Skip to content

Commit 93dd2bc

Browse files
committed
edit pass: two-azure-backup-articles
1 parent be7c03e commit 93dd2bc

File tree

2 files changed

+29
-29
lines changed

2 files changed

+29
-29
lines changed

articles/backup/backup-azure-diagnostic-events.md

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -9,13 +9,13 @@ ms.date: 10/30/2019
99

1010
Azure Backup sends diagnostics events that can be collected and used for the purposes of analysis, alerting, and reporting.
1111

12-
You can configure diagnostics settings for a Recovery Services vault via the Azure portal by going to the vault and selecting the **Diagnostics settings** menu item. Selecting **+ Add Diagnostic Setting** lets you send one or more diagnostic events to a storage account, an event hub, or a Log Analytics workspace.
12+
You can configure diagnostics settings for a Recovery Services vault via the Azure portal by going to the vault and selecting **Diagnostics settings**. Selecting **+ Add Diagnostic Setting** lets you send one or more diagnostic events to a storage account, an event hub, or a Log Analytics workspace.
1313

1414
![Diagnostics settings pane](./media/backup-azure-diagnostics-events/diagnostics-settings-blade.png)
1515

1616
## Diagnostics events available for Azure Backup users
1717

18-
Azure Backup provides the following diagnostic events. Each event provides detailed data on a specific set of backup-related artifacts:
18+
Azure Backup provides the following diagnostics events. Each event provides detailed data on a specific set of backup-related artifacts:
1919

2020
* CoreAzureBackup
2121
* AddonAzureBackupAlerts
@@ -26,7 +26,7 @@ Azure Backup provides the following diagnostic events. Each event provides detai
2626

2727
For more information, see [Data model for Azure Backup diagnostics events](https://docs.microsoft.com/azure/backup/backup-azure-reports-data-model).
2828

29-
Data for these events can be sent to either a storage account, a Log Analytics workspace, or an event hub. If you're sending this data to a Log Analytics workspace, select the **Resource specific** toggle on the **Diagnostics Setting** screen. For more information, see the following sections.
29+
Data for these events can be sent to either a storage account, a Log Analytics workspace, or an event hub. If you're sending this data to a Log Analytics workspace, select the **Resource specific** toggle on the **Diagnostics settings** screen. For more information, see the following sections.
3030

3131
## Use diagnostics settings with Log Analytics
3232

@@ -45,23 +45,23 @@ To send your vault diagnostics data to Log Analytics:
4545
After data flows into the Log Analytics workspace, dedicated tables for each of these events are created in your workspace. You can query any of these tables directly. You can also perform joins or unions between these tables if necessary.
4646

4747
> [!IMPORTANT]
48-
> The six events, namely, CoreAzureBackup, AddonAzureBackupJobs, AddonAzureBackupAlerts, AddonAzureBackupPolicy, AddonAzureBackupStorage, and AddonAzureBackupProtectedInstance, are supported *only* in the resource-specific mode in [Backup reports](https://docs.microsoft.com/azure/backup/configure-reports). *If you try to send data for these six events in Azure Diagnostics mode, no data will be visible in Backup reports.*
48+
> The six events, namely, CoreAzureBackup, AddonAzureBackupJobs, AddonAzureBackupAlerts, AddonAzureBackupPolicy, AddonAzureBackupStorage, and AddonAzureBackupProtectedInstance, are supported *only* in the resource-specific mode in [Backup reports](https://docs.microsoft.com/azure/backup/configure-reports). *If you try to send data for these six events in Azure diagnostics mode, no data will be visible in Backup reports.*
4949
5050
## Legacy event
5151

52-
Traditionally, all backup-related diagnostics data for a vault were contained in a single event called AzureBackupReport. The six events described here are, in essence, a decomposition of all the data contained in AzureBackupReport.
52+
Traditionally, all backup-related diagnostics data for a vault was contained in a single event called AzureBackupReport. The six events described here are, in essence, a decomposition of all the data contained in AzureBackupReport.
5353

5454
Currently, we continue to support the AzureBackupReport event for backward compatibility in cases where users have existing custom queries on this event. Examples are custom log alerts and custom visualizations. *We recommend that you move to the [new events](https://docs.microsoft.com/azure/backup/backup-azure-diagnostic-events#diagnostics-events-available-for-azure-backup-users) as early as possible*. The new events:
5555

5656
- Make the data much easier to work with in log queries.
5757
- Provide better discoverability of schemas and their structure.
5858
- Improve performance across both ingestion latency and query times.
5959

60-
*The legacy event in Azure Diagnostics mode will eventually be deprecated. Choosing the new events might help you to avoid complex migrations at a later date*. Our [reporting solution](https://docs.microsoft.com/azure/backup/configure-reports) that uses Log Analytics will also stop supporting data from the legacy event.
60+
*The legacy event in Azure diagnostics mode will eventually be deprecated. Choosing the new events might help you to avoid complex migrations at a later date*. Our [reporting solution](https://docs.microsoft.com/azure/backup/configure-reports) that uses Log Analytics will also stop supporting data from the legacy event.
6161

62-
### Steps to move to new diagnostics settings (to Log Analytics workspace)
62+
### Steps to move to new diagnostics settings for a Log Analytics workspace
6363

64-
1. Identify which vaults are sending data to the Log Analytics workspaces by using the legacy event, and the subscriptions they belong to. Run the following workspaces to identify these vaults and subscriptions.
64+
1. Identify which vaults are sending data to the Log Analytics workspaces by using the legacy event and the subscriptions they belong to. Run the following workspaces to identify these vaults and subscriptions.
6565

6666
````Kusto
6767
let RangeStart = startofday(ago(3d));
@@ -89,14 +89,14 @@ Currently, we continue to support the AzureBackupReport event for backward compa
8989
| project ResourceId, SubscriptionId, VaultName
9090
````
9191
92-
1. Use the [built-in Azure policy](https://docs.microsoft.com/azure/backup/azure-policy-configure-diagnostics) in Azure Backup to add a new diagnostics setting for all vaults in a specified scope. This policy adds a new diagnostics setting to vaults that either do not have a diagnostics setting or have only a legacy diagnostics setting. This policy can be assigned to an entire subscription or resource group at one time. You must have Owner access to each subscription for which the policy is assigned.
92+
1. Use the [built-in Azure policy](https://docs.microsoft.com/azure/backup/azure-policy-configure-diagnostics) in Azure Backup to add a new diagnostics setting for all vaults in a specified scope. This policy adds a new diagnostics setting to vaults that either don't have a diagnostics setting or have only a legacy diagnostics setting. This policy can be assigned to an entire subscription or resource group at a time. You must have Owner access to each subscription for which the policy is assigned.
9393
94-
You might choose to have separate diagnostics settings for AzureBackupReport and the six new events until you have migrated all of your custom queries to use data from the new tables. The following image shows an example of a vault that has two diagnostic settings. The first setting, named **Setting1**, sends data of an AzureBackupReport event to a Log Analytics workspace in AzureDiagnostics mode. The second setting, named **Setting2**, sends data of the six new Azure Backup events to a Log Analytics workspace in the resource-specific mode.
94+
You might choose to have separate diagnostics settings for AzureBackupReport and the six new events until you have migrated all of your custom queries to use data from the new tables. The following image shows an example of a vault that has two diagnostic settings. The first setting, named **Setting1**, sends data of an AzureBackupReport event to a Log Analytics workspace in Azure diagnostics mode. The second setting, named **Setting2**, sends data of the six new Azure Backup events to a Log Analytics workspace in the resource-specific mode.
9595
9696
![Two settings](./media/backup-azure-diagnostics-events/two-settings-example.png)
9797
9898
> [!IMPORTANT]
99-
> The AzureBackupReport event is supported *only* in Azure Diagnostics mode. *If you try to send data for this event in the resource-specific mode, no data will flow to the Log Analytics workspace.*
99+
> The AzureBackupReport event is supported *only* in Azure diagnostics mode. *If you try to send data for this event in the resource-specific mode, no data will flow to the Log Analytics workspace.*
100100
101101
> [!NOTE]
102102
> The toggle for **Azure diagnostics** or **Resource specific** appears only if the user selects **Send to Log Analytics**. To send data to a storage account or an event hub, a user selects the required destination and selects the check boxes for any of the desired events, without any additional inputs. Again, we recommend that you do not choose the legacy event AzureBackupReport going forward.
@@ -113,7 +113,7 @@ To summarize:
113113
* If you also want to onboard onto new tables, as we recommend, create a **new** diagnostics setting, select **Resource specific**, and select the six new events.
114114
* If you're currently sending Azure Site Recovery events to Log Analytics, *do not* choose the resource-specific mode for these events. Otherwise, data for these events won't flow into your Log Analytics workspace. Instead, create an additional diagnostic setting, select **Azure diagnostics**, and select the relevant Azure Site Recovery events.
115115
116-
The following image shows an example of a user who has three diagnostic settings for a vault. The first setting, named **Setting1**, sends data from an AzureBackupReport event to a Log Analytics workspace in AzureDiagnostics mode. The second setting, named **Setting2**, sends data from the six new Azure Backup events to a Log Analytics workspace in the resource-specific mode. The third setting, named **Setting3**, sends data from the Azure Site Recovery events to a Log Analytics workspace in Azure diagnostics mode.
116+
The following image shows an example of a user who has three diagnostics settings for a vault. The first setting, named **Setting1**, sends data from an AzureBackupReport event to a Log Analytics workspace in Azure diagnostics mode. The second setting, named **Setting2**, sends data from the six new Azure Backup events to a Log Analytics workspace in the resource-specific mode. The third setting, named **Setting3**, sends data from the Azure Site Recovery events to a Log Analytics workspace in Azure diagnostics mode.
117117
118118
![Three settings](./media/backup-azure-diagnostics-events/three-settings-example.png)
119119

0 commit comments

Comments
 (0)