Skip to content

Commit 46c1b23

Browse files
committed
Update image tagging
1 parent 282dd30 commit 46c1b23

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

docs/send-data/collect-from-other-data-sources/azure-monitoring/azure-event-hubs-source-migration.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ After choosing one of the above two strategies, you will now have an event hub n
4040

4141
## Step 2. Configure parameters for your event hub sources
4242

43-
1. **Create a shared access policy**. You can create it at the namespace level if you have multiple event hubs by selecting **Shared Access Policies** on the left menu of the **Event Hubs Namespace page**.<br/> ![shared-access-policy.png](/img/send-data/shared-access-policy.png)
43+
1. **Create a shared access policy**. You can create it at the namespace level if you have multiple event hubs by selecting **Shared Access Policies** on the left menu of the **Event Hubs Namespace page**.<br/><img src={useBaseUrl('/img/send-data/shared-access-policy.png')} alt="Shared access policy" style={{border: '1px solid gray'}} width="800" />
4444
2. **Create a consumer group**.
4545
1. Go to your **Event Hub**.
4646
2. Select **Consumer groups** on left panel.
@@ -51,7 +51,7 @@ After choosing one of the above two strategies, you will now have an event hub n
5151
Creating **Consumer Groups** is needed only for the customers using the older event hub namespace, see [Existing event hub namespace](#strategy-a-existing-event-hub-namespaces) section in step 1. The default consumer group is already in use by function so we need to create a new one.
5252
:::
5353

54-
![consumer-groups.png](/img/send-data/consumer-groups.png)
54+
<img src={useBaseUrl('img/send-data/consumer-groups.png')} alt="Consumer groups" style={{border: '1px solid gray'}} width="800" />
5555

5656
After completing the above steps, you will have **Azure Event Hubs Namespace**, **Event Hubs Instance Name**, **Shared Access Policy**, and **Consumer Group Name** - all four parameters are required for creating an event hub source.
5757

@@ -71,13 +71,13 @@ After verifying that all the log types are ingesting in your new source, follow
7171

7272
If your resource group contains only resources created by the older ARM template, as shown below, and you have created a new namespace in a different resource group, see [Creating new event hub namespace](#strategy-b-creating-new-event-hub-namespaces) section in step 1.
7373

74-
![resource-groups.png](/img/send-data/resource-groups.png)
74+
<img src={useBaseUrl('img/send-data/resource-groups.png')} alt="Resource groups" style={{border: '1px solid gray'}} width="800" />
7575

7676
1. **Stopping the data flow in older sumo logic source**. To stop the logs export to the older event hub namespace, we need to delete the older diagnostic settings. You can delete them by following the steps below for each of your azure services that are sending logs to sumo.
7777
1. Go to **Azure Portal**.
7878
2. Search for **Diagnostic Settings** in the **Search bar**, it will take you to a page with all the resources which have diagnostic settings.
79-
3. Select your **subscription**, **resource group** (for the azure service whose logs you are ingesting into sumo), and whose diagnostics status is enabled.<br/> ![stopping-dataflow1.png](/img/send-data/stopping-dataflow1.png)
80-
4. Select the resource name (whose logs you are ingesting into sumo) it shows a list of diagnostic settings.<br/> ![diagnostic-settings1.png](/img/send-data/diagnostic-settings1.png)
79+
3. Select your **subscription**, **resource group** (for the azure service whose logs you are ingesting into sumo), and whose diagnostics status is enabled.<br/><img src={useBaseUrl('img/send-data/stopping-dataflow1.png')} alt="Stopping data flow" style={{border: '1px solid gray'}} width="800" />
80+
4. Select the resource name (whose logs you are ingesting into sumo) it shows a list of diagnostic settings.<br/><img src={useBaseUrl('img/send-data/diagnostic-settings1.png')} alt="Diagnostic settings" style={{border: '1px solid gray'}} width="800" />
8181
5. Select the setting whose event hub column matches with your older event hub namespace. Go to **Edit settings** corresponding to that setting and delete it.
8282
2. **Wait for all data to be ingested into Sumo**. The azure function is draining all the logs from the older event hub namespace and sending them to sumo, we will need to wait till it finishes it. You can run a query in sumo with your older source name `(_source=<your older source name>)` and see if all the data has already come into sumo till the date when you deleted the diagnostic settings.
8383
3. **Verify the new source is ingesting logs without any delay**. You can run the below query to verify the latency.
@@ -92,7 +92,7 @@ If your resource group contains only resources created by the older ARM template
9292
:::note
9393
We recommend monitoring the new source for a day to verify the delay.
9494
:::
95-
4. **Deleting Resources**. Once you are sure your older data is in sumo and your new source is working without any latency, you can delete the whole resource group by clicking on the **Delete resource group** button.<br/> ![delete-resource-groups.png](/img/send-data/delete-resource-groups.png)
95+
4. **Deleting Resources**. Once you are sure your older data is in sumo and your new source is working without any latency, you can delete the whole resource group by clicking on the **Delete resource group** button.<br/><img src={useBaseUrl('img/send-data/delete-resource-groups.png')} alt="Delete resource groups" style={{border: '1px solid gray'}} width="800" />
9696

9797
:::note
9898
If you see more resources than the ones shown in the above screenshot you can delete all six individual resources (the ones with the prefix sumo) one by one by selecting each resource and clicking on the **Delete** button at the top bar.
@@ -103,7 +103,7 @@ If your resource group contains only resources created by the older ARM template
103103

104104
1. **Stopping the data flow in older sumo logic source**. The newer source will start collecting data from the point you created the source. You can verify that by running `(_source=<new source name>)` in sumo. After verifying the logs, you can stop the function apps by following the steps below.
105105
1. Go to the resource group, where Sumo Logic’s log collection ARM template was deployed, and select the **SumoAzureLogs** Function app.
106-
2. Click **Stop** at the top bar as shown below.<br/> ![stopping-dataflow2.png](/img/send-data/stopping-dataflow2.png)
106+
2. Click **Stop** at the top bar as shown below.<br/><img src={useBaseUrl('img/send-data/stopping-dataflow2.png')} alt="Stopping data flow" style={{border: '1px solid gray'}} width="800" />
107107
2. **Verify the new source is ingesting logs without any delay**. You can run the below query to verify the latency.
108108
```sql
109109
_source=<new source name>
@@ -118,7 +118,7 @@ If your resource group contains only resources created by the older ARM template
118118
We recommend monitoring the new source for a day to verify the delay.
119119
:::
120120

121-
3. **Deleting Resources**. You can delete all 5 individual resources except the **Event Hub Namespace** (the ones with the prefix sumo) by selecting each resource and clicking on the **Delete** button at the top bar.<br/> ![delete-resource-groups1.png](/img/send-data/delete-resource-groups1.png)
121+
3. **Deleting Resources**. You can delete all 5 individual resources except the **Event Hub Namespace** (the ones with the prefix sumo) by selecting each resource and clicking on the **Delete** button at the top bar.<br/><img src={useBaseUrl('img/send-data/delete-resource-groups1.png')} alt="Delete resource groups" style={{border: '1px solid gray'}} width="800" />
122122

123123
:::note
124124
Before deleting resources, make sure your new source is working without any latency.

0 commit comments

Comments
 (0)