Enable Logging to Application Insights (Log Shipping)
Starting with version 5.2, Nerdio Manager allows for all console logs to be redirected to the Nerdio Manager Application Insights workspace. From here, the logs can be interrogated directly using standard workspace queries, exported manually for review, or accessed programmatically via API. This allows administrators to ingest Nerdio Manager logs into a log management SIEM solution.
Notes:
Please ensure you have completed the migration to the App Insights Workspace-based model prior to performing this activity. See Migrate to Workspace-based Application Insights from Classic for details.
To configure this functionality, you must add a new App Service setting to your Nerdio Manager App Service. If you have concerns about making this change, please contact the Nerdio support team for assistance.
To enable logging to application insights (log shipping):
In the Azure portal, navigate to your Nerdio Manager App Service instance.
On the left, in the Settings blade, select Environment variables.
From the default App settings tab, select + Add.
-
Enter the following information:
Name: Logging:LogLevel:NME.Tasks
Value: Information
Deployment slot setting: Unselect this option. (Disabled)
Select OK to save the changes.
-
If you are prompted, restart the Web App. If you are not prompted, restart the Web App from the Overview page.
Note: Logs may take up to 30 minutes to populate. Only new events after this setting has been added are captured.
To test the functionality, navigate to the Application Insights workspace for your Nerdio Manager instance.
On the left, in the Monitoring blade, select Logs.
-
Run one of the following queries to view all the available data.
Note: Depending on the deployment date of the Application Insights instance, the table name storing the exported logs may be different. If the query using Traces does not work, please use the alternate query using AppTraces. See this Microsoft article for additional details about changes and updates to Application Insights.
Traces
| extend CategoryName = customDimensions["CategoryName"]
| extend Username = customDimensions["Username"]
| extend JobId = customDimensions["JobId"]
| extend JobType = customDimensions["JobType"]
| extend JobDescription = customDimensions["JobDescription"]
| extend TaskId = customDimensions["TaskId"]
| extend TaskName = customDimensions["TaskName"]
| extend TaskStatus = customDimensions["TaskStatus"]
| extend TaskResult = customDimensions["TaskResult"]
| where CategoryName == "NME.Tasks"
| order by timestamp desc
AppTraces
| extend CategoryName = customDimensions["CategoryName"]
| extend Username = customDimensions["Username"]
| extend JobId = customDimensions["JobId"]
| extend JobType = customDimensions["JobType"]
| extend JobDescription = customDimensions["JobDescription"]
| extend TaskId = customDimensions["TaskId"]
| extend TaskName = customDimensions["TaskName"]
| extend TaskStatus = customDimensions["TaskStatus"]
| extend TaskResult = customDimensions["TaskResult"]
| where CategoryName == "NME.Tasks"
| order by timestamp desc
Notes:
If data is returned, the configuration is complete. If no data is returned or you observe an error, please contact the Nerdio support team.
Please refer to Microsoft documentation for exporting or accessing App Insights workspace data via API.
Comments (0 comments)