Azure Metrics Source
Azure Metrics Source is used to collect all available metrics from Azure Monitor into Sumo Logic. To obtain a complete list of metrics that are collected using this source, refer to the Azure Documentation.
Setup​
Vendor configuration​
The Azure Metrics Source requires you to provide Tenant Id, Client Id, and Client Secret while configuring. To obtain these values, follow the below steps:
- Sign in to the Azure portal.
- Navigate to Sumo Logic's Custom Deployment wizard.
- In the Custom Deployment page, under Basics tab, select the Subscription, Resource Group, and Region in which to deploy the Application, then click Next.
- Under the App Registration tab:
- Select service principal type as Create new to create a new app.
- Click Change selection to enter the name and select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) as supported account types. Click Register to register the application.
- In the re-directed Certificates & secrets page, under Client secrets tab, click + New client secret.
- Description. Enter the description of your choice.
- Expires. From the dropdown, select the expiry time period to the secret value.
- Copy and save the Value.
- Navigate to Overview, copy and save the Application (client) ID and Directory (tenant) ID.
- Close the Overviews page to go back to the Custom Deployment page.
- Enter the copied Value in the Client secret section, then click Next.
- Under Subscription tab, select the subscriptions from which you would like to collect metrics, then click Next.
- Click Review + Create. On the Review + Create tab review the details and click Create.
Source configuration​
When you create a Azure Metrics source, you add it to a Hosted Collector. Before creating the source, identify the Hosted Collector you want to use or create a new Hosted Collector. For instructions, see Configure a Hosted Collector and Source.
To configure the Azure Metrics Source:
- Classic UI. In the main Sumo Logic menu, select Manage Data > Collection > Collection.
New UI. In the Sumo Logic top menu select Configuration, and then under Data Collection select Collection. You can also click the Go To... menu at the top of the screen and select Collection. - On the collectors page, click Add Source next to a Hosted Collector.
- Search for and select Azure Metrics icon.
- Enter a Name to display for the source in the Sumo Logic web application. The description is optional.
- (Optional) For Source Category, enter any string to tag the output collected from the source. Category metadata is stored in a searchable field called
_sourceCategory. - (Optional) Fields. Click the +Add Field link to define the fields you want to associate. Each field needs a name (key) and value.
 A green circle with a check mark is shown when the field exists in the Fields table schema.
 An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, an option to automatically add the nonexistent fields to the Fields table schema is provided. If a field is sent to Sumo Logic that does not exist in the Fields schema it is ignored, known as dropped.
- Tenant Id. Enter the Tenant Id collected from Azure platform.
- Client Id. Enter the Client Id collected from Azure platform.
- Client Secret. Enter the Client Secret collected from Azure platform.
- View Subscriptions. Click View Subscriptions to verify the authentication credentials entered to get Azure access.
- Environment. Select the environment from the dropdown from which you would like to collect metrics.
- Azure Regions. Select All Regions, if you want to collect metrics from all regions. Or, click Select Regions to select the region of your choice from the dropdown to collect metrics.
- Azure Namespaces. Select All Namespaces, if you want to collect metrics with all namespaces. Or, click Select Namespaces to select the namespaces of your choice from the dropdown to collect metrics.
- Tags Filter. Select any tag filter from the dropdown to enforce it with the each namespace. This helps you to further fine-tune from which resources you would like to collect metrics.
- Scan Interval. This option sets how often the source is scanned. Setting a shorter frequency increases message volume, and can cause your deployment to incur additional charges. The minimum acceptable scan interval is 1 minute.
- Processing Rules for Metrics (Optional). Configure any desired filters, such as allowlist and denylist, as described in Metrics Include and Exclude Rules.
JSON configuration​
Configuration Object​
| Parameter | Type | Required | Default | Description | Example |
|---|---|---|---|---|---|
| name | String | Yes | null | Type a desired name of the source. The name must be unique per Collector. This value is assigned to the metadata field _source. | "mySource" |
| description | String | No | null | Type a description of the source. | "Testing source" |
| category | String | No | null | Type a category of the source. This value is assigned to the metadata field _sourceCategory. See best practices for details. | "mySource/test" |
| fields | JSON Object | No | null | JSON map of key-value fields (metadata) to apply to the Collector or Source. Use the boolean field _siemForward to enable forwarding to SIEM. | {"_siemForward": false, "fieldA": "valueA"} |
| environment | String | Yes | null | Type of environment from which you would like to collect metrics. | |
| limitToRegions | Array | No | null | Specify the regions from which you want to collect metrics. To collect from all regions, leave null. | |
| limitToNamespaces | Array | No | null | Specify the namespaces from which you want to collect metrics. To collect from all namespaces, leave null. | |
| tagFilters | JSON Object | No | null | For each namespace, if defined, the source will only collect metrics for resources that match the tag filter. | |
| tenantId | String | Yes | null | Enter the tenant Id collected from the Azure platform. | |
| clientId | String | Yes | null | Enter the client Id collected from the Azure platform. | |
| clientSecret | String | Yes | null | Enter the client secret collected from the Azure platform. | |
| scanInterval | Integer | No | 1 minute | How frequently the integration should collect the metrics data from Azure. Options: 1m or 5m. |
JSON example​
{
"api.version":"v1",
"source":
{
"sourceType": "Polling",
"name": "azure-metrics-example",
"contentType": "AzureMetrics",
"thirdPartyRef":{
"resources":[
{
"serviceType": "AzureMetrics",
"path": {
"type": "AzureMetricsPath",
"environment": "Azure",
"limitToRegions": ["westus2", "westeurope", "southeastasia"],
"limitToNamespaces": ["Microsoft.Storage/storageAccounts", "Microsoft.Compute/virtualMachines", "Microsoft.EventHub/Namespaces"],
"tagFilters":[
{
"namespace":"Microsoft.Storage/storageAccounts",
"tags":[
{
"name":"Cluster",
"values":["cloudcollector", "cocoa"]
},
{
"name":"Deployment",
"values":["prod"]
}
]
},
{
"namespace":"Microsoft.Compute/virtualMachines",
"tags":[
{
"name":"owner",
"values":["infra"]
}
]
}
]
},
"authentication": {
"type": "AzureClientSecretAuthentication",
"tenantId": "11111111-2222-3333-4444-555555555555",
"clientId": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeeee",
"clientSecret": "*****"
}
}
]
},
"scanInterval": "300000"
}
}