Log Analytics XDR

Azure Monitor is a scalable cloud service that processes and stores large amounts of data, although Azure Monitor can monitor resources that are on-premises and in other clouds.

Setup and Configure

1. Azure Log Monitor Analytics API requires the OAuth 2.0 integration. To set up that integration, start by registering the application in Microsoft Entra ID (Admin role on Azure portal is required to perform the following actions).

   

2. You will need to provision read API permissions for Log Analytics.

   
   

3. Now that your app is registered and has permissions to use the API, grant your app access to your Log Analytics workspace. From the Home page of the Azure portal, search for Log Analytics Workspace and select your workspace.

   

4. From your Log Analytics workspace overview page, select Access control (IAM). Select Add role assignment.

   

5. Select the Reader role and then select Members.

   

6. On the Members tab, choose Select members. Enter the name of your app in the Select box. Select your app and choose Select. Select Review + assign.