Documentation Center
AlienVault® USM Anywhere™

Enabling Diagnostics for Azure Web Apps

If you have Azure Web Apps running in your Azure environment, you can enable diagnostics logging for these web apps in the Azure console and then create log collection jobs in USM Anywhere to retrieve and process the log data.

The Azure App Service web apps provide diagnostic functionality for logging information from both the web server and the web application. It logically separates this into web server diagnostics and application diagnostics. When you enable this feature in Azure, you specify a log data storage account and container for each of these. For more information, see the Microsoft Azure documentation at https://docs.microsoft.com/en-us/azure/app-service/web-sites-enable-diagnostic-log.

To enable diagnostics for your Azure web app

  1. Log in to your account at https://portal.azure.com/.
  2. Go to your Azure Web App and select Settings > Diagnostics logs.
  3. For Application Logging (Blob), click On and set the parameters.

    • Set the Level for the logging.
    • For Storage Settings, click > and select the Storage Account and Container.

      This is the Storage Account and Container that Azure will use to store logs for the Web App. Make note of this information because you will need it to set up a log collection job in USM Anywhere. You can click + Storage Account to create a new storage account or container, or select an existing one.

  4. For Web server logging, select Storage.
  5. Click Storage Settings and select the same storage account and container that you set for the application logging.

    Configure your Azure web app for application logging and storage

  6. Click Save.