| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...
Azure Monitor maximizes the availability and performance of your applications and services by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | Microsoft |
Product Name | Azure Monitor |
Type of Device | Cloud |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log Collection Method | Data Source |
|---|---|---|---|---|
Microsoft Azure Activity | AZURE_ACTIVITY | JSON | CyberHub | https://cloud.google.com/chronicle/docs/reference/feed-management-api#azure_blobstore |
Device Configuration
Prerequisites:
...
How to create storage account?
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create?tabs=azure-portalHow to configure Event Hub?
https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-create
To Configure Azure Monitor
Log in to Azure Portal i.e., https://portal.azure.com/
Search for Azure Monitor and Click Azure Monitor
...
To stream logs to Event Hub, select Stream to an event hub in Diagnostic setting.
Select Subscription, Event hub namespace, Event hub name and Event hub policy name created during Event Hub as part of prerequisite.
...
Get Credentials of Azure Storage Account and Azure EventHub: Get Credentials of Azure Storage and Azure EventHub
Integration Parameters
...
Via Azure Storage:
Property | Default Value | Description |
|---|---|---|
Logging Source | N/A | Select Storage |
eventHubConnectionString | N/A | N/A (keep blank) |
consumerGroupName | N/A | N/A (keep blank) |
Account Key | Custome value | Access Key to access storage account |
Blob Container | N/A | Storage blob Container name e.g. |
Storage Account Name | Custom Value | Azure storage account name |
Subscription | N/A | Subscription ID that customer wants to be monitored |
initialReadPolicy | N/A | Select Beginning to start reading from beginning and End to start reading logs from the end |
Via Azure EventHub:
Property | Default Value | Description |
|---|---|---|
Logging Source | N/A | Select EventHub |
eventHubConnectionString | N/A | Event hub connection string |
consumerGroupName | N/A | Optional and used if consumer Group is other than default |
Account Key | Custom Value | Access Key to access storage account |
Blob Container | N/A | Storage blob Container name |
Storage Account Name | Custom Value | Azure storage account name |
Subscription | N/A | Set EventHub name |
initialReadPolicy | N/A | N/A (keep default selection) |