|
1 | 1 | ---
|
2 | 2 | title: Monitor Azure Bastion
|
3 |
| -description: Start here to learn how to monitor Azure Bastion by using Azure Monitor. Learn about available metrics and logs. |
4 |
| -ms.date: 08/02/2024 |
| 3 | +description: Start here to learn how to monitor [TODO-replace-with-service-name]. |
| 4 | +ms.date: 12/02/2024 |
5 | 5 | ms.custom: horz-monitor
|
6 | 6 | ms.topic: conceptual
|
7 | 7 | author: cherylmc
|
8 | 8 | ms.author: cherylmc
|
9 | 9 | ms.service: azure-bastion
|
10 | 10 | ---
|
11 | 11 |
|
12 |
| -# Monitor Azure Bastion |
13 |
| - |
14 |
| -[!INCLUDE [horz-monitor-intro](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-intro.md)] |
15 |
| - |
16 |
| -[!INCLUDE [horz-monitor-resource-types](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-resource-types.md)] |
17 |
| -For more information about the resource types for Azure Bastion, see [Azure Bastion monitoring data reference](monitor-bastion-reference.md). |
18 |
| - |
19 |
| -[!INCLUDE [horz-monitor-data-storage](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-data-storage.md)] |
20 |
| - |
21 |
| -[!INCLUDE [horz-monitor-platform-metrics](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-platform-metrics.md)] |
22 |
| - |
23 |
| -For a list of available metrics for Azure Bastion, see [Azure Bastion monitoring data reference](monitor-bastion-reference.md#metrics). |
24 |
| - |
25 |
| -[!INCLUDE [horz-monitor-resource-logs](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-resource-logs.md)] |
26 |
| - |
27 |
| -For the available resource log categories, their associated Log Analytics tables, and the log schemas for Azure Bastion, see [Azure Bastion monitoring data reference](monitor-bastion-reference.md#resource-logs). |
28 |
| - |
29 |
| -An example entry of successful sign-in from a downloaded json file is shown here for reference: |
30 |
| - |
31 |
| -```json |
32 |
| -{ |
33 |
| -"time":"2019-10-03T16:03:34.776Z", |
34 |
| -"resourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.NETWORK/BASTIONHOSTS/MYBASTION-BASTION", |
35 |
| -"operationName":"Microsoft.Network/BastionHost/connect", |
36 |
| -"category":"BastionAuditLogs", |
37 |
| -"level":"Informational", |
38 |
| -"location":"eastus", |
39 |
| -"properties":{ |
40 |
| - "userName":"<username>", |
41 |
| - "userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36", |
42 |
| - "clientIpAddress":"131.107.159.86", |
43 |
| - "clientPort":24039, |
44 |
| - "protocol":"ssh", |
45 |
| - "targetResourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.COMPUTE/VIRTUALMACHINES/LINUX-KEY", |
46 |
| - "subscriptionId":"<subscripionID>", |
47 |
| - "message":"Successfully Connected.", |
48 |
| - "resourceType":"VM", |
49 |
| - "targetVMIPAddress":"172.16.1.5", |
50 |
| - "userEmail":"<userAzureAccountEmailAddress>", |
51 |
| - "tunnelId":"<tunnelID>" |
52 |
| -}, |
53 |
| -"FluentdIngestTimestamp":"2019-10-03T16:03:34.0000000Z", |
54 |
| -"Region":"eastus", |
55 |
| -"CustomerSubscriptionId":"<subscripionID>" |
56 |
| -} |
57 |
| -``` |
58 |
| - |
59 |
| -The following example entry shows an unsuccessful sign-in, such as due to an incorrect username or password: |
60 |
| - |
61 |
| -```json |
62 |
| -{ |
63 |
| -"time":"2019-10-03T16:03:34.776Z", |
64 |
| -"resourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.NETWORK/BASTIONHOSTS/MYBASTION-BASTION", |
65 |
| -"operationName":"Microsoft.Network/BastionHost/connect", |
66 |
| -"category":"BastionAuditLogs", |
67 |
| -"level":"Informational", |
68 |
| -"location":"eastus", |
69 |
| -"properties":{ |
70 |
| - "userName":"<username>", |
71 |
| - "userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36", |
72 |
| - "clientIpAddress":"131.107.159.86", |
73 |
| - "clientPort":24039, |
74 |
| - "protocol":"ssh", |
75 |
| - "targetResourceId":"/SUBSCRIPTIONS/<subscripionID>/RESOURCEGROUPS/MYBASTION/PROVIDERS/MICROSOFT.COMPUTE/VIRTUALMACHINES/LINUX-KEY", |
76 |
| - "subscriptionId":"<subscripionID>", |
77 |
| - "message":"Login Failed", |
78 |
| - "resourceType":"VM", |
79 |
| - "targetVMIPAddress":"172.16.1.5", |
80 |
| - "userEmail":"<userAzureAccountEmailAddress>", |
81 |
| - "tunnelId":"<tunnelID>" |
82 |
| -}, |
83 |
| -"FluentdIngestTimestamp":"2019-10-03T16:03:34.0000000Z", |
84 |
| -"Region":"eastus", |
85 |
| -"CustomerSubscriptionId":"<subscripionID>" |
86 |
| -} |
87 |
| -``` |
88 |
| - |
89 |
| -[!INCLUDE [horz-monitor-activity-log](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-activity-log.md)] |
90 |
| - |
91 |
| -[!INCLUDE [horz-monitor-analyze-data](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-analyze-data.md)] |
92 |
| - |
93 |
| -[!INCLUDE [horz-monitor-external-tools](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-external-tools.md)] |
94 |
| - |
95 |
| -[!INCLUDE [horz-monitor-kusto-queries](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-kusto-queries.md)] |
96 |
| - |
97 |
| -[!INCLUDE [horz-monitor-alerts](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-alerts.md)] |
98 |
| - |
99 |
| -### Azure Bastion alert rules |
100 |
| - |
101 |
| -You can set alerts for any metric, log entry, or activity log entry listed in the [Azure Bastion monitoring data reference](monitor-bastion-reference.md). |
102 |
| - |
103 |
| -[!INCLUDE [horz-monitor-advisor-recommendations](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-advisor-recommendations.md)] |
| 12 | +<!-- |
| 13 | +According to the Content Pattern guidelines all comments must be removed before publication!!! |
| 14 | +IMPORTANT |
| 15 | +To make this template easier to use, first: |
| 16 | +1. Search and replace [TODO-replace-with-service-name] with the official name of your service. |
| 17 | +2. Search and replace [TODO-replace-with-service-filename] with the service name to use in GitHub filenames.--> |
| 18 | + |
| 19 | +<!-- VERSION 4.0 November 2024 |
| 20 | +For background about this template, see https://review.learn.microsoft.com/en-us/help/contribute/contribute-monitoring?branch=main --> |
| 21 | + |
| 22 | +<!-- All sections are required unless otherwise noted. Add service-specific information after the includes. |
| 23 | +Your service should have the following two articles: |
| 24 | +1. The overview monitoring article (based on this template) |
| 25 | + - Title: "Monitor [TODO-replace-with-service-name]" |
| 26 | + - TOC title: "Monitor" |
| 27 | + - Filename: "monitor-[TODO-replace-with-service-filename].md" |
| 28 | +2. A reference article that lists all the metrics and logs for your service (based on the template data-reference-template.md). |
| 29 | + - Title: "[TODO-replace-with-service-name] monitoring data reference" |
| 30 | + - TOC title: "Monitoring data reference" |
| 31 | + - Filename: "monitor-[TODO-replace-with-service-filename]-reference.md". |
| 32 | +--> |
| 33 | + |
| 34 | +# Monitor Azure Bastion |
| 35 | + |
| 36 | +<!-- Intro --> |
| 37 | +[!INCLUDE [azmon-horz-intro](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-intro.md)] |
| 38 | + |
| 39 | +## Collect data with Azure Monitor |
| 40 | + |
| 41 | +This table describes how you can collect data to monitor your service, and what you can do with the data once collected: |
| 42 | + |
| 43 | +|Data to collect|Description|How to collect and route the data|Where to view the data|Supported data| |
| 44 | +|---------|---------|---------|---------|---------| |
| 45 | +|Metric data|Metrics are numerical values that describe an aspect of a system at a particular point in time. Metrics can be aggregated using algorithms, compared to other metrics, and analyzed for trends over time.|[- Collected automatically at regular intervals.</br> - You can route some platform metrics to a Log Analytics workspace to query with other data. Check the **DS export** setting for each metric to see if you can use a diagnostic setting to route the metric data.]|[Metrics explorer](/azure/azure-monitor/essentials/metrics-getting-started)| [Azure Bastion metrics supported by Azure Monitor](/azure/bastion/monitor-bastion-reference#metrics)| |
| 46 | +|Resource log data|Logs are recorded system events with a timestamp. Logs can contain different types of data, and be structured or free-form text. You can route resource log data to Log Analytics workspaces for querying and analysis.|[Create a diagnostic setting](/azure/azure-monitor/essentials/create-diagnostic-settings) to collect and route resource log data.| [Log Analytics](/azure/azure-monitor/learn/quick-create-workspace)|[Azure Bastion resource log data supported by Azure Monitor](/azure/bastion/monitor-bastion-reference#resource-logs) | |
| 47 | +|Activity log data|The Azure Monitor activity log provides insight into subscription-level events. The activity log includes information like when a resource is modified or a virtual machine is started.|- Collected automatically.</br> - [Create a diagnostic setting](/azure/azure-monitor/essentials/create-diagnostic-settings) to a Log Analytics workspace at no charge.|[Activity log](/azure/azure-monitor/essentials/activity-log)| | |
| 48 | + |
| 49 | +[!INCLUDE [azmon-horz-supported-data](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-supported-data.md)] |
| 50 | + |
| 51 | +## Built in monitoring for Azure Bastion |
| 52 | + |
| 53 | +<!-- Add any monitoring mechanisms build in to your service here. --> |
| 54 | + |
| 55 | +<!--## Use Azure Monitor tools to analyze the data--> |
| 56 | +[!INCLUDE [azmon-horz-tools](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-tools.md)] |
| 57 | + |
| 58 | +<!--## Export Azure Monitor data --> |
| 59 | +[!INCLUDE [azmon-horz-export-data](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-export-data.md)] |
| 60 | + |
| 61 | +<!--## Use Kusto queries to analyze log data --> |
| 62 | +[!INCLUDE [azmon-horz-kusto](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-kusto.md)] |
| 63 | + |
| 64 | +<!-- ## Use Azure Monitor alerts to notify you of issues --> |
| 65 | +[!INCLUDE [azmon-horz-alerts-part-one](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-alerts-part-one.md)] |
| 66 | + |
| 67 | +<!-- Add any recommended alert rules here. --> |
| 68 | + |
| 69 | + |
| 70 | +[!INCLUDE [azmon-horz-alerts-part-two](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-alerts-part-two.md)] |
| 71 | + |
| 72 | +<!-- ## Get personalized recommendations using Azure Advisor --> |
| 73 | +[!INCLUDE [azmon-horz-advisor](~/reusable-content/ce-skilling/azure/includes/azure-monitor-horizontals/azmon-horz-advisor.md)] |
104 | 74 |
|
105 | 75 | ## Related content
|
106 | 76 |
|
|
0 commit comments