Windows 10: Microsoft Endpoint Configuration Manager, Device Collection Queries

Hello all,Here is the question. I am wanting to limit the query for my machines in my Domain. I have a partially working query however I am failing miserably on the exclusions. Here is what I am doing and wanting to accomplish.I want to create a new query to include only Windows 10 OS, and on those same systems if they belong to an OU I do not want them included in the query. I am new to Endpoint so bear with me.Device CollectionsCreated a new Device Collections Called Software Distribution General NameCreate a Member ship rule to include Criteria Windows 10 OS platforms. WorksAdd to th

:)

 

SIEM Integration With Microsoft Endpoint Configuration Manager

Hi,



Thank you for writing to Microsoft Community Forums.



We understand the concern as you want to know whether
it’s possible to forward antivirus logs in Microsoft Endpoint Configuration Manager to a SIEM.



In this case we would suggest you to refer these articles:

Configure
Endpoint Protection

Microsoft Endpoint Configuration Manager documentation



However, for concern/queries related to Microsoft Endpoint Configuration, let me help to point you in the right direction. I would suggest you to post your query in
TechNet Forums where you will find professionals
with expertise on Microsoft Endpoint Configuration
and that would be the appropriate forum



Regards,



Aditya Roy

Microsoft Community – Moderator

 

SIEM Integration With Microsoft Endpoint Configuration Manager

Is it possible to forward antivirus logs in Microsoft Endpoint Configuration Manager to a SIEM? If so, how is this done; via API or syslog?

 

Update 1802 for Configuration Manager Technical Preview Branch

Source: Update 1802 for Configuration Manager Technical Preview Branch - Available Now! Enterprise Mobility + Security