How to configure an Azure Container Apps Environment to send logs to a Azure Monitor

Question

How to configure an Azure Container Apps Environment to send logs to a Azure Monitor

Giovanni Fleres 20

Please could somebody provide an example about how configure an Azure Container Apps Environment to send logs to Azure Monitor using ARM, Bicep or Terraform ?

Below page is not updated and it is not clear how to achieve this

https://learn.microsoft.com/en-us/azure/templates/microsoft.app/2022-01-01-preview/managedenvironments?pivots=deployment-language-arm-template

Also there is an open ticket:

https://github.com/microsoft/azure-container-apps/issues/741

Thanks,

Giovanni

SwathiDhanwada-MSFT 18,996 Reputation points Moderator

2023-08-08T12:30:01.1233333+00:00
@Giovanni Fleres Thanks for your question. Can you please try to set the app logs configuration without logs analytics configuration and deploy the ARM template?

"appLogsConfiguration": { "destination": "azure-monitor" }

Giovanni Fleres 20

Thanks, but that piece of code is just the first step.
After that, you will need to create a Microsoft.insights resource :
https://learn.microsoft.com/en-us/azure/templates/microsoft.insights/diagnosticsettings?pivots=deployment-language-bicep#logsettings-2

This is what I've done in my case with Terraform and AZAPI:

resource "azapi_resource" "aca_logs_wks" {
  type = "Microsoft.Insights/diagnosticSettings@2021-05-01-preview"
  name = "aca_logs_wks"
  parent_id = azapi_resource.container_app_environment.id
  body = jsonencode({
    properties = {
      logAnalyticsDestinationType = "AzureDiagnostics"
      logs = [
        {
          categoryGroup = "allLogs"
          enabled = true
          retentionPolicy = {
            days = 180
            enabled = true
          }
        }
      ]
      metrics = [
        {
          category = "AllMetrics"
          enabled = true
          retentionPolicy = {
            days = 180
            enabled = true
          }
          timeGrain = "PT1M"
        }
      ]
      workspaceId = var.log_analytics_workspace_id
    }
  })
}

SwathiDhanwada-MSFT 18,996 Reputation points Moderator

2023-08-09T01:37:37.1333333+00:00

@Giovanni Fleres Thanks for detailed information. I am testing this in my environment. I will provide an update soon.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Accepted answer

1 additional answer

Your answer

SwathiDhanwada-MSFT 18,996 Reputation points Moderator

2023-08-08T12:30:01.1233333+00:00

@Giovanni Fleres Thanks for your question. Can you please try to set the app logs configuration without logs analytics configuration and deploy the ARM template?

"appLogsConfiguration": { "destination": "azure-monitor" }
Giovanni Fleres 20 Reputation points

2023-08-08T14:30:26.26+00:00

Thanks, but that piece of code is just the first step.
After that, you will need to create a Microsoft.insights resource :
https://learn.microsoft.com/en-us/azure/templates/microsoft.insights/diagnosticsettings?pivots=deployment-language-bicep#logsettings-2

This is what I've done in my case with Terraform and AZAPI:

resource "azapi_resource" "aca_logs_wks" { type = "Microsoft.Insights/diagnosticSettings@2021-05-01-preview" name = "aca_logs_wks" parent_id = azapi_resource.container_app_environment.id body = jsonencode({ properties = { logAnalyticsDestinationType = "AzureDiagnostics" logs = [ { categoryGroup = "allLogs" enabled = true retentionPolicy = { days = 180 enabled = true } } ] metrics = [ { category = "AllMetrics" enabled = true retentionPolicy = { days = 180 enabled = true } timeGrain = "PT1M" } ] workspaceId = var.log_analytics_workspace_id } }) }
SwathiDhanwada-MSFT 18,996 Reputation points Moderator

2023-08-09T01:37:37.1333333+00:00

@Giovanni Fleres Thanks for detailed information. I am testing this in my environment. I will provide an update soon.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

@Giovanni Fleres Here are the ARM and Bicep templates which worked for me in deploying the diagnostic settings of Container Apps Environment. Kindly try it from your end and revert if you have any questions.

Bicep Template:

param managedEnvironments_container_app_env_name string = 'container-app-e'

@description('description')
param workspaceId string = ''

@description('description')
param settingName string = 'diagtest'

resource managedEnvironments_container_app_env_name_resource 'Microsoft.App/managedEnvironments@2023-04-01-preview' = {
  name: managedEnvironments_container_app_env_name
  location: 'West US'
  properties: {
    appLogsConfiguration: {
      destination: 'azure-monitor'
    }
    zoneRedundant: false
    kedaConfiguration: {
    }
    daprConfiguration: {
    }
    customDomainConfiguration: {
    }
    peerAuthentication: {
      mtls: {
        enabled: false
      }
    }
  }
}

resource setting 'Microsoft.Insights/diagnosticSettings@2021-05-01-preview' = {
  scope: managedEnvironments_container_app_env_name_resource
  name: settingName
  properties: {
    workspaceId: workspaceId
    logs: [
      {
        categoryGroup: 'AllLogs'
        enabled: true
      }
    ]
    metrics: [
      {
        category: 'AllMetrics'
        enabled: true
      }
    ]
  }
}

ARM Template:

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "managedEnvironments_container_app_env_name": {
      "defaultValue": "container-app-env",
      "type": "String"
    },
    "workspaceId": {
      "type": "string",
      "defaultValue": "/subscriptions/xxxxxxxx-xxx-xxxx-xxxx-xxxx/resourcegroups/rg/providers/microsoft.operationalinsights/workspaces/xx",
      "metadata": {
        "description": "description"
      }
    },
    "settingName": {
      "type": "string",
      "defaultValue":"diagtest",
      "metadata": {
        "description": "description"
      }
    }
  },
  "variables": {},
  "resources": [
    {
      "type": "Microsoft.App/managedEnvironments",
      "apiVersion": "2023-04-01-preview",
      "name": "[parameters('managedEnvironments_container_app_env_name')]",
      "location": "West US",
      "properties": {
        "appLogsConfiguration": {
          "destination": "azure-monitor"
        },
        "zoneRedundant": false,
        "kedaConfiguration": {},
        "daprConfiguration": {},
        "customDomainConfiguration": {},
        "peerAuthentication": {
          "mtls": {
            "enabled": false
          }
        }
      }
    },
    {
      "type": "Microsoft.Insights/diagnosticSettings",
      "apiVersion": "2021-05-01-preview",
      "name": "[parameters('settingName')]",
      "scope": "[resourceId('Microsoft.App/managedEnvironments', parameters('managedEnvironments_container_app_env_name'))]",
      "properties": {
        "workspaceId": "[parameters('workspaceId')]",
        "logs": [
          {
            "categorygroup":"allLogs",
            "enabled": true
          }
        ],
        "metrics": [
          {
            "category": "AllMetrics",
            "enabled": true
          }
        ]
      },
      "dependsOn": [
        "[resourceId('Microsoft.App/managedEnvironments', parameters('managedEnvironments_container_app_env_name'))]"
      ]
    }
  ]
}

Giovanni Fleres 20 Reputation points

2023-08-09T07:34:18.43+00:00

Above ARM and Bicep files are correct
Alexander Ahl 0 Reputation points

2023-12-08T13:36:18.47+00:00

We have an identical bicep deploy, the only difference is that we have our resources deployed to NorthEurope. Logs are being sent to our Log Analytics Workspace, however Metrics are not. Does this provided bicep work for Metrics, for you? If yes, what table(s) can the metric be found?

Answer 2

Rubens Guimarães 175 Microsoft Regional Director

There are different levels of logs that you can manage or send to Monitor. Diagnostic Logs are the most suitable because they provide transaction details.

The following link demonstrates how to implement: https://learn.microsoft.com/en-us/azure/container-apps/log-options

Giovanni Fleres 20 Reputation points

2023-08-08T12:03:16.1466667+00:00

I'm trying to understand how to do this using ARM, Bicep or Terraform. Not from Azure Portal

Share via

How to configure an Azure Container Apps Environment to send logs to a Azure Monitor

1 additional answer

Your answer