Azure Resource Manager (ARM) integration packages
Access our Azure Resource Manager (ARM) Integration Packages to automatically deploy our various Microsoft Azure integrations. Extend your platform capabilities with packages and sources, without expending unnecessary time and resources. Gain insights into role, user, group and directory management, successful and failed sign-in events, and application management data that helps you understand your users’ experience and immediately troubleshoot any errors.
Overview
Coralogix offers Azure Resource Manager (ARM) custom template deployments to build your Azure log and metric pipelines using our Azure Resources Integration Packages. Each template creates a unique dedicated resource group, to which Azure Monitor streams logs or metrics. Additionally, an Azure function is created for sending monitoring data to Coralogix, and storage accounts are established to which the function writes its own log messages about successful and failed transmissions.
Select from any of our ARM custom template deployments:
-
Event Hub
-
Blob Storage
-
Queue Storage
-
Diagnostic Data
What you need
- Azure account with an active subscription
Deploy the integration package
Access Data Flow > Integrations. View the list of available integrations in Coralogix Apps.
Click CONNECT in the ARM deployment of choice.
View application details in the App Overview. For more information, click on the links under Integration Details. You will also see a list of extension packages available for the integration.
Click + ADD NEW.
Define your Settings.
| Common Field | Description |
|---|---|
| API Key | Coralogix Send-Your-Data API key |
| Application Name | Mandatory metadata field sent with each log and helps to classify it |
| Subsystem Name | Mandatory metadata field sent with each log and helps to classify it |
Click NEXT.
Once deployed, you must restart the function app from the Azure UI.
Configure the ARM template
Click OPEN ARM.
You will rerouted to your Microsoft Azure account in a new tab. Configure the custom ARM template by filling in the relevant fields.
Common fields
| Field | Description |
|---|---|
| Subscription | Azure subscription within which you wish to deploy the integration. Must be the same as the monitored Event Hub namespace |
| Coralogix Region | Region associated with your Coralogix domain |
| Custom URL | Custom URL associated with your Coralogix account. Ignore if you do not have a custom URL. |
Event Hub and diagnostic data
| Field | Description |
|---|---|
| Event Hub Resource Group | Name of the resource group that contains the Event Hub |
| Event Hub Namespace | Name of the Event Hub namespace |
| Event Hub Instance Name | Name of the Event Hub instance to be monitored |
| Event Hub Shared Access Policy Name | Name of the shared access policy of the Event Hub namespace |
| Function App Service Plan Type | Type of service plan to use for the integration. Consumption is cheapest with support for ‘public’ Event Hubs. Use Premium if you need to use VNet to configure access to restricted Event Hubs. |
Blob storage
| Field | Description |
|---|---|
| Storage Account Name | Name of the storage account containing the Blob container. Must be Storagev2 (general purpose v2) type. |
| Storage Account Resource Group | Resource Group name of the storage account containing the Blob container to be monitored |
| Blob Container Name | Name of the Blob container to be monitored |
| Event Grid System Topic Name | Name of a pre-existing Event Grid system topic for the storage account containing the Blob container. Leave as ‘New’ to create one. |
| Newline Pattern | Newline pattern expected within the Blob storage documents |
| Prefix Filter | Prefix filter to apply to the Blob container. Use ‘NoFilter’ to refrain from filtering by prefix. Wildcards are not allowed. Use the following format: /subfolder1/subfolder2/. |
| Suffix Filter | Suffix filter to apply to the Blob container. Use ‘NoFilter’ to refrain from filtering by suffix. Wildcards are not allowed. Use the following format: .log. |
| Function App Service Plan Type | Type of service plan for the function app. Select ‘Premium’ if you need vNet support. |
Queue storage
| Field | Description |
|---|---|
| Storage Account Name | Name of the storage account containing the storage queue. Must be of StorageV2 (general purpose V2) type. |
| Storage Account Resource Group | Name of the storage account resource group containing the storage queue to be monitored |
| Storage Queue Name | Name of the Storage Queue to be monitored |
| Function App Service Plan Type | Type of the function app service plan. Select ‘Premium’ if you need VNet support. |
Click Next: Review + create >.
Review your configuration settings. If correct, click Create.
Validate
Revert back to Coralogix Apps in the previous tab and click COMPLETE to ensure your deployment is successful. This triggers a test to verify the deployment, the result of which is displayed as either Active or Failed.
Deploy the extension package of your choice to complement your integration needs.
Once the verification process is complete and you have deployed your extension package, view your logs in your Coralogix dashboard.
Remove or modify the package
To remove / modify this integration, you will need to delete the dedicated resource group created during deployment.
Access Data Flow > Extensions. Then, navigate to the ARM integration package.
In the opening screen, click on the More Options icon […] under Actions. Select DELETE.
Click DELETE INTEGRATION.
You will rerouted to your Microsoft Azure account. Select the relevant resource group. Click Delete resource group.
Click COMPLETE in your Coralogix UI to revert back to the App Overview.
