About The Device
Azure SQL Database is a relational database and fully managed platform as a service (PaaS). Azure SQL Database can create a highly available and high-performance data storage layer for the applications and solutions in Azure.
Device Information
Entity | Particulars |
---|---|
Vendor Name | Microsoft |
Product Name | Azure SQL |
Type of Device | Cloud |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol | Log Collection Method | Data Source |
---|---|---|---|---|
Azure SQL | AZURE_SQL | JSON | CyberHub | Azure SQL documentation - Azure SQL SQL Database audit log format - Azure SQL Database & Azure Synapse Analytics |
Device Configuration
Prerequisites:
Azure subscription that you can sign in to.
Azure Event Hub.
Reference URLs:
How to configure Event Hub: Azure Quickstart - Create an event hub using the Azure portal - Azure Event Hubs
Configurations Steps:
Log In to Azure Portal i.e https://portal.azure.com/
Navigate to Auditing under the Security heading in your SQL database or SQL server pane.
If you prefer to set up a server auditing policy, you can select the View server settings link on the database auditing page. You can then view or modify the server auditing settings. Server auditing policies apply to all existing and newly created databases on this server.
If you prefer to enable auditing on the database level, switch Auditing to ON. If server auditing is enabled, the database-configured audit exists side-by-side with the server audit.
You have multiple options for configuring where audit logs are stored. You can write logs to an Azure storage account or to Event Hub.
To configure writing audit logs to an Event Hub, select Event Hub. Select the Event Hub where logs will be written and then click Save. Be sure that the event hub is in the same region as your database and server.
Get Azure Event Hub Credentials: Get Credentials of Azure Storage and Azure EventHub
Integration Parameters
Parameters required from customer for Integration.
Property | Description |
---|---|
Logging Source | Select EventHub |
eventHubConnectionString | Event hub connection string |
consumerGroupName | Optional and used if consumer Group is other than default |
Account Key | Access Key to access storage account |
Blob Container | Storage blob Container name |
Storage Account Name | Azure storage account name |
Subscription | Set Eventhub name |