Understanding logging and monitoring
When we talk about logging and monitoring, it is very easy to jump right into what we should be doing, but that is not where we should start in Azure. Security is a shared responsibility, as we emphasized in Chapter 1, Introduction to Azure Security, and this extends to security operations. The first place we should start with monitoring is getting visibility into what we are not responsible for but could impact us. For example, we do not manage the underlying storage infrastructure in Azure, yet something could be happening at that level that impacts the workload that we are running. In this section, we will cover three main services:
- Azure Service Health
- Azure Monitor
- Log Analytics
Let's look at each in detail.
Azure Service Health
Azure Service Health is a personalized Azure status monitoring service (personalized meaning it gives us information in the context of the resources and regions that we are using or...