- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- CNAPP
- :
- Re: Onboarding Azure logs to intelligence
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Onboarding Azure logs to intelligence
Hi,
I'm trying to onboarding Azure audit logs and flow logs to intelligence. I found documentation of `Onboarding Azure Subscriptions to Intelligence`, but there is no configuration of the Azure side.
How to prepare storage account of Azure for audit logs and flow logs?
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes , you need to create Storage account for User activity and for Flow Logs you just choose the NSGs :
User Activity logs
- Need to create a storage account and archive audit and sign-ins to it:
Tutorial: Archive Azure AD logs to an Azure storage account
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
When you start the process in the CSPM portal it gives you instructions on what to configure on your Azure Portal for this onboarding to work.
it's pretty straight forward and easy.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Isn't it necessary to create a storage account on the Azure side beforehand? Even if I follow the instructions, the storage account does not appear.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes , you need to create Storage account for User activity and for Flow Logs you just choose the NSGs :
User Activity logs
- Need to create a storage account and archive audit and sign-ins to it:
Tutorial: Archive Azure AD logs to an Azure storage account
![](/skins/images/4BAE0211AB62E3B2F85E95CA468FEED0/responsive_peak/images/icon_anonymous_message.png)