Document Details
Sample Workspace Designs
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
missing_linux_example
Summary
The documentation repeatedly references 'Windows Security Events' and 'Windows Events' as key log sources, and provides example solutions using the Azure Monitoring Agent (AMA) for Windows VMs. There is no mention of Linux-specific log sources (e.g., Linux audit logs, syslog details) or explicit Linux collection patterns, even though Sentinel and Log Analytics support Linux VMs. The examples and recommendations focus on Windows event collection and do not provide parity for Linux VM scenarios.
Recommendations
- Add explicit examples and guidance for collecting Linux security and audit logs (e.g., syslog, auditd) from both Azure and on-premises Linux VMs.
- Include mention of Linux VM support in the resource types and collection requirements sections for each sample organization.
- Provide example workspace designs that illustrate how Linux logs are ingested and segregated, similar to the Windows event examples.
- Reference Linux agent documentation and connector options alongside Windows/AMA references.
- Clarify that Sentinel supports both Windows and Linux VMs, and highlight any differences in configuration or log types.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-09-11 00:00 | #108 | completed |
Clean
|
| 2025-08-11 00:00 | #77 | completed |
Clean
|
| 2025-08-10 00:00 | #76 | completed |
Clean
|
| 2025-08-09 00:00 | #75 | completed |
Clean
|
| 2025-08-08 00:00 | #74 | completed |
Clean
|
| 2025-08-07 00:00 | #73 | completed |
Clean
|
| 2025-08-06 00:00 | #72 | completed |
Clean
|
| 2025-08-05 00:00 | #71 | completed |
Clean
|
| 2025-08-03 00:00 | #69 | completed |
Clean
|
| 2025-08-01 00:00 | #67 | completed |
Clean
|
| 2025-07-31 00:00 | #66 | completed |
Clean
|
| 2025-07-30 00:00 | #65 | completed |
Clean
|
| 2025-07-29 00:01 | #64 | completed |
Clean
|
| 2025-07-28 00:00 | #63 | completed |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|