GithubHelp home page GithubHelp logo

t1agob / azuremonitor2syslog Goto Github PK

View Code? Open in Web Editor NEW

This project forked from miguelangelopereira/azuremonitor2syslog

0.0 2.0 0.0 139 KB

Forward Azure monitor logs to syslog (via Event Hub)

License: MIT License

JavaScript 100.00%

azuremonitor2syslog's Introduction

Forward Azure Monitor Logs to Syslog (via Event Hub)

Azure Monitor provides base-level infrastructure metrics and logs for most services in Microsoft Azure. Azure services that do not yet put their data into Azure Monitor will put it there in the future.

Azure monitor allows you to forward monitoring data to eventhub.

A common scenario is to have a centralized SIEM based on syslog. The best option is for the SIEM to integrate directly with Azure monitor (Splunk, IBM QRadar, ArcSight...). If that is not available you can use an Azure Function accomplish this integration.

This project is a sample for testing purpuses.

Overview

alt text

The Azure monitor will send metrics to Event Hub. The Event Hub messages will trigger this Javascript Azure Function that will convert the message to syslog format and send to the correct server.

Note: To send the syslog messages to an internal server in a VNET, configure the Function App with VNET integration.

Usage

  • Create Event Hub and setup Azure monitoring forwarding

  • Create the Function App (v2). Make sure the runtime is Javascript.

  • Import code or setup git deployment

  • In the integrate section of the function, make sure Event Hub connection is pointing to the correct event hub

  • In the Function App Application Settings, create the following App Settings:

    • SYSLOG_HOSTNAME: The source hostname in the syslog message
    • SYSLOG_SERVER: The remote syslog server
    • SYSLOG_PORT: The port syslog service is running
    • SYSLOG_PROTOCOL: TCP or UDP

    Note: Make sure the EventHub function app extension is installed. See: https://github.com/Azure/azure-functions-host/wiki/Updating-your-function-app-extensions

azuremonitor2syslog's People

Contributors

aluncoppack avatar miguelangelopereira avatar

Watchers

 avatar  avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.