Skip to content

Commit 51df66d

Browse files
wjakeleejpipkin1
andauthored
Update audit.md (#5095)
* Update audit.md removing references to old collection arm template that does not exist * Updates from review --------- Co-authored-by: John Pipkin <[email protected]>
1 parent ea00339 commit 51df66d

File tree

1 file changed

+5
-4
lines changed
  • docs/integrations/microsoft-azure

1 file changed

+5
-4
lines changed

docs/integrations/microsoft-azure/audit.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,11 @@ In this step, you configure a pipeline for shipping logs from [Azure Monitor](ht
3030
1. In the **Activity Log** window, click **Export Activity Logs**.<br/><img src={useBaseUrl('img/integrations/microsoft-azure/export-activity-log.png')} style={{border: '1px solid gray'}} alt="activity-log" width="800"/>
3131
1. Select the log type in **Category details** that you want to ingest.
3232
1. Select the **Stream to an event hub** checkbox and then select the following:
33-
* **Subscription.** Pull-down, select a subscription.
34-
* **Event hub namespace.** If you have chosen Method 1 (Azure Event Hubs Source) for collecting logs, select the **EventHubNamespace** created manually, or else if you have chosen Method 2 (Collect logs from Azure monitor using Azure functions), then select `SumoAzureLogsNamespace<UniqueSuffix>` namespace created by the ARM template.
35-
* **Event hub name (optional).** If you have chosen Method 1 (Azure Event Hub Source) for collecting logs, select the event hub name, which you created manually, or if you have chosen Method 2 (Collect logs from Azure monitor using Azure functions), then select **insights-operational-logs**.
36-
* **Event hub policy name.** Leave the default policy, **RootManageSharedAccessKey**, or select another as desired.<br/> <img src={useBaseUrl('img/integrations/microsoft-azure/diagnostic-setting-audit.png')} style={{border: '1px solid gray'}} alt="diagnostic-setting-audit.png" width="800"/>
33+
* **Subscription**. Select a subscription.
34+
* **Event hub namespace**. Select the namespace.
35+
* **Event hub name (optional)**. Select the hub name.
36+
* **Event hub policy name**. Leave the default policy, **RootManageSharedAccessKey**, or select another as desired.
37+
<br/> <img src={useBaseUrl('img/integrations/microsoft-azure/diagnostic-setting-audit.png')} style={{border: '1px solid gray'}} alt="diagnostic-setting-audit.png" width="800"/>
3738
1. Click **Save.**
3839

3940
## Installing the Azure Audit app

0 commit comments

Comments
 (0)