AzureSQL

With Azure SQL Database, you can create a highly available and high-performance data storage layer for the applications and solutions in Azure. For more information on Azure SQL, click here.

Integration Method: API

Tables: Account Change (3001), Authentication (3002), Entity Management (3004), User Access Management (3005), Datastore Activity (6005)

This integration supports the following events.

This integration supports the following versions.

Note:

Azure SQL is a continuously updated service. As for this document preparation, the latest release was in November 2025. More information can be found here.

Prerequisites

• The user should have access to the Azure portal with an account that has the Global Administrator privileges.  

• The user should have access to the DataBee console.

Configuration Overview

1. Configure an application.

2. Configure Log analytics with the required permissions.

3. Configure the Azure SQL database to send logs to log analytics workspace.

4. Configure Azure SQL feed in DataBee Console with the required client credentials.

   DataBee Parameter	Azure Parameter
   Client Key	Application (client ID)
   Client Secret	Client secret Value
   Token URL(<tenant_id>)	Directory (Tenant) ID
   Workspace ID (workspaceId)	Workspace ID

Azure Configuration

Create an application

1. Log on to Azure portal with an account that has the Global Administrator privileges.
   In the search bar, search for App registrations and select it.
    

2. In the “App registrations” page, click New registration.
    

3. Enter a name for the application and click Register.
    

4. In the Overview page, copy the Application (client) ID and Directory (tenant) ID for later use.
    

5. Click Manage and click Certificates & secrets then click New client secret.
    

6. Enter a ‘Description’ for this client secret and select the desired expiry period from the ‘Expires’ drop-list. Click Add.
    

   Note:  

   The user needs to re-create the client secret when it expires.  

7. Copy the Value fields for later use.
    

Log Analytics Configuration

1. In the search bar, check for Log Analytics workspaces and select it.
    

2. In the “Log Analytics workspaces” page, click on Create.
    

3. In the “Create Log Analytics workspace” page:

   1. Select the preferred Subscription from the dropdown list.

   2. Select the preferred Resource group from the dropdown list.

   3. Give a Name for the workspace.

   4. Select the preferred Region from the dropdown list.

4. Click on Review + Create.

   
   

5. In the Overview page, copy the Workspace ID and save it for future use.
    

6. Click on Access control (IAM) then click Add and click Add role assignment.
    

7. In the “Add role assignment” page, in the Role tab, search for the Reader role, select and click Next.
    

8. In the Members page,

   1. For Assign access to, click on User, group or service principal radio button.

   2. Click Select members.

   3. Search for the application we created earlier and click Select.

9. Click Next.

   
   

10. Click on Review + assign.
     

Database Configuration

1. In the search bar, check for Azure SQL Database and select it.
    

2. Select the required database for which log analytics needs to be configured.
    

3. In the left navigation pane, click Monitoring then click Diagnostic settings.
    

4. In the “Diagnostic settings” page, click Add diagnostic setting.
    

5. Click on the check box of SQL Security Audit Event.

6. Click on the check box of Send to Log Analytics workspace.

7. Select the Subscription, Log Analytics workspace from the dropdown and click Save.

   
   

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the Azure SQL and click it as shown below.
    

3. Click on the API Ingest for collection method.
    

4. Enter feed contact information then scroll down.
    

5. In the configuration page, confirm the following:

   • Authorization Method: OAuth2

   • Client Key: Paste the Application (Client) ID generated previously 

   • Client Secret: Paste the Client Secret generated previously 

   • Token URL: Replace <tenant_id> placeholder with your Directory (Tenant) ID.

   • Workspace ID: Paste the Workspace ID noted earlier

   • Event Types: Preselected for all the event types that integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• If you encounter any issues regarding log forwarding, refer to the DataBee troubleshooting article for detailed guidance.