You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/logs/ingest-logs-event-hub.md
+7-9Lines changed: 7 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,8 +12,7 @@ ms.custom: references_regions
12
12
# customer-intent: As a DevOps engineer, I want to ingest data from an event hub into a Log Analytics workspace so that I can monitor logs that I send to Azure Event Hubs.
13
13
---
14
14
15
-
16
-
# Tutorial: Ingest events from Azure Event Hubs into Azure Monitor Logs (Preview)
15
+
# Tutorial: Ingest events from Azure Event Hubs into Azure Monitor Logs (Public Preview)
17
16
18
17
[Azure Event Hubs](../../event-hubs/event-hubs-about.md) is a big data streaming platform that collects events from multiple sources to be ingested by Azure and external services. This article explains how to ingest data directly from an event hub into a Log Analytics workspace.
19
18
@@ -325,6 +324,7 @@ To ingest data into a [supported Azure table](../logs/logs-ingestion-api-overvie
325
324
To: `"outputStream": "outputStream": "[concat(Microsoft-', parameters('tableName'))]"`
326
325
327
326
1. In `transformKql`, [define a transformation](../essentials/data-collection-transformations-structure.md#transformation-structure) that sends the ingested data into the target columns in the destination Azure table.
327
+
328
328
## Grant the event hub permission to the data collection rule
329
329
330
330
With [managed identity](../../active-directory/managed-identities-azure-resources/overview.md), you can give any event hub, or Event Hubs namespace, permission to send events to the data collection rule and data collection endpoint you created. When you grant the permissions to the Event Hubs namespace, all event hubs within the namespace inherit the permissions.
@@ -337,16 +337,14 @@ With [managed identity](../../active-directory/managed-identities-azure-resource
337
337
338
338
:::image type="content" source="media/ingest-logs-event-hub/event-hub-data-receiver-role-assignment.png" lightbox="media/ingest-logs-event-hub/event-hub-data-receiver-role-assignment.png" alt-text="Screenshot that shows the Add Role Assignment screen for the event hub with the Azure Event Hubs Data Receiver role highlighted.":::
339
339
340
-
3. Select **User, group, or service principal** for **Assign access to** and click **Select members**. Select your DCR and click **Select**.
341
-
342
-
:::image type="content" source="media/ingest-logs-event-hub/event-hub-add-role-assignment-select-member.png" lightbox="media/ingest-logs-event-hub/event-hub-add-role-assignment-select-member.png" alt-text="Screenshot that shows the Members tab of the Add Role Assignment screen.":::
340
+
1. Select **Managed identity** for **Assign access to** and click **Select members**. Select **Data collection rule**, search your DCR by name and click **Select**.
343
341
342
+
[](media/ingest-logs-event-hub/assign-access-to-managed-identity.png#lightbox)
344
343
345
344
4. Select **Review + assign** and verify the details before saving your role assignment.
346
345
347
346
:::image type="content" source="media/ingest-logs-event-hub/event-hub-add-role-assignment-save.png" lightbox="media/ingest-logs-event-hub/event-hub-add-role-assignment-save.png" alt-text="Screenshot that shows the Review and Assign tab of the Add Role Assignment screen.":::
348
347
349
-
350
348
## Associate the data collection rule with the event hub
351
349
352
350
The final step is to associate the data collection rule to the event hub from which you want to collect events.
@@ -414,7 +412,6 @@ To create a data collection rule association in the Azure portal:
414
412
415
413
1. Select **Review + create** and then **Create** when you review the details.
416
414
417
-
418
415
## Check your destination table for ingested events
419
416
420
417
Now that you've associated the data collection rule with your event hub, Azure Monitor Logs will ingest all existing events whose [retention period](/azure/event-hubs/event-hubs-features#event-retention) hasn't expired and all new events.
@@ -429,9 +426,8 @@ To check your destination table for ingested events:
429
426
```
430
427
431
428
You should see events from your event hub.
432
-
`
433
-
:::image type="content" source="media/ingest-logs-event-hub/log-analytics-query-results-with-events.png" lightbox="media/ingest-logs-event-hub/log-analytics-query-results-with-events.png" alt-text="Screenshot showing the results of a simple query on a custom table. The results consist of events ingested from an event hub.":::
434
429
430
+
:::image type="content" source="media/ingest-logs-event-hub/log-analytics-query-results-with-events.png" lightbox="media/ingest-logs-event-hub/log-analytics-query-results-with-events.png" alt-text="Screenshot showing the results of a simple query on a custom table. The results consist of events ingested from an event hub.":::
435
431
## Clean up resources
436
432
437
433
In this tutorial, you created the following resources:
@@ -457,3 +453,5 @@ Learn more about to:
457
453
- [Create a custom table](../logs/create-custom-table.md#create-a-custom-table).
458
454
- [Create a data collection endpoint](../essentials/data-collection-endpoint-overview.md#create-a-data-collection-endpoint).
459
455
- [Update an existing data collection rule](../essentials/data-collection-rule-edit.md).
0 commit comments