Forum Discussion
SamStaveley
Nov 09, 2021Copper Contributor
Some pointers to setting up Sentinel to monitor an App Service please for suspect traffic?
Hi All, I am exploring Sentinel, and wanting to understand the best way to set it up to monitor incoming traffic into a PaaS App Service Web Application, to spot and alert on suspect traffic. We ...
SamStaveley
Nov 09, 2021Copper Contributor
Hi Clive,
Really appreciate the reply. The App Service is a standard Azure App Serivce running a .Net MVC Web Application against SQL Azure. We use Log analytics / monitoring and Application Insights. However probably not using Log Analytics as much as we should.Thoughts?
Thanks.
Clive_Watson
Nov 09, 2021Bronze Contributor
Ah good, so your App Service, will already write to AzureActivity (so you can check that table to see some data), and you can also enable Diagnostic logging, sending teh data to a Log Analytics workspace managed by Sentinel.
Enable diagnostics logging - Azure App Service | Microsoft Docs
- SamStaveleyNov 09, 2021Copper ContributorClive,,
This is most helpful. I have now got my AppServiceHtmlLogs coming through. I assume that AppServiceLogs are redundant with Diagnostic Settings in use to send HTMLLogs to Sentinel?
Thanks