ARM Authoring Azure Log Analytics Azure Monitor

ARM – Connect Activity Logs From Multiple Subscriptions As Log Analytics Workspace Data Source

Posted on Author stefanroth Comments(2)

image

Recently I had a requirement to automatically configure Activity Logs from multiple subscriptions to send their logs to a Log Analytics workspace. I am talking about this setting here…

image

There are many ways how to achieve this goal. If you are into PowerShell you could use this cmdlet New-AzureRMOperationalInsightsAzureActivityLogDataSource  (I like the name Smile), this would work perfectly. Another way could be to use the REST API to create or update the Log Analytics data sources. In my case I had the needed for an ARM template which I could pass a collection of subscription ids to it and then it would connect those subscriptions to a workspace…

image

If the workspace does not exist, it will be created. It is good to know, that we could send the Activity Logs from the subscriptions to multiple workspaces. Just execute the template and provide each time a new workspace name. This might be useful in certain scenarios.

This is a short post, but I think others have the same requirement and therefore it may help!

Find the ARM template here.

stefanroth
http://www.stefanroth.net

Related Articles
Authoring Azure Automation Configuration Development Script Software

Azure Automation – ISE Add-On Editing Runbooks

Posted on Author stefanroth

Well it has been a while since last post, because there is a lot going on in my private life as also in my job. But now some “tasks” are completed and I will have more time for community work again. Microsoft product machinery is running at high speed in all areas. One tool I […]
Authoring Management Pack Script

SCOM 2012 – Check DNS Servers And DNS Records / IP MP

Posted on Author stefanroth

In today’s world of IT everything is still heavily depending on DNS. It can be the most sophisticated application / technology if DNS does not work all other parts also won’t work. SCOM offers a good DNS MP which monitors essential parts of your DNS infrastructure. Something that is missing and I think makes sense […]
Azure Azure Automation Azure Log Analytics Azure Monitor

Azure Monitor – Modify Alerts Using Logic App

Posted on Author stefanroth

I am a big fan of Azure Monitor and Azure in general. What I like is the service offers, the flexibility, standards and the chance that you can build basically anything you want – the limit is your imagination. In terms of flexibility I have a nice example which was bothering me for some time. […]

2 Replies to “ARM – Connect Activity Logs From Multiple Subscriptions As Log Analytics Workspace Data Source”

  1. Hi Stefan,
    It was a good article.
    Can I get your contact mail id to reach you?

    Thanks
    Krithika

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.