Any process to not log few apim endpoint in application insights

Question

Any process to not log few apim endpoint in application insights

Naman Jain 20

I have an API that I have onboarded in my APIM and due to a few security reasons either want no logs or at least have all the inbound and outbound body and others be sensitive.

The configuration is that the sampling % of application insights is 100% and I can't affect other API logging

Anonymous

2024-09-17T10:53:41.0733333+00:00

Hi Thanks for the question - I am not sure I fully understand.

Whilst App insights is defined as a logger at APIM level, you can have more than one if you want

Further, you can then assign per API and the config you choose is then per API. So if you want API-A to have a different App Insights and configuration to API-B you can do that
Naman Jain 20 Reputation points

2024-09-17T14:08:25.39+00:00

Thank you for your response was not in the knowledge that with the help of settings we can overwrite the app insights and app monitor logging.

As a part of the process is there a way that we can sensitive the logs without affecting the request sent to the backend API so that the response don't change but logs are safer.
Anonymous

2024-09-17T15:34:53.6166667+00:00

if i remember correctly you need to opt into capturing request/response body. It is not captured by default

Also, App Insights will try and avoid capturing sensitive data (best efforts) for example the clientIp meta data (property of request telemetry) will be zeroed out by default
However, that being said app insights is best efforts in this regard.
I think in your situation it would be better to test it

There is a walkthrough video here https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-app-insights?tabs=rest#video from doc https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-app-insights?tabs=rest

Your answer

Anonymous

2024-09-17T10:53:41.0733333+00:00

Hi Thanks for the question - I am not sure I fully understand.

Whilst App insights is defined as a logger at APIM level, you can have more than one if you want

Further, you can then assign per API and the config you choose is then per API. So if you want API-A to have a different App Insights and configuration to API-B you can do that
Naman Jain 20 Reputation points

2024-09-17T14:08:25.39+00:00

Thank you for your response was not in the knowledge that with the help of settings we can overwrite the app insights and app monitor logging.

As a part of the process is there a way that we can sensitive the logs without affecting the request sent to the backend API so that the response don't change but logs are safer.
Anonymous

2024-09-17T15:34:53.6166667+00:00

if i remember correctly you need to opt into capturing request/response body. It is not captured by default

Also, App Insights will try and avoid capturing sensitive data (best efforts) for example the clientIp meta data (property of request telemetry) will be zeroed out by default
However, that being said app insights is best efforts in this regard.
I think in your situation it would be better to test it

There is a walkthrough video here https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-app-insights?tabs=rest#video from doc https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-app-insights?tabs=rest

Share via

Any process to not log few apim endpoint in application insights

Your answer