Azure Activity Logs

Collect Azure Activity logs and submit them to Coralogix for seamless integration.

Overview

Activity logs are a form of audit log that provide insight into the operations performed on each Azure resource in the subscription from the outside, known as the management plane. This can include the creation or deletion of resources, as well as updates to existing services.

This tutorial explains how to collect Azure Activity logs and send them to Coralogix. To do so, you will need to configure an Activity log export and use our Event Hub integration to collect and submit the logs to the Coralogix platform.

Prerequisites

Azure account with an active subscription
EventHub Namespace [Note: If your EventHub has restricted public access you will need to enable VNet support using these optional configuration steps.]

Activity Log Export

STEP 1. To configure Activity Log exports, navigate to your Subscription > Activity log.

STEP 2. Click Export Activity Logs.

STEP 3. In the next window, click + Add Diagnostic Setting.

STEP 4. In the Diagnostic Setting, select your desired Categories and configure the Destination details to submit entries to your existing Event Hub.

Process Event Hub

Now that we have your Activity Log entries being exported to your Event Hub, you’ll need to deploy the Azure Event Hub integration to collect and submit the messages to the Coralogix platform.

To do so, you can deploy via ARM template or Terraform: