|
1 | 1 | --- |
2 | | -title: Detailed Guide on Pushing Subscription Activity Logs to Sentinel |
3 | | -description: Provides detailed instructions on how to push subscription activity logs to Sentinel. |
| 2 | +title: Detailed Guidance for Pushing Subscription Activity Logs to Sentinel |
| 3 | +description: Provides detailed instructions for pushing subscription activity logs to Sentinel. |
4 | 4 | ms.date: 07/10/2025 |
5 | 5 | ms.reviewer: v-liuamson |
6 | 6 | ms.service: azure-monitor |
7 | 7 | ms.custom: I can’t configure export of Activity Logs |
8 | 8 | --- |
9 | | -# Detailed Guide on Pushing Subscription Activity Logs to Sentinel |
| 9 | +# Push subscription activity logs to Sentinel |
10 | 10 |
|
11 | | -This article provides guidance on how to push subscription activity logs to Sentinel using Azure's Diagnostic Settings. This process is essential for monitoring and analyzing activity logs effectively. |
| 11 | +This article provides guidance for pushing subscription activity logs to Microsoft Sentinel by using Azure's Diagnostic Settings. This process is essential for monitoring and analyzing activity logs effectively. |
12 | 12 |
|
13 | | -## Introduction |
| 13 | +Users might encounter challenges when they try to push subscription activity logs to Sentinel. This guide outlines the steps to configure Azure Diagnostic Settings to achieve seamless data transfer to Sentinel. |
14 | 14 |
|
15 | | -Users may encounter challenges when attempting to push subscription activity logs to Sentinel. This guide outlines the steps to configure Azure Diagnostic Settings to achieve seamless data transfer to Sentinel. |
| 15 | +## Instructions to configure Azure Diagnostic Settings |
16 | 16 |
|
17 | | -### Step-by-Step Instructions to configure Azure Diagnostic Settings |
18 | | - |
19 | | -1. **Access Azure Portal**: Log in to your Azure account and navigate to the **Azure Portal**. |
| 17 | +1. **Access Azure Portal**: Log in to your Azure account, and navigate to the Azure portal. |
20 | 18 |
|
21 | 19 | 2. **Navigate to Diagnostic Settings**: |
22 | 20 | - Go to the **Azure Monitor** section. |
23 | | - - Select **Diagnostic Settings** from the menu. |
| 21 | + - On the menu, select **Diagnostic Settings**. |
24 | 22 |
|
25 | 23 | 3. **Configure Diagnostic Settings**: |
26 | | - - Choose the resource for which you want to configure the logs. |
27 | | - - Click on **Add Diagnostic Setting**. |
28 | | - - Name your setting and select the logs you wish to send to Sentinel. |
| 24 | + - Select the resource that you want to configure the logs for. |
| 25 | + - Select **Add Diagnostic Setting**. |
| 26 | + - Name your setting, and select the logs that you want to send to Sentinel. |
29 | 27 |
|
30 | | -4. **Select Log Analytics Workspace**: |
31 | | - - Under the **Destination details**, choose **Send to Log Analytics**. |
32 | | - - Select the appropriate Log Analytics workspace where you want the logs to be sent. |
| 28 | +4. **Select Log Analytics workspace**: |
| 29 | + - Under **Destination details**, select **Send to Log Analytics**. |
| 30 | + - Select the appropriate Log Analytics workspace that you want to send the logs to. |
33 | 31 |
|
34 | | -5. **Save Configuration**: |
35 | | - - Review your settings and click **Save** to apply the changes. |
| 32 | +5. **Save configuration**: |
| 33 | + - Review your settings, and select **Save** to apply the changes. |
36 | 34 |
|
37 | | -6. **Verify Data Transfer**: |
38 | | - - Use the following query in your Log Analytics workspace to verify data transfer: |
| 35 | +6. **Verify data transfer**: |
| 36 | + - Use the following query in your Log Analytics workspace to verify the data transfer: |
39 | 37 |
|
40 | 38 | ```plaintext |
41 | 39 | AzureActivity | where SubscriptionId contains "<YourSubscriptionId>" |
42 | 40 | ``` |
43 | 41 |
|
44 | | -### Common Issues and Solutions |
| 42 | +### Common issues and solutions |
45 | 43 |
|
46 | 44 | - **Issue**: Logs are not appearing in Sentinel. |
47 | | - - **Solution**: Ensure that the correct Log Analytics workspace is selected and that the Diagnostic Settings are properly configured. |
| 45 | + - **Solution**: Make sure that the correct Log Analytics workspace is selected and that the diagnostic settings are correctly configured. |
48 | 46 |
|
49 | | -## Reference |
| 47 | +## References |
50 | 48 |
|
51 | 49 | - [Azure Sentinel Data Connectors Reference](https://learn.microsoft.com/azure/sentinel/data-connectors-reference) |
52 | 50 | - [Azure Monitor Diagnostic Settings](https://learn.microsoft.com/azure/azure-monitor/platform/diagnostic-settings?tabs=CMD) |
53 | 51 | - [Connect Services via Diagnostic Setting-Based Connector](https://learn.microsoft.com/azure/sentinel/connect-services-diagnostic-setting-based#connect-via-a-diagnostic-setting-based-connector-managed-by-azure-policy) |
54 | 52 | - [Diagnostic settings in Azure Monitor](https://learn.microsoft.com/azure/azure-monitor/platform/diagnostic-settings#time-before-telemetry-gets-to-destination) |
55 | 53 |
|
56 | | -If the issue persists after following the solution steps, please open a support case for further assistance. |
| 54 | +[!INCLUDE [Azure Help Support](../../../includes/azure-help-support.md)] |
0 commit comments