March 28, 2023

Right this moment, our clients set up and handle their Azure digital networks at scale. As their variety of community sources grows, the query of the right way to keep connectivity and safety amongst their scale of sources arises. That is the place Microsoft Azure Digital Community Supervisor is available in—your one-stop store for managing the connectivity and safety of your community sources at scale (presently in preview). And when clients use Azure Digital Community Supervisor, in addition they want visibility into what sort of adjustments have been made in order that they’ll audit these occasions, analyze these adjustments over time, and debug points alongside the way in which. This functionality is now a actuality—Azure Digital Community Supervisor occasion logging is now in preview.

Azure Digital Community Supervisor (AVNM) makes use of Azure Monitor for telemetry assortment and evaluation like many different Azure providers. AVNM now offers occasion logs which you could work together with by means of Azure Monitor’s Log Analytics tool within the Azure Portal, in addition to by means of a storage account. You can even ship these logs to an occasion hub or accomplice resolution.

With this preview announcement, Azure Digital Community Supervisor will present a log class for community group membership change. Within the context of AVNM, community teams are outlined by the consumer to comprise digital networks. The membership of a community group may be manually offered (akin to by choosing VNetA, VNetB, and VNetC to be part of this community group) in addition to conditionally set by means of Azure Policy (akin to by defining that any digital community inside a sure subscription that comprises some string in its identify might be added to this community group). The community group membership change log class tracks when a selected digital community is added to or faraway from a community group. This can be utilized to trace community group membership adjustments over time, to seize a snapshot of a selected digital community’s community group membership, and extra.

What attributes are a part of this occasion log class?

This community group membership change class emits one log per community group membership change. So, when a digital community is added to or faraway from a community group, a log is emitted correlating to that single addition or removing for that specific digital community. For those who’re taking a look at one in every of these logs out of your storage account, you’ll see a number of attributes:













Attribute Description
time Datetime when the occasion was logged.
resourceId Useful resource ID of the community supervisor.
location Location of the digital community useful resource.
operationName Operation that resulted within the digital community being added or eliminated. At all times the “Microsoft.Community/virtualNetworks/networkGroupMembership/write” operation.
class Class of this log. At all times “NetworkGroupMembershipChange.”
resultType Signifies profitable or failed operation.
correlationId GUID that may assist relate or debug logs.
degree At all times “Information.”
properties Assortment of properties of the log.

Throughout the properties attribute are a number of nested attributes:








properties attribute Description
Message Fundamental success or failure message.
MembershipId Default membership ID of the digital community.
GroupMemberships Assortment of what community teams the digital community belongs to. There could also be a number of “NetworkGroupId” and “Sources” listed inside this property since a digital community can belong to a number of community teams concurrently.
MemberResourceId Useful resource ID of the digital community that was added to or faraway from a community group.

Throughout the GroupMemberships attribute are a number of nested attributes:






GroupMemberships attribute Description
NetworkGroupId ID of a community group the digital community belongs to.
Sources

Assortment of how the digital community is a member of the community group.

Throughout the Sources attribute are a number of nested attributes:








Sources attribute Description
Sort Denotes whether or not the digital community was added manually (“StaticMembership”) or conditionally through Azure Coverage (“Coverage”).
StaticMemberId If the “Sort” worth is “StaticMembership,” this property will seem.
PolicyAssignmentId If the “Sort” worth is “Coverage,” this property will seem. ID of the Azure Coverage task that associates the Azure Coverage definition to the community group.
PolicyDefinitionId If the “Sort” worth is “Coverage,” this property will seem. ID of the Azure Coverage definition that comprises the situations for the community group’s membership.

How do I get began?

Step one you’ll have to take is to arrange your Log Analytics workspace or your storage account, relying on the way you wish to devour these occasion logs. It’s best to be aware that if you happen to’re utilizing a storage account or occasion hub, it should must be in the identical area of the community supervisor you’re accessing logs from. For those who’re utilizing a Log Analytics workspace, it may be in any area. The community supervisor you’re accessing the logs of received’t have to belong to the identical subscription as your Log Analytics workspace or storage account, however permissions might prohibit your skill to entry logs cross-subscription.

Notice that a minimum of one digital community have to be added or faraway from a community group so as to generate logs. A log will generate for this occasion a pair minutes later.

Accessing Azure Digital Community Supervisor’s occasion logs with Log Analytics

Step one is to navigate to your required community supervisor and choose the Diagnostic settings blade below the Monitoring part. Then you may choose Add diagnostic setting and choose the choice to ship the logs to your Log Analytics workspace.

Screenshot of Azure Virtual Network Manager instance in the Azure Portal. Diagnostic settings blade is shown. Select "Add diagnostic setting" to configure the collection of network group membership change log data.

Then you may navigate to your Log Analytics workspace immediately by means of your community supervisor by choosing the Logs blade below the Monitoring part.

Screenshot of Azure Virtual Network Manager instance in the Azure Portal. Logs blade is shown. Pre-defined queries are displayed and can be selected to run on network group membership change log data.

Screenshot of Azure Virtual Network Manager instance in the Azure Portal. Logs blade is shown. Pre-defined query and results of network group membership change log data are displayed.

Alternatively, you may as well navigate to your Log Analytics workspace within the Azure Portal and choose the Logs blade.

Screenshot of Log Analytics workspace in the Azure Portal. Logs blade is shown. Pre-defined query and results of network group membership change log data are displayed.

From both place, you may run your personal queries in your community supervisor’s emitted logs for community group membership adjustments, or you may as well run our preloaded queries. Our preloaded queries can fetch the newest community group membership adjustments and failed community group membership adjustments.

Accessing Azure Digital Community Supervisor’s occasion logs with a storage account

Step one is to once more navigate to your required community supervisor and choose the Diagnostic settings blade below the Monitoring part. Then you may choose Add diagnostic setting and choose the choice to archive the logs to your storage account.

Then you may navigate to your storage account and choose the Storage browser blade.

Screenshot of storage account in the Azure Portal. Storage browser blade is shown.

Choose Blob containers. A blob container might be robotically generated as soon as community group membership adjustments happen.

Screenshot of storage account in the Azure Portal. Storage browser blade is shown. Blob container generated for network group membership change log data is displayed.

Navigate down the blob container’s file path till you attain a JSON file for the datetime specified by that file path.

Screenshot of storage account in the Azure Portal. Storage browser blade is shown. Blob container is displayed with the file path for the network group membership change log data's JSON file.

Obtain the JSON file to view the uncooked logs for the file path’s datetime.

Study extra about Azure Digital Community Supervisor occasion logging

In only a few clicks, you’ve arrange your community supervisor to route occasion logs to your Log Analytics workspace or your storage account. Now, you will get visibility into every prevalence of a digital community coming into or leaving a community group. Extra log classes are within the works, and within the meantime, be happy to take a look at our public documentation for extra on Azure Digital Community Supervisor.