Skip to content

Commit 89f17bc

Browse files
Update per template, in progress.
1 parent c4427ca commit 89f17bc

File tree

2 files changed

+65
-95
lines changed

2 files changed

+65
-95
lines changed

articles/bastion/monitor-bastion-reference.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Monitoring data reference for Azure Bastion
33
description: This article contains important reference material you need when you monitor Azure Bastion by using Azure Monitor.
4-
ms.date: 08/02/2024
4+
ms.date: 12/02/2024
55
ms.custom: horz-monitor
66
ms.topic: reference
77
author: cherylmc

articles/bastion/monitor-bastion.md

Lines changed: 64 additions & 94 deletions
Original file line numberDiff line numberDiff line change
@@ -1,106 +1,76 @@
11
---
22
title: Monitor Azure Bastion
3-
description: Start here to learn how to monitor Azure Bastion by using Azure Monitor. Learn about available metrics and logs.
4-
ms.date: 08/02/2024
3+
description: Start here to learn how to monitor [TODO-replace-with-service-name].
4+
ms.date: 12/02/2024
55
ms.custom: horz-monitor
66
ms.topic: conceptual
77
author: cherylmc
88
ms.author: cherylmc
99
ms.service: azure-bastion
1010
---
1111

12-
# Monitor Azure Bastion
13-
14-
[!INCLUDE [horz-monitor-intro](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-intro.md)]
15-
16-
[!INCLUDE [horz-monitor-resource-types](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-resource-types.md)]
17-
For more information about the resource types for Azure Bastion, see [Azure Bastion monitoring data reference](monitor-bastion-reference.md).
18-
19-
[!INCLUDE [horz-monitor-data-storage](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-data-storage.md)]
20-
21-
[!INCLUDE [horz-monitor-platform-metrics](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-platform-metrics.md)]
22-
23-
For a list of available metrics for Azure Bastion, see [Azure Bastion monitoring data reference](monitor-bastion-reference.md#metrics).
24-
25-
[!INCLUDE [horz-monitor-resource-logs](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-resource-logs.md)]
26-
27-
For the available resource log categories, their associated Log Analytics tables, and the log schemas for Azure Bastion, see [Azure Bastion monitoring data reference](monitor-bastion-reference.md#resource-logs).
28-
29-
An example entry of successful sign-in from a downloaded json file is shown here for reference:
30-
31-
```json
32-
{
33-
"time":"2019-10-03T16:03:34.776Z",
34-
"resourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.NETWORK/BASTIONHOSTS/MYBASTION-BASTION",
35-
"operationName":"Microsoft.Network/BastionHost/connect",
36-
"category":"BastionAuditLogs",
37-
"level":"Informational",
38-
"location":"eastus",
39-
"properties":{
40-
"userName":"<username>",
41-
"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36",
42-
"clientIpAddress":"131.107.159.86",
43-
"clientPort":24039,
44-
"protocol":"ssh",
45-
"targetResourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.COMPUTE/VIRTUALMACHINES/LINUX-KEY",
46-
"subscriptionId":"<subscripionID>",
47-
"message":"Successfully Connected.",
48-
"resourceType":"VM",
49-
"targetVMIPAddress":"172.16.1.5",
50-
"userEmail":"<userAzureAccountEmailAddress>",
51-
"tunnelId":"<tunnelID>"
52-
},
53-
"FluentdIngestTimestamp":"2019-10-03T16:03:34.0000000Z",
54-
"Region":"eastus",
55-
"CustomerSubscriptionId":"<subscripionID>"
56-
}
57-
```
58-
59-
The following example entry shows an unsuccessful sign-in, such as due to an incorrect username or password:
60-
61-
```json
62-
{
63-
"time":"2019-10-03T16:03:34.776Z",
64-
"resourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.NETWORK/BASTIONHOSTS/MYBASTION-BASTION",
65-
"operationName":"Microsoft.Network/BastionHost/connect",
66-
"category":"BastionAuditLogs",
67-
"level":"Informational",
68-
"location":"eastus",
69-
"properties":{
70-
"userName":"<username>",
71-
"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36",
72-
"clientIpAddress":"131.107.159.86",
73-
"clientPort":24039,
74-
"protocol":"ssh",
75-
"targetResourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.COMPUTE/VIRTUALMACHINES/LINUX-KEY",
76-
"subscriptionId":"<subscripionID>",
77-
"message":"Login Failed",
78-
"resourceType":"VM",
79-
"targetVMIPAddress":"172.16.1.5",
80-
"userEmail":"<userAzureAccountEmailAddress>",
81-
"tunnelId":"<tunnelID>"
82-
},
83-
"FluentdIngestTimestamp":"2019-10-03T16:03:34.0000000Z",
84-
"Region":"eastus",
85-
"CustomerSubscriptionId":"<subscripionID>"
86-
}
87-
```
88-
89-
[!INCLUDE [horz-monitor-activity-log](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-activity-log.md)]
90-
91-
[!INCLUDE [horz-monitor-analyze-data](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-analyze-data.md)]
92-
93-
[!INCLUDE [horz-monitor-external-tools](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-external-tools.md)]
94-
95-
[!INCLUDE [horz-monitor-kusto-queries](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-kusto-queries.md)]
96-
97-
[!INCLUDE [horz-monitor-alerts](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-alerts.md)]
98-
99-
### Azure Bastion alert rules
100-
101-
You can set alerts for any metric, log entry, or activity log entry listed in the [Azure Bastion monitoring data reference](monitor-bastion-reference.md).
102-
103-
[!INCLUDE [horz-monitor-advisor-recommendations](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-advisor-recommendations.md)]
12+
<!--
13+
According to the Content Pattern guidelines all comments must be removed before publication!!!
14+
IMPORTANT
15+
To make this template easier to use, first:
16+
1. Search and replace [TODO-replace-with-service-name] with the official name of your service.
17+
2. Search and replace [TODO-replace-with-service-filename] with the service name to use in GitHub filenames.-->
18+
19+
<!-- VERSION 4.0 November 2024
20+
For background about this template, see https://review.learn.microsoft.com/en-us/help/contribute/contribute-monitoring?branch=main -->
21+
22+
<!-- All sections are required unless otherwise noted. Add service-specific information after the includes.
23+
Your service should have the following two articles:
24+
1. The overview monitoring article (based on this template)
25+
- Title: "Monitor [TODO-replace-with-service-name]"
26+
- TOC title: "Monitor"
27+
- Filename: "monitor-[TODO-replace-with-service-filename].md"
28+
2. A reference article that lists all the metrics and logs for your service (based on the template data-reference-template.md).
29+
- Title: "[TODO-replace-with-service-name] monitoring data reference"
30+
- TOC title: "Monitoring data reference"
31+
- Filename: "monitor-[TODO-replace-with-service-filename]-reference.md".
32+
-->
33+
34+
# Monitor Azure Bastion
35+
36+
<!-- Intro -->
37+
[!INCLUDE [azmon-horz-intro](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-intro.md)]
38+
39+
## Collect data with Azure Monitor
40+
41+
This table describes how you can collect data to monitor your service, and what you can do with the data once collected:
42+
43+
|Data to collect|Description|How to collect and route the data|Where to view the data|Supported data|
44+
|---------|---------|---------|---------|---------|
45+
|Metric data|Metrics are numerical values that describe an aspect of a system at a particular point in time. Metrics can be aggregated using algorithms, compared to other metrics, and analyzed for trends over time.|[- Collected automatically at regular intervals.</br> - You can route some platform metrics to a Log Analytics workspace to query with other data. Check the **DS export** setting for each metric to see if you can use a diagnostic setting to route the metric data.]|[Metrics explorer](/azure/azure-monitor/essentials/metrics-getting-started)| [Azure Bastion metrics supported by Azure Monitor](/azure/bastion/monitor-bastion-reference#metrics)|
46+
|Resource log data|Logs are recorded system events with a timestamp. Logs can contain different types of data, and be structured or free-form text. You can route resource log data to Log Analytics workspaces for querying and analysis.|[Create a diagnostic setting](/azure/azure-monitor/essentials/create-diagnostic-settings) to collect and route resource log data.| [Log Analytics](/azure/azure-monitor/learn/quick-create-workspace)|[Azure Bastion resource log data supported by Azure Monitor](/azure/bastion/monitor-bastion-reference#resource-logs) |
47+
|Activity log data|The Azure Monitor activity log provides insight into subscription-level events. The activity log includes information like when a resource is modified or a virtual machine is started.|- Collected automatically.</br> - [Create a diagnostic setting](/azure/azure-monitor/essentials/create-diagnostic-settings) to a Log Analytics workspace at no charge.|[Activity log](/azure/azure-monitor/essentials/activity-log)| |
48+
49+
[!INCLUDE [azmon-horz-supported-data](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-supported-data.md)]
50+
51+
## Built in monitoring for Azure Bastion
52+
53+
<!-- Add any monitoring mechanisms build in to your service here. -->
54+
55+
<!--## Use Azure Monitor tools to analyze the data-->
56+
[!INCLUDE [azmon-horz-tools](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-tools.md)]
57+
58+
<!--## Export Azure Monitor data -->
59+
[!INCLUDE [azmon-horz-export-data](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-export-data.md)]
60+
61+
<!--## Use Kusto queries to analyze log data -->
62+
[!INCLUDE [azmon-horz-kusto](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-kusto.md)]
63+
64+
<!-- ## Use Azure Monitor alerts to notify you of issues -->
65+
[!INCLUDE [azmon-horz-alerts-part-one](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-alerts-part-one.md)]
66+
67+
<!-- Add any recommended alert rules here. -->
68+
69+
70+
[!INCLUDE [azmon-horz-alerts-part-two](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-alerts-part-two.md)]
71+
72+
<!-- ## Get personalized recommendations using Azure Advisor -->
73+
[!INCLUDE [azmon-horz-advisor](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-advisor.md)]
10474

10575
## Related content
10676

0 commit comments

Comments
 (0)