You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/platform/service-providers.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: Azure Monitor for Service Providers | Microsoft Docs
3
-
description: Azure Monitor can help Managed Service Providers (MSPs), large Enterprises, Independent Software Vendors (ISVs) and hosting service providers manage and monitor servers in customer's on-premises or cloud infrastructure.
2
+
title: Azure Monitor Logs for Service Providers | Microsoft Docs
3
+
description: Azure Monitor Logs can help Managed Service Providers (MSPs), large Eenterprises, Independent Software Vendors (ISVs) and hosting service providers manage and monitor servers in customer's on-premises or cloud infrastructure.
4
4
ms.service: azure-monitor
5
5
ms.subservice: logs
6
6
ms.topic: conceptual
@@ -10,7 +10,7 @@ ms.date: 02/03/2020
10
10
11
11
---
12
12
13
-
# Azure Monitor for Service Providers
13
+
# Azure Monitor Logs for Service Providers
14
14
15
15
Log Analytics workspaces in Azure Monitor can help managed service providers (MSPs), large enterprises, independent software vendors (ISVs), and hosting service providers manage and monitor servers in customer's on-premises or cloud infrastructure.
16
16
@@ -33,19 +33,19 @@ In this architecture, a workspace is deployed in the customer's tenant that is u
33
33
There are two ways that service provider administrators can gain access to a Log Analytics workspace in a customer tenant:
34
34
35
35
- A customer can add individual users from the service provider as [Azure Active Directory guest users (B2B)](https://docs.microsoft.com/azure/active-directory/b2b/what-is-b2b). The service provider administrators will have to sign in to each customer's directory in the Azure portal to be able to access these workspaces. This also requires the customers to manage individual access for each service provider administrator.
36
-
- For greater scalability and flexibility, service providers can use the [Azure delegated resource management](https://docs.microsoft.com/azure/lighthouse/concepts/azure-delegated-resource-management) capability of [Azure Lighthouse](https://docs.microsoft.com/azure/lighthouse/overview) to access the customer’s tenant. With this method, the service provider administrators are included in an Azure AD user group in the service provider’s tenant, and this group is granted access during the onboarding process for each customer. These administrators can then access each customer’s workspaces from within their own service provider tenant, rather than having to log into each customer’s tenant individually. Accessing your customers’ Log Analytics workspaces resources in this way reduces the work required on the customer side, and can make it easier to gather and analyze data across multiple customers managed by the same service provider. For more info, see [Monitor customer resources at scale](https://docs.microsoft.com/azure/lighthouse/how-to/monitor-at-scale).
36
+
- For greater scalability and flexibility, service providers can use the [Azure delegated resource management](https://docs.microsoft.com/azure/lighthouse/concepts/azure-delegated-resource-management) capability of [Azure Lighthouse](https://docs.microsoft.com/azure/lighthouse/overview) to access the customer’s tenant. With this method, the service provider administrators are included in an Azure AD user group in the service provider’s tenant, and this group is granted access during the onboarding process for each customer. These administrators can then access each customer’s workspaces from within their own service provider tenant, rather than having to log into each customer’s tenant individually. Accessing your customers’ Log Analytics workspaces resources in this way reduces the work required on the customer side, and can make it easier to gather and analyze data across multiple customers managed by the same service provider via tools such as [Azure Monitor Workbooks](https://docs.microsoft.com/azure//azure-monitor/platform/workbooks-overview). For more info, see [Monitor customer resources at scale](https://docs.microsoft.com/azure/lighthouse/how-to/monitor-at-scale).
37
37
38
38
The advantages of the distributed architecture are:
39
39
40
-
* The customer can manage access to the logs using their own [role-based access](https://docs.microsoft.com/azure/role-based-access-control/overview).
40
+
* The customer can confirm specific levels of permissions via [Azure delegated resource management](https://docs.microsoft.com/azure/lighthouse/concepts/azure-delegated-resource-management), or can manage access to the logs using their own [role-based access](https://docs.microsoft.com/azure/role-based-access-control/overview).
41
+
* Logs can be collected from all types of resources, not just agent-based VM data. For example, Azure Audit Logs.
41
42
* Each customer can have different settings for their workspace such as retention and data capping.
42
43
* Isolation between customers for regulatory and compliancy.
43
44
* The charge for each workspace will be rolled into the customer's subscription.
44
-
* Logs can be collected from all types of resources, not just agent-based. For example, Azure Audit Logs.
45
45
46
46
The disadvantages of the distributed architecture are:
47
47
48
-
*The service provider must use tools such as [Azure Monitor Workbooks](https://docs.microsoft.com/azure//azure-monitor/platform/workbooks-overview)in order to analyze data across its customers.
48
+
*Centrally visualizing and analyzing data across customer tenants with tools such as Azure Monitor Workbooks can result in slower experiences , especially when analyzing data across more than 50+ workspaces.
49
49
* If customers are not onboarded for Azure delegated resource management, service provider administrators must be provisioned in the customer directory, and it is harder for the service provider to manage a large number of customer tenants at once.
50
50
51
51
### 2. Central - Logs are stored in a workspace located in the service provider tenant
Copy file name to clipboardExpand all lines: articles/lighthouse/how-to/monitor-at-scale.md
+4-3Lines changed: 4 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Monitor delegated resources at scale
3
-
description: Learn how to effectively use Azure Monitor in a scalable way across the customer tenants you’re managing.
3
+
description: Learn how to effectively use Azure Monitor Logs in a scalable way across the customer tenants you’re managing.
4
4
ms.date: 02/03/2020
5
5
ms.topic: conceptual
6
6
---
@@ -9,11 +9,11 @@ ms.topic: conceptual
9
9
10
10
As a service provider, you may have onboarded multiple customer tenants for Azure delegated resource management. [Azure Lighthouse](../overview.md) allows service providers to perform operations at scale across several tenants at once, making management tasks more efficient.
11
11
12
-
This topic shows you how to use [Azure Monitor](../../azure-monitor/index.yml) in a scalable way across the customer tenants you’re managing.
12
+
This topic shows you how to use [Azure Monitor Logs](../../azure-monitor/platform/data-platform-logs.md) in a scalable way across the customer tenants you’re managing.
13
13
14
14
## Create Log Analytics workspaces
15
15
16
-
In order to collect data, you’ll need to create Log Analytics workspaces. These Log Analytics workspaces are unique environments for Azure Monitor log data. Each workspace has its own data repository and configuration, and data sources and solutions are configured to store their data in a particular workspace.
16
+
In order to collect data, you’ll need to create Log Analytics workspaces. These Log Analytics workspaces are unique environments for data collected by Azure Monitor. Each workspace has its own data repository and configuration, and data sources and solutions are configured to store their data in a particular workspace.
17
17
18
18
We recommend creating these workspaces directly in the customer tenants. This way their data remains in their tenants rather than being exported into yours. This also allows centralized monitoring of any resources or services supported by Log Analytics, giving you more flexibility on what types of data you monitor.
19
19
@@ -34,4 +34,5 @@ After you've deployed your policies, data will be logged in the Log Analytics wo
34
34
## Next steps
35
35
36
36
- Learn about [Azure Monitor](../../azure-monitor/index.yml).
37
+
- Learn about [Azure Monitor Logs](../../azure-monitor/platform/data-platform-logs.md).
37
38
- Learn about [cross-tenant management experiences](../concepts/cross-tenant-management-experience.md).
0 commit comments