Document Details
Connector Details
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
powershell_heavy
missing_linux_example
Summary
The documentation for Microsoft Sentinel data connectors demonstrates a Windows bias in several ways: Windows-specific tools and patterns (such as Azure Monitor Agent on Windows, Windows Event logs, and references to Windows agents) are frequently mentioned, often without equivalent Linux examples or guidance. Windows event collection (e.g., SecurityEvent, WindowsEvent, Event, W3CIISLog) is described in detail, while Linux log collection is mostly limited to Syslog, with less emphasis and fewer examples. Powershell and Windows-centric deployment instructions are referenced in prerequisites and links. In many cases, Linux alternatives are not mentioned or are presented after Windows options.
Recommendations
- For every Windows-specific connector or example (e.g., Windows Event logs, IIS logs, Windows DNS, Windows Firewall), provide equivalent Linux-focused examples (e.g., Syslog, auditd, Linux firewall logs, BIND DNS logs).
- When describing agent installation or prerequisites, include Linux-specific instructions and command-line examples (e.g., bash, systemctl) alongside Windows/Powershell.
- Avoid presenting Windows options first by default; instead, structure documentation to present both Windows and Linux options in parallel, or clarify cross-platform applicability.
- Expand the list of supported log types and connectors for Linux systems, and document them with equal detail and prominence.
- Where Windows tools or patterns are referenced (e.g., Windows Event Forwarding, Windows agent), mention Linux equivalents (e.g., rsyslog, journald, auditd) and provide setup guidance.
- Audit all connector documentation for assumptions of a Windows environment and revise to ensure Linux users are equally supported.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-16 00:00 | #258 | completed |
Biased
|
| 2026-01-15 00:00 | #254 | completed |
Biased
|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
 Clean
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-09-10 00:00 | #107 | completed |
Clean
|
| 2025-09-09 00:00 | #106 | completed |
Clean
|
| 2025-09-08 00:00 | #105 | completed |
Clean
|
| 2025-09-07 00:00 | #104 | completed |
Clean
|
| 2025-09-06 00:00 | #103 | completed |
Clean
|
| 2025-09-05 00:00 | #102 | completed |
Clean
|
| 2025-09-04 00:00 | #101 | completed |
Clean
|
| 2025-09-03 00:00 | #100 | completed |
Clean
|
| 2025-08-29 00:01 | #95 | completed |
Clean
|
| 2025-08-11 00:00 | #77 | completed |
Clean
|
| 2025-08-10 00:00 | #76 | completed |
Clean
|
| 2025-08-09 00:00 | #75 | completed |
Clean
|
| 2025-08-08 00:00 | #74 | completed |
Clean
|
| 2025-08-07 00:00 | #73 | completed |
Clean
|
| 2025-08-06 00:00 | #72 | completed |
Clean
|
| 2025-08-05 00:00 | #71 | completed |
Clean
|
| 2025-08-03 00:00 | #69 | completed |
Clean
|
| 2025-08-01 00:00 | #67 | completed |
Clean
|
| 2025-07-31 00:00 | #66 | completed |
Clean
|
| 2025-07-30 00:00 | #65 | completed |
Clean
|
| 2025-07-29 00:01 | #64 | completed |
Clean
|
| 2025-07-28 00:00 | #63 | completed |
Clean
|
| 2025-07-27 00:00 | #62 | completed |
Clean
|
| 2025-07-26 00:01 | #61 | completed |
Clean
|
| 2025-07-25 00:00 | #60 | completed |
Clean
|
| 2025-07-24 00:00 | #59 | completed |
Clean
|
| 2025-07-23 00:00 | #58 | completed |
Clean
|
| 2025-07-22 00:01 | #57 | completed |
Clean
|
| 2025-07-21 00:00 | #56 | completed |
Clean
|
| 2025-07-19 13:51 | #54 | completed |
Clean
|
| 2025-07-17 00:00 | #53 | completed |
Clean
|
| 2025-07-16 00:00 | #52 | completed |
Clean
|
| 2025-07-15 00:00 | #51 | completed |
Clean
|
| 2025-07-14 21:48 | #50 | completed |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|