Azure Monitor Logs API connection

Question

Azure Monitor Logs API connection

Vinoth Jeyaraman 1

I have a query regarding azure monitor logs CONNECTOR (to be used in logic apps).
As we are using Azure monitor logs connector, we need to use corresponding API connection and authorize it. Will the connection expire after some days that we have to reauthorize? Or is the authorization one-time that once authorized, that it can be used indefinitely?

I checked in a [public doc][1] which says for office 365, the connection once authorized can be used indefinitely.

Connections can access the target service or system for as long as that service or system allows. For services that use Azure AD OAuth connections, such as Office 365 and Dynamics, Azure Logic Apps refreshes access tokens indefinitely. Other services might have limits on how long Azure Logic Apps can use a token without refreshing.

I couldn't find related info for azure monitor logs API connection. Can this API connection be authorized once and used indefinitely?

3 answers

Your answer

Answer 1

Stanislav Zhelyazkov 28,186 MVP Volunteer Moderator

Hi
As far as I can see in the official docs the connection requires client ID and client secret. This means that you need to create Service principal with secret. Secrets have expiration date that you set during the creation of service principal. This means that when the expiration date passes you will need to create new secret for the same app and replace the secret in the connection.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Vinoth Jeyaraman 1 Microsoft Employee

Hi Stan,

Thanks for the response.
When I tried to use the Azure Monitor logs connector, I dint create any such credential fields. I was just prompted to log in with my account. Once login is done, I was able to use the connector and get the desired results. It was just a straight forward sign-in (no expiry date coming into picture)

My question is how long the authorization of my account to use this specific connector be valid? Will I be asked to re-authorize the connection after some days?

Thanks

Stanislav Zhelyazkov 28,186 Reputation points MVP Volunteer Moderator

2021-01-25T09:15:26.43+00:00
Hi,
As advised best is to create the connection with Service Principal or Managed Identity. You should see the option the first time as shown below:

]1

Using one of the above is advised to avoid things like:

connection stops working after account is blocked or deleted

Ability to manage the lifecycle of secret. With managed identity you do not even have to manage the secret.

Avoid mixing actions with your personal account and automated system like Logic Apps.

Answer 3

tushar 1

hey, i wanted to connect using managed identity but i am getting an error ("Failed to get valid request parameters. Authorization Error\r\nclientRequestId: e373b097-7d7c-42e6-a18a-92a0f8784f8e").

what can i do please help

Share via

Azure Monitor Logs API connection

3 answers

Your answer