Connection logs in Azure from Azure Filebeat Module

Carolina Zamisnicu 316 Reputation points
2021-06-15T12:41:44.527+00:00

Hello,

I would want make a dashboard where I want to see all my connection logs from my Azure Filebeat module to Elastic. Sort of a granularity for my SaaS. Because right now I can only see the activity logs as a bulk, but I cannot see the connection logs only where I can see the authentication attempts in my platform for example.
Can you guide me on how can I do that?
Thank you !

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee
    2021-06-15T14:07:23.97+00:00

    @Carolina Zamisnicu Thanks for reaching out. You can certainly create a custom dashboard for your Azure resources. You can follow this article to create a custom dashboard : https://learn.microsoft.com/en-us/azure/azure-portal/azure-portal-dashboards

    You can also create custom query using log analytics or Azure Insights to attach them with Dashboard.
    The corresponding Azure resource blade and their metric have option to save it to dashboard.

    Any custom dashboard can look like this :

    105740-image.png

    -----------------------------------------------------------------------------------------------------------------

    If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.