Forum Widgets
Latest Discussions
Sentinel to Detect Storage Account Created
Hi Everyone, When trying to generate query to show storage account when they are created, I'm having bad luck of not been able to see it in Sentinel. The KQL query I have is: AzureActivity | where ResourceProviderValue == "MICROSOFT.STORAGE" | where OperationNameValue == "Microsoft.Storage/storageAccounts/write" When the query is running, it generate no output. Even if take away "| where OperationNameValue == "Microsoft.Storage/storageAccounts/write"", I can see the storage account but not specifically when I spun up a test storage account to detect it. I'll appericate if anyone can help me get this query to work. Side note: I have Azure Monitor Alert enable and I get email but I want those alerts to be shown in Sentinel as an incident.
How to archive diagnostic logs sent to storage account
I need help understanding storage append blobs created by diagnostic settings. When a diagnostic setting is configured to log to a storage account, the logs are created as append blobs. I have compliance requirements that mean I need to retain these blobs in immutable storage for 6 years, however, it seems I cannot use the blob lifecycle management feature to change the access tier of the append blobs to "archive tier". It is only supported for block blobs. This page states "Setting the access tier is only allowed on Block Blobs. They are not supported for Append and Page Blobs." https://learn.microsoft.com/en-au/azure/storage/blobs/access-tiers-overview I feel like the lifecycle management feature is often touted as the answer to how to change the access tier for long-term storage scenarios, but it seems that it does not even work with diagnostic logs, which is pretty baffling. How does Microsoft recommend changing diagnostic logs in a storage account to archive tier storage? The only answer I can see would be to implement some an azure function or logic app to read each blob as it's written and write it back to another storage account as a block blob. But the, how do you when the new file has finished being written to. Nevermind the fact that this violates my immutability requirement.
Azure NetApp Files | Azure cli command to suspend/resume backup at volume level
I'm looking for the corresponding azure cli for the following action https://learn.microsoft.com/en-us/azure/azure-netapp-files/backup-manage-policies#suspend-a-backup-policy-for-a-specific-volume I do see a cli (at policy level) az netappfiles account backup-policy update, which has got the following parameter [--enabled {0, 1, f, false, n, no, t, true, y, yes}] The property to decide policy is enabled or not. Accepted values: 0, 1, f, false, n, no, t, true, y, yes But this is at the netapp account > policy level I'm unable to find the azure cli to do this at specific volume level. Is there a cli for this action at Volume level in the Configure Backups dialog box > Policy State { Suspend/Resume}, how shall we achieve this if we have programmatically do this step.
Azure Storage Account feedback
Hey, After having a support case with the engineering team for Azure storage, I was encouraged to leave feedback here as well. Given the current state of Azure storage accounts, the website for Azure storage should be updated. An Azure Storage Account does not in any way replace an old-fashioned file server we have been using for shared drives for all users. The Azure storage account does not support metadata well, so the storage account won't work well to sharing containing metadata given that just about all files are placed on a file. The users will see delays when opening files and browsing file shares. I know a metadata caching add-on is on the way, but for now, that is only for premium accounts. Having a premium account for Excel, Word, PowerPoint, etc., is way too expensive and unnecessary.Unable to upload .exe files to Azure blob container in Azure Storage Account
Hi I am trying to upload an exe file to my Azure Blob container but I am getting below ( forbidden ) error. Also when I tried with .txt, .ppt .ps1 extensions I am able to upload those. Is there any restriction MS has for (.exe files). I am having storage I am having owner permission for the Storage Account resource. Kindly Help Thanks and Regards, Hirdesh
Azure Cosmos Db Triggers not working
I have a cosmos db for NoSql instance I'm working on. I have a collection, let's coll it "my-coll". I want to add a property in any document being added to the collection. The https://learn.microsoft.com/en-us/training/modules/expand-query-transaction-functionality-azure-cosmos-db-sql-api/4-add-triggers-operation for the 'pre-trigger' has an example i want to reproduce. It is also inserted in https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/how-to-write-stored-procedures-triggers-udfs?tabs=javascript#pre-triggers. function addLabel() { var context = getContext(); var request = context.getRequest(); var pendingItem = request.getBody(); if (!('label' in pendingItem)) pendingItem['label'] = 'new'; request.setBody(pendingItem); } I created my new trigger from the Azure Portal CosmosDB explorer: Trigger Id: createPreTrigger Trigger Type: Pre Trigger Operation: Create and then pasted the code. I added a new Item from the Explorer. Nothing happened. I setup a postman collection and invoked the database api with a POST call and sending a payload. The document is created. The label is not there, meaning the trigger didn't work. Why is that? I'm exploring a real world production scenario, i need to save states in the document depending on creation or replacement, since the change feed with the operationType is not yet made public available. All documentation available is in those 2 links above, sadly and embarrassingly. I need the triggers to work. Please do not tell me that Azure Functions are a solution: as stated, they are not, due to the fact that change feed do not distinguish between insertion and replacement. Thanks
Enable ADDS authetication fails
I am trying to execute the Enable ADDS authentication using Azhybridfiles module. when I try to execute the command Join-AzStorageAccount ` -ResourceGroupName $ResourceGroupName ` -StorageAccountName $StorageAccountName ` -SamAccountName $SamAccountName ` -DomainAccountType $DomainAccountType ` -OrganizationalUnitDistinguishedName $OuDistinguishedName it keeps on progressing with below warning but the progress stuck without completing or any error message.
Azure Table Storage not accessable
Since yesterday, 6th February 2025, access from Excel to Azure Tables with Entra User is no longer possible. The Storage Account Logs shows AuthenticationErrors. In Excel, access to the Storage Account is done via: https://saname.table.core.windows.net Access to the SA is done with Entra User. The users have the permission as Storage Table Data Reader. We tested various storage accounts and locations but encountered the same issue. Access via Azure Explorer, is still possible without any issues.Azure file Share Performance issue
Hi Team, I have recently migrate on-premise file server to Azure file share and setup AD authentication. It's public endpoint but we i am copied like 6 GB data then it was taken more then 2 hours even my internet bandwidth very good. I have setup hot tier but still performance is remain the same. support team is also not able to provide proper resolution.
