Friday 8 July 2016

Audit Logs on Microsoft Azure Platform

Auditing is something that everyone wants. Auditing is also something that everyone wants for Free :). If you account for number of hours you had to spend to implement auditing functionality in an application, it would be quite high and that would mean that the Auditing "feature" can not be delivered to a customer for free. Your mind is caught in two conflicting houghts.

When you are using Microsoft's Azure platform, there is plenty of logging features available which you can utilize to build a basic infrastructure "Auditing" for the set up without much manual effort. Of course, there is some cost but that is running cost for storing data and not related to effort related to implement it. So how do you get it done?

Search "AuditLogs" on the Azure portal :)


You will be able to see all the activities done on different resources by different folks. Now you can tell who deleted what :)


What is better is that you can configure export of data. The destination can be either an Azure Storage Account (good for batch processing) or an Event Hub (for real time processing).



You can view the logged audit log data through any Azure Storage data viewer tool of your choice. Table name is "insights-operational-logs". Logged data contains lot of useful information.






Once you have either of the two exports set up, you can achieve a lot of monitoring on your azure subscription. Imagine streaming this data through a Stream Analytics Job :).

No comments:

Post a Comment