Blob Storage via Event Grid: Microsoft Azure Resource Manager (ARM)

Last Updated: Jun. 18, 2023

Coralogix provides a seamless integration with Azure cloud, allowing you to send your logs from anywhere and parse them according to your needs.

The Azure Blob Storage via Event Grid integration allows parsing of Azure Blobs, triggered by an EventGrid subscription notification.

Notes:

This integration only supports whole log processing. It does not support tail functionality.
It does not monitor for changes to log files.

Prerequisites

Azure account with an active subscription
[Optional] Pre-existing Event Grid system topic aligned with Storage v2 /General Purpose v2 storage topic type

Azure Resource Manager Template Deployment

Sign into your Azure account and deploy the Blob Storage via Event Grid trigger integration by clicking here.

Fields

Field	Description
Subscription	Azure subscription for which you wish to deploy the integration. Must be the same as the monitored storage account.
Resource Group	Resource group into which you wish to deploy the integration
Coralogix Region	Region associated with your Coralogix domain
Custom URL	Custom URL associated with your Coralogix account. Ignore if you do not have a custom URL.
Coralogix Private Key	Coralogix Send-Your-Data API key
Coralogix Application	Mandatory metadata field sent with each log and helps to classify it
Coralogix Subsystem	Mandatory metadata field sent with each log and helps to classify it
Storage Account Name	Name of the storage account containing the Blob container. Must be Storagev2 (general purpose v2) type.
Storage Account Resource Group	Resource Group name of the storage account containing the Blob container to be monitored
Blob Container Name	Name of the Blob container to be monitored
Event Grid System Topic Name	Name of a pre-existing Event Grid system topic for the storage account containing the Blob container. Leave as ‘New’ to create one.
Newline Pattern	Newline pattern expected within the Blob storage documents
Prefix Filter	Prefix filter to apply to the Blob container. Use ‘NoFilter’ to refrain from filtering by prefix. Wildcards are not allowed. Use the following format: `/subfolder1/subfolder2/`.
Suffix Filter	Suffix filter to apply to the Blob container. Use ‘NoFilter’ to refrain from filtering by suffix. Wildcards are not allowed. Use the following format: `.log`.
Function App Service Plan Type	Type of service plan for the function app. Choose ‘Premium’ if you need vNet support.

Optional Configuration Options

If your Blob container belongs to a restricted storage account, review this optional configuration documentation to learn about VNet support options.

Additional Resources

Github	Blob Storage Documentation
Microsoft Azure Functions Manual Integrations	Event Hub Queue Storage
Microsoft Azure Functions Serverless Integration	Coralogix Azure serverless integration deployment container

Support

Need help?

Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.

Feel free to reach out to us via our in-app chat or by sending us an email at [email protected].

Download our logo in high resolution

<img width="96" height="96" src="https://coralogix.com/wp-content/uploads/2023/02/azurefunctions-96X96.svg" alt="Blob Storage via Event Grid: Microsoft Azure Resource Manager (ARM)"> Blob Storage via Event Grid: Microsoft Azure Resource Manager (ARM)