DEV Community

Eng Soon Cheah
Eng Soon Cheah

Posted on • Updated on

Configure security services

Azure Monitor
Azure Monitor uses two fundamental data types—metrics and logs:

  • You can analyze log data that Azure Monitor collects by using queries to quickly retrieve, consolidate, and analyze the collected data
  • Azure Monitor offers a consolidated pipeline for routing any of your monitoring data into an SIEM tool
  • Security Center automatically collects, analyzes, and integrates log data from your Azure resources Alt text of image

Configure Azure Log Analytics

  • The Azure Log Analytics service helps you collect and analyze data generated by resources in your cloud and on-premises environments
  • At the center of Log Analytics is the Log Analytics workspace, which is hosted in Azure
  • Data sources and solutions create different record types, each with its own set of properties
  • The connected sources are the computers and other resources that generate the data that Log Analytics collects Alt text of image

Configure diagnostic logging and log retention

  • Azure Monitor makes two types of diagnostic logs available:
    • Tenant logs
    • Resource logs 
  • The content of these logs varies by Azure service and resource type
  • These logs differ from the activity log that provides insight into the Azure Resource Manager operations on resources in your subscription
  • Guest OS diagnostic logs are those collected by an agent running inside a VM or other supported resource type Alt text of image

Top comments (0)