OMS

As mentioned previously, Log Analytics collects data from the connected sources that you define in your workspace and stores that data in the OMS data stores. The data sources you configure will define the data that is then collected from each connected source. Two data sources that you can start with are Windows events and performance data.

To add a Windows event log data source to OMS, go through the following steps:

1. In the OMS console, click the Settings tile.
2. In the Settings page, click on Data and select Windows Event Logs.
3. In the Log Name field, type the name of an event log you would like to collect. Log Analytics will suggest common event log names based on your entry.

4. Type your log name, or select from the suggestions, and click the + button to add the event log for collection: