---
title: "Azure Resources (Blob Ingest)"
slug: "azure-resource-blob-ingest"
updated: 2025-04-28T01:03:04Z
published: 2025-04-28T01:03:04Z
canonical: "docs.databee.buzz/azure-resource-blob-ingest"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Resources (Blob Ingest)

Azure Compute Services are the core set of cloud computing services that allow you to deploy and manage workloads on Microsoft Azure. These services provide the infrastructure, tools, and platforms for computing and storage needs. For detailed information, please refer to the [Microsoft’s official documentation](https://www.microsoft.com/en-in/security/business/identity-access/microsoft-entra-id)[.](https://www.microsoft.com/en-in/security/business/identity-access/microsoft-entra-id)

**Integration Method:** Azure Blob

**Tables:** Device Inventory Info (5004), Cloud Resources Inventory Info (5023)

| **Event** | **Description** |
| --- | --- |
| VM | Get the list of Virtual Machines configured in Azure Compute |
| VM Scaleset | Get the list of VM ScaleSets configured in Azure Compute |
| CloudServices | Get the list of Cloud services configured in Azure Compute |

> [!NOTE]
> **Note:**
> 
> Microsoft Azure is a continuously updated cloud service. As of this document preparation, the latest release was in [September 2025](https://learn.microsoft.com/en-us/azure/developer/intro/azure-developer-overview).

## Prerequisites

- The user should have access to the [Azure portal](https://portal.azure.com/) with an account that has the Global Administrator privilege.
- The user should have access to the DataBee console.

## Configuration Overview

1. Generate client credentials with the required scopes.
2. Add the [Azure Resource Log data feed](/user-manual/docs/azure-resource-blob-ingest#databee-configuration) in the DataBee console with the below parameters.

| **DataBee Parameter** | **Azure Resource Logs Parameter** |
| --- | --- |
| Client ID | Application (client) ID |
| Client Secret | Client Secret Value |
| Tenant ID | Directory (Tenant) ID |
| Blob Account Name | Storage Account Name |
| Blob Container Name | Container Name |
| Azure Queue Name | Queue Name |

## Azure Resource Logs Configuration

To create an Azure Blob storage, need to follow below steps.

### Create an application

1. Log on to [Azure](https://portal.azure.com/) with a user account that has the **Global Administrator** privilege.
2. In the **search bar**, search for **App Registration** and select it. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-7hon4tx3.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
3. On the “App registrations” page click on the **New registration**. The “Register an application” window will appear. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image-1745305454136.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
4. On the “Register an application” window:
  1. Under ‘Name’ enter your Application Name then click on **Register** to create the application. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-c3qo8mi0.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
5. On the app **Overview** page, copy the **Application (client) ID** and **Directory (tenant) ID** for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-jbyxti6g.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)

### Create client secret

1. Select the application created above.
2. Under **Manage**, click **Certificates & secrets**, and then click on **Client secrets**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-sgr9lcr7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
3. Click **New client secret**. “Add a client secret” window appears. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-lmvg1aue.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
4. In “Add a client secret” window:

> [!NOTE]
> **Note**:
> 
> The user needs to re-create the client secret when it expires.
  1. Enter a ‘Description’ for this client secret and select the desired expiry period from the ‘Expires’ drop-list.
  2. Then click on **Add** to create the client secret. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-4psyop8x.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
5. Copy the **Value** fields for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-tgu4nt2n.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)

### Create Storage Account

1. Navigate to the home page and search for the **Storage accounts**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-twkcxqcz.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
2. To create a new storage account, ensure the user has the [necessary permissions](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-create?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json&bc=%2Fazure%2Fstorage%2Fblobs%2Fbreadcrumb%2Ftoc.json&tabs=azure-portal" \l "create-a-storage-account) to create one and follow the steps outlined [here](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-create?tabs=azure-portal). To use an existing storage account, proceed to step 3.
3. Open the **Storage accounts**, locate and select the desired storage account. Copy the **Storage Account Name** for future reference. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-jz1arxej.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)

### Assign Role to Application

1. In storage account, assign the created Azure AD App to a Role that grants access to the storage blob.
2. Navigate to **Access Control (IAM)** under the **Storage accounts** and click on **Add**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-cy7usmcq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
3. Assign the appropriate role for the Application.

| **Role** | **Description** |
| --- | --- |
| Storage Blob Data Contributor | Allows read/write/delete access to blob objects. |
| Storage Queue Data Contributor | Allows to send/read/delete messages in queues. |
| Storage Account Contributor | Provides full control over the storage account. |
4. In the “Add role assignment” page, use the **search bar** to type the desired role and select it from the list. Once selected, click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-eoa9cn9m.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
5. Select the member for the role assignment.
  1. Click on **Select members**.
  2. Search for the application created during the app registration process and click on **Select**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-59zd0y4r.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
6. Click **Next** to continue. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-1fx59qwh.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
7. Click **Next** to continue. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-ci1xhi1c.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
8. Click **Review + Assign** to finalize the role assignment. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-90dyy2sh.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
9. To verify the role assignment
  1. Navigate to **Access Control (IAM)** > **Role assignments**.
  2. Search for the application and assigned role for storage blob would be visible. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-v302m3yv.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)

### Creating a Queue for Blob Storage

1. To read the data from blob storage we need a queue.
2. In the storage account, Click on **Data storage > Queues**.
3. Go to **Queues** and click on **+ Queue** to create a new queue.
  1. Enter a queue name and click on **OK**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-pfh5jxha.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
4. To set up event notification, go to the **Events** tab and click on **+ Event Subscription**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-xne8drnk.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
5. Provide **EVENT SUBSCRIPTION DETAILS**, **TOPIC DETAILS** and **EVENT TYPES**:
  1. Enter the event name.
  2. Choose **Event Grid Schema** as event schema.
  3. Add **System Topic Name** if not added already.
  4. Select **Blob Created** as the Filter to Event Types. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-1snamrw7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
6. Select **Storage Queue** as the Endpoint Type. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-246tlnhj.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
7. Provide **ENDPOINT DETAILS** to configure the endpoint:
  1. Click on **Configure an endpoint** option.
  2. Select the appropriate ‘Subscription’ and ‘Storage account’ values.
  3. Select the **Select existing queue** option and choose the queue created previously.
  4. Click **Select**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-voxggo95.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
8. Click **Create** to finalize the event subscription. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-l6lxmwg0.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)

### Forwarding the Administrative logs to Blob Storage

To forward the Azure Activity logs of the administrative category to the blob storage account that you created, follow below steps.

1. Navigate to the home page and search for the **Monitor** App. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-wsi58yxi.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
2. Navigate to the **Activity log** tab and click on **Export Activity Logs**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-llyg6csg.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
3. Click on **Add diagnostic setting**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image-1745307825996.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
4. Select the **Administrative** category and choose the **Archive to a storage account**. Fill the below details. Click on **Save**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image-1745307914144.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
5. A new container will be created in your storage account, which will be used in the DataBee configuration. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-2y0k7387.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-gibnes8j.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
2. Search for **Azure Resource Logs** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-63dkrjlf.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
3. Click on the **Azure Blob** option. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-3qtmg5t5.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
4. Enter feed contact information and click **Next**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-1difoj0p.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
5. In the configuration page, confirm the following:
  - **Client ID**: paste the Application ID.
  - **Client Secret**: paste the Secret Value.
  - **Tenant ID**: paste the Directory ID.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-fo4caycq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
6. In the configuration page, confirm the Azure Blob Storage details:
  - **Blob Account Name**: paste the Storage Account name.
  - **Blob Container Name:** paste the Storage Container name.
  - **Compression**: none
  - **Content Type**: JSON Lines
  - **Azure Queue Name**: paste the Queue name.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-blob-storage-apr2025-image-0odvghbc.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A30Z&se=2026-10-30T13%3A22%3A30Z&sr=c&sp=r&sig=HgxBpozsLgNvPOe%2FxMQvH%2BzsiLKaE%2BdtSOJknXMpNK4%3D)
7. Click **Submit**.

## Troubleshooting Tips

- In case of any permission errors, ensure that proper roles are assigned to the application in the storage created.