Collect Azure data from different Azure Subscriptions
Afaik today we can collect Azure logs only from artifacts runinng int he same subscription where the OpInsights workspace has been created. We use different subscriptions in Azure for both segregation and billing, but we want to able to monitor them form a single OpInsights account. Give us the option to register my subscriptions and be able to collect exactly the same data we're collecting from the "home" subscription.
Daniele Grandini
shared this idea
This is possible using PowerShell/ARM
For agents based collection, configure the agent to report to the workspace that is in a different subscription.
For Azure diagnostics, use PowerShell to specify add the storage account details.
7 comments
-
Anonymous
commented
We want to share Log Analytics data with our Vendor , ofcourse Vendor is Outside our Subscription & Azure AD boundary. What is the best & secured medium to share the Logs to them?
Any help please. -
Anonymous
commented
How to add multiple subscriptions to Data Collections in Azure Security
-
JH
commented
So what about Automation and Backup/recovery vaults? I still cannot add those from another suscription!
-
Anonymous
commented
Hi, how do you manually add Azure virtual machines from other subscriptions to report to a OpInsights Server?
-
Hi Hugo, please cross post your comment also as an idea for the backup's solution/service team - those items are in looked at and triaged in this forum http://feedback.azure.com/forums/258995-azure-backup-and-scdpm
This feedback from Daniele refers specifically to the ability to INGEST data into the search backend by 'connecting' to an Azure storage account, instead.
Thanks a lot,
-
Hugo Klemmestad
commented
It severely limits the usability of Solutions like Azure Backup monitoring. VMs must be protected by a Vault in the same subscription which can only be monitored from a Workspace in the same subscription. A backup team needs visibility across subscriptions to effectively track issues.
-
Nathan Lasnoski
commented
Right now you can enable Azure virtual machines to send diagnostics to a storage account and connect to Azure Operational Insights / OMS. Unfortunately the VM and the OpInsight account need to be in the same subscription. You should be able to connect a VM from any subscription to your OpInsight account with some sort of security controls as a criteria to set it up.