You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[Azure Key Vault](https://learn.microsoft.com/en-us/azure/iot-hub/iot-concepts-and-iot-hub) is a managed service hosted in the cloud that acts as a central message hub for communication between an IoT application and its attached devices. This integration helps in comprehensive monitoring of your key vaults requests, performance, failures, and latency.
11
+
[Azure Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/general/overview) is a managed service hosted in the cloud that acts as a central message hub for communication between an IoT application and its attached devices. This integration helps in comprehensive monitoring of your key vaults requests, performance, failures, and latency.
12
12
13
13
## Log and metric types
14
14
15
15
For Azure Key Vault, you can collect the following logs and metrics:
16
16
17
-
***Resource logs**. To learn more about the different resource log category types and schemas collected for Azure Key Vault, refer to [Azure documentation](https://learn.microsoft.com/en-gb/azure/key-vault/general/monitor-key-vault-reference#resource-logs).
18
-
***Key Vault Metrics**. These metrics are available in [Microsoft.KeyVault/vaults](https://learn.microsoft.com/en-gb/azure/azure-monitor/essentials/metrics-supported#microsoftkeyvaultvaults) namespace.
19
-
***Managed HSM Metrics**. These metrics are available in [Microsoft.KeyVault/managedhsms](https://learn.microsoft.com/en-gb/azure/azure-monitor/essentials/resource-logs-categories#microsoftkeyvaultmanagedhsms) namespace.
17
+
***Resource logs**. To learn more about the different resource log category types and schemas collected for Azure Key Vault, refer to [Azure documentation](https://learn.microsoft.com/en-us/azure/key-vault/general/monitor-key-vault-reference#resource-logs).
18
+
***Key Vault Metrics**. These metrics are available in [Microsoft.KeyVault/vaults](https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-keyvault-vaults-metrics) namespace.
19
+
***Managed HSM Metrics**. These metrics are available in [Microsoft.KeyVault/managedhsms](https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-keyvault-managedhsms-metrics) namespace.
20
20
21
21
For more information on supported metrics and their units, refer to the [Azure documentation](https://learn.microsoft.com/en-gb/azure/key-vault/general/monitor-key-vault-reference#key-vault-metrics).
22
22
@@ -33,25 +33,96 @@ When you configure the event hubs source or HTTP source, plan your source catego
33
33
34
34
### Configure metrics collection
35
35
36
-
In this section, you will configure a pipeline for shipping metrics from Azure Monitor to an Event Hub, on to an Azure Function, and finally to an HTTP Source on a hosted collector in Sumo Logic.
36
+
:::note
37
+
Sumo Logic Metrics source is currently in Beta, to participate, contact your Sumo Logic account executive.
38
+
:::
37
39
38
-
1. Create hosted collector and tag tenant_name field. You can get the tenant name using the instructions [here](https://learn.microsoft.com/en-us/azure/active-directory-b2c/tenant-management-read-tenant-name#get-your-tenant-name). <br/><img src={useBaseUrl('img/integrations/microsoft-azure/Azure-Storage-Tag-Tenant-Name.png')} alt="Azure Tag Tenant Name" style={{border: '1px solid gray'}} width="500" />
39
-
1.[Configure an HTTP Source](/docs/send-data/collect-from-other-data-sources/azure-monitoring/collect-metrics-azure-monitor/#step-1-configure-an-http-source).
40
-
1.[Configure and deploy the ARM Template](/docs/send-data/collect-from-other-data-sources/azure-monitoring/collect-metrics-azure-monitor/#step-2-configure-azure-resources-using-arm-template).
41
-
1.[Export metrics to Event Hub](/docs/send-data/collect-from-other-data-sources/azure-monitoring/collect-metrics-azure-monitor/#step-3-export-metrics-for-a-particular-resource-to-event-hub). Perform below steps for each Key Vault that you want to monitor.
42
-
* Choose `Stream to an event hub` as destination.
43
-
* Select `AllMetrics`.
44
-
* Use the Event hub namespace created by the ARM template in Step 2 above. You can create a new Event hub or use the one created by ARM template. You can use the default policy `RootManageSharedAccessKey` as the policy name.
40
+
1. To set up the Azure Metrics source in Sumo Logic, refer to the shared beta documentation.
41
+
1. In the Sumo Logic Azure Metrics source configuration, configure namespaces as `Microsoft.KeyVault/vaults` and `Microsoft.KeyVault/managedhsms`.
In this section, you will configure a pipeline for shipping diagnostic logs from Azure Monitor to an Event Hub.
49
-
47
+
#### Diagnostic logs
50
48
1. To set up the Azure Event Hubs source in Sumo Logic, refer to [Azure Event Hubs Source for Logs](/docs/send-data/collect-from-other-data-sources/azure-monitoring/ms-azure-event-hubs-source/).
51
-
2. To create the Diagnostic settings in Azure portal, refer to the [Azure documentation](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/diagnostic-settings?tabs=portal#create-diagnostic-settings) for Key Vault resource. Perform below steps for each Key Vault that you want to monitor.
52
-
* Choose `Stream to an event hub` as the destination.
53
-
* Select `allLogs`.
54
-
* Use the Event hub namespace and Event hub name configured in previous step in destination details section. You can use the default policy `RootManageSharedAccessKey` as the policy name.
49
+
1. To create the Diagnostic settings in Azure portal, refer to the [Azure documentation](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/diagnostic-settings?tabs=portal#create-diagnostic-settings). Perform the steps below for each Azure Key Vault namespace that you want to monitor.
50
+
1. Choose `Stream to an event hub` as the destination.
51
+
1. Select `allLogs`.
52
+
1. Use the Event Hub namespace and Event Hub name configured in the previous step in the destination details section. You can use the default policy `RootManageSharedAccessKey` as the policy name.<br/><img src={useBaseUrl('img/send-data/azure-eventgrid-logs.png')} alt="Azure Event Grid logs" style={{border: '1px solid gray'}} width="800" />
53
+
1. Tag the location field in the source with the right location value. <br/><img src={useBaseUrl('img/integrations/microsoft-azure/Azure-Storage-Tag-Location.png')} alt="Azure Key Vaults Tag Location" style={{border: '1px solid gray'}} width="400" />
54
+
55
+
#### Activity Logs
56
+
57
+
To collect activity logs, refer to the [Collecting Logs for the Azure Audit App from Event Hub](/docs/integrations/microsoft-azure/audit) section in the Azure Audit documentation. Do not perform this step in case you are already collecting activity logs for a subscription.
58
+
:::note
59
+
Since this source contains logs from multiple regions, make sure that you do not tag this source with the location tag.
60
+
:::
61
+
62
+
## Viewing the Azure Key Vault dashboards
63
+
64
+
import ViewDashboards from '../../reuse/apps/view-dashboards.md';
65
+
66
+
<ViewDashboards/>
67
+
68
+
### Overview
69
+
70
+
**Azure Key Vaults - Overview** dashboard allows you to monitor and analyze your key vault's usage metrics, including API hits, vault usage, and average latencies. Gain insights into the performance of your vaults.
**Azure Key Vaults - Operations** Overview dashboard provides insights of operational logs for your key vaults. Monitor key, secret, and certificate operations, including creation, storage, deletion, retrieval, setting, and recovery. Gain insights into key activities for effective management.
**Azure Key Vaults - Operations Detailed** dashboard provides insights of operational logs for your key vaults. Monitor key, secret, and certificate operations, including creation, storage, deletion, retrieval, setting, and recovery in detailed views. Gain insights into key activities for effective management.
**Azure Key Vaults - Errors and Failures** dashboard provides detailed information on what is happening (errors or recent failure events) in a Key Vault.
**Azure Key Vaults - Administrative Operations** dashboard provides details on the operational activities and status of your Azure Key Vaults resources Use this dashboard to monitor the distribution of operation types and their success rates to ensure proper functioning of your Key Vaults. Identify potential issues by analyzing the top operations causing errors and correlating them with specific users or applications. Track recent write and delete operations to maintain an audit trail of changes made to your Key Vaults.
**Azure Key Vaults - Policy and Recommendations** dashboard provides details on policy events and recommendations for your Azure Key Vaults resources. Use this dashboard to monitor the success and failure rates of policy events to ensure proper configuration and compliance. Track and analyse recent recommendations to improve the performance and security of your Vaults setup. Identify trends in policy events and recommendations over time to proactively address potential issues.
**Azure Key Vaults - Vault Health** dashboard allows you to monitor and analyze your key vault's usage metrics, including API hits, vault usage, and average latencies. Gain insights into the health of your vaults.
**Azure Key Vaults - Compliance** dashboard provides detailed information on what is happening with polices and compliance related events in a Key Vault and gives an overview of the objects (Keys, Secrets, etc) are adhering to specific compliance and policies in Azure.
|`Azure Key Vaults - Availability drops below 100%`| This alert is triggered when availability drops under 100% are detected for any Key Vaults. | Count < 100 | Count = 100 |
122
+
|`Azure Key Vaults - Keys, Secrets, Certificates Expired Alert`| This alert triggers when any Keys, Secrets, or Certificates have expired for any Key Vaults. | Count >= 1 | Count < 1 |
123
+
|`Azure Key Vaults - Keys, Secrets, Certificates Near Expiry Alert`| This alert triggers when any Keys, Secrets, or Certificates are near expiry for any Key Vaults. | Count >= 1 | Count < 1 |
124
+
|`Azure Key Vaults - Latency is greater than 1000 ms`| This alert is triggered when latency of Vaults goes above 1000ms. | Count >= 1000 | Count < 1000 |
125
+
|`Azure Key Vaults - Overall Vault Saturation is greater than 75%`| This alert is triggered when Overall vault saturation of any vaults is greater than 75%. | Count >= 75 | Count < 75 |
Copy file name to clipboardExpand all lines: docs/integrations/sumo-apps/kickstart-data.md
+27-4Lines changed: 27 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,18 +33,41 @@ import ViewDashboards from '../../reuse/apps/view-dashboards.md';
33
33
34
34
<ViewDashboards/>
35
35
36
-
### Application Health
36
+
### Sumo Logic Kickstart Data - Application Health
37
37
38
-
The **Sumo Logic Kickstart Data - Application Health** dashboard provides a comprehensive view of the application's performance and operational metrics. It includes key indicators such as CPU and memory usage, transaction times for checkouts and payments, error rates, and service latency. Additionally, it displays deployment logs, user journeys, and error logs, allowing users to quickly identify issues and monitor the overall health of the application.
38
+
The **Sumo Logic Logic Kickstart Data - Application Health** dashboard provides details on user journey, interface performance, and internal server metrics for an e-commerce application.
39
+
40
+
Use this dashboard to:
41
+
* Monitor the user journey funnel from home page visits to completed payments, identifying potential drop-off points in the conversion process.
42
+
* Track key performance indicators such as page load times, transaction times, and error rates for critical application components like the home page, checkout, and payment processes.
43
+
* Correlate spikes in transaction times with potential increases in errors to quickly identify and troubleshoot performance issues affecting user experience.
44
+
* Analyze the relationship between order volumes and order transaction times to ensure the internal server can handle peak loads efficiently.
The **Sumo Logic Kickstart Data - Business KPIs** dashboard provides details on revenue metrics, geographical distribution, and user journey time for business performance analysis.
43
51
44
-
The **Sumo Logic Kickstart Data - Business KPIs** dashboard focuses on critical business performance metrics. It tracks customer satisfaction, support tickets, revenue trends, and promotional offers redeemed. This dashboard also monitors customer churn rates and cart abandonment rates, providing insights into user engagement and revenue distribution globally. These metrics help businesses make informed decisions to enhance customer experiences and drive growth.
52
+
Use this dashboard to:
53
+
* Monitor revenue trends and forecast future earnings to make informed business decisions.
54
+
* Analyze revenue distribution across different geographical regions to identify high-performing markets and areas for expansion.
55
+
* Compare actual user journey time against expected values to optimize user experience and identify potential bottlenecks in the customer flow.
56
+
* Correlate revenue trends with user journey time to understand how user experience impacts business performance.
The **Sumo Logic Kickstart Data - Security** dashboard provides details on security events and failed sign-in attempts across multiple geographical locations. This dashboard enables users to monitor and analyze security-related data in real-time.
63
+
64
+
Use this dashboard to:
65
+
* Identify potential security threats by visualizing the geolocation of clients and the volume of activity from different regions.
66
+
* Compare failed sign-in events between today and yesterday for specific user accounts, helping to detect unusual patterns or potential brute-force attacks.
67
+
* Monitor the total number of failed sign-in events over the last 6 hours, allowing for quick identification of spikes in unsuccessful login attempts.
The chart in this section shows metric query results with the `fillmissing` operator with the `empty` option. Note that empty time slices are not filled with a derived data point.
Copy file name to clipboardExpand all lines: docs/platform-services/automation-service/app-central/integrations/servicenow-v2.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,7 +22,7 @@ ServiceNow V2 SaaS is for technical management support - create, update, and gat
22
22
23
23
## ServiceNow V2 in Automation Service and Cloud SOAR
24
24
25
-
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).2.png')}
25
+
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
26
26
1. After the list of the integrations appears, search for the integration and click on the row.
27
27
1. The integration details will appear. Click on the **"+"** button to add new Resource.<br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/servicenow-v2/servicenow-v2-3.png')} style={{border:'1px solid gray'}} alt="servicenow" width="400"/>
0 commit comments