Forum Discussion
Application Level Security Monitoring
Hi Team, I have scenario where the application is running on top of webapps and respective application level logs are getting stored in sql database (paas) on specific tables. My requirement is t...
im using the Azure Defender for App service also. But, I have requirement to build some custom correlation rules using the logs generated by the application.
Hi
You can leverage workspace-basd resources to have custom logs and cutom queries . I think it's the best way to do it unless the specified logs you want are not supported by app insights .
The doc said :
Workspace-based resources support full integration between Application Insights and Log Analytics.You can now choose to send your Application Insights telemetry to a common Log Analytics workspace, which allows you full access to all the features of Log Analytics while keeping application, infrastructure, and platform logs in a single consolidated location.
Reference : https://docs.microsoft.com/en-us/azure/azure-monitor/app/create-workspace-resource
You can leverage workspace-basd resources to have custom logs and cutom queries . I think it's the best way to do it unless the specified logs you want are not supported by app insights .
The doc said :
Workspace-based resources support full integration between Application Insights and Log Analytics.You can now choose to send your Application Insights telemetry to a common Log Analytics workspace, which allows you full access to all the features of Log Analytics while keeping application, infrastructure, and platform logs in a single consolidated location.
Reference : https://docs.microsoft.com/en-us/azure/azure-monitor/app/create-workspace-resource