Azure Activity

Azure Activity Logs provide a comprehensive record of actions capturing operations that impact resources, such as creating, updating, or deleting. They cover various categories, including administrative actions, service health events, alert triggers, and policy compliance checks.

Integration Method: API
Tables: Detection, Compliance, Entity Management
Events: Administrative, Alerts, Policy changes, Security

Azure Configuration

Step 1. Create an App registration

Step 2. Register the application

Step 3. Add a client Secret

Step 4. Locate the Tenant ID - Find the Tenant ID on the application’s Overview page.

Step 5. Configure Permissions - Set up the following permissions:

DataBee Configuration

1. Login to the DataBee console and navigate to the Data > Data Sources tab

2. Click on Add New Source

3. Search for Azure Activity and select it

4. Select API Ingest

5. Enter basic contact information in the dialog box and click Next

6. In the detailed configuration boxes, ensure the following fields are filled

   • Authorization Method: OAuth2

   • Client Key: Paste the client key generated in the Microsoft console

   • Secret Key: Paste the client secret generated in the Microsoft console

   • API URL: https://management.azure.com/subscriptions/<subscriptionId>/providers/Microsoft.Insights/eventtypes/management/values?&api-version=2015-04-01

   • Token URL:  https://login.microsoftonline.com/<tenant_id>/oauth2/v2.0/token

Replace the <tenant_id> and <subscriptionId> placeholders with your tenant information

7. Click Submit