Chaps and chapesses,
QRoC documentation talks us through creating a data gateway – and originally the message seemed to be that they existed to ascend data from on-prem installs into the cloud. But documentation now says you can put them into AWS and Azure cloud as well.
Azure also has this concept of Event Hubs, and Microsoft explain that you can pull a series of different streams of data (application monitoring, guest OS, resource/subscription/tenant monitoring) into those, and you can export them to QRadar.
When would I have to use one or the other, or can I select whichever I prefer?
Kind regards
James