@DaryaB it should provide largely duplicate information. However there are cases where having both collectors types working can give you a better overall view of SaaS usage: e.g. devices using proxies but not having MDE installed. Or MDE usage outside the corporate premises (remote users not using VPN, mobile devices). If you have a large device base, it's probable the MDE isn't working on all assets so you may still capture their use through the proxy logs. Having both sources may give you a sanity check of whether the ingestion is working properly or if you have some kind of technical issues.