{"type":"doc","content":[{"type":"paragraph"},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"_parentId":{"value":"3519581190"}},"macroMetadata":{"macroId":{"value":"b24708ce-1f92-4f81-953f-22e416f61905"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"bdc87d36-461d-4b5a-ad05-2c08b2a7f0a1"}},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"An application gateway is a web traffic load balancer that enables you to manage traffic to your web application. ","type":"text"},{"text":"Learn more about application gateway","type":"text","marks":[{"type":"link","attrs":{"href":"https://azure.microsoft.com/services/application-gateway/"}}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"An application gateway is a dedicated deployment in your virtual network. Within your virtual network, a dedicated subnet is required for the application gateway. More information ","type":"text"},{"text":"Azure virtual network and dedicated subnet","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/azure/application-gateway/configuration-overview#azure-virtual-network-and-dedicated-subnet"}}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Prerequisites:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" An Azure account with an active subscription","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Azure Event Hubs connection string and an Azure Storage Account connection string. To learn more about how to create and configure Event Hub and Storage account, see the article ","type":"text"},{"text":"Event Hub and Storage Account Creation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Microsoft+Azure+Event+Hubs#MicrosoftAzureEventHubs-EventHubsandStorageAccountCreation"}}]},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" An External log source is created for Azure. To learn more about how to create external log source refer to this article ","type":"text"},{"text":"Microsoft Azure Log Source","type":"text","marks":[{"type":"link","attrs":{"__confluenceMetadata":{"isRenamedTitle":true,"linkType":"page","contentTitle":"Azure Event Hubs","versionAtSave":"20"},"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519580978"}}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Create an Application Gateway","type":"text"}]},{"type":"paragraph","content":[{"text":"You can use these instructions to configure the application gateway.","type":"text"}]},{"type":"paragraph","content":[{"text":"Sign in to the ","type":"text"},{"text":"Azure portal","type":"text","marks":[{"type":"link","attrs":{"href":"https://portal.azure.com/"}}]},{"text":" with your Azure account.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" On the Azure portal menu or from the ","type":"text"},{"text":"Home","type":"text","marks":[{"type":"strong"}]},{"text":"page, select ","type":"text"},{"text":"Create a resource","type":"text","marks":[{"type":"strong"}]},{"text":". The ","type":"text"},{"text":"New ","type":"text","marks":[{"type":"strong"}]},{"text":"window appears.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"457","id":"9e88377e-2ea5-45db-8b8b-dffc72c82c51","collection":"contentId-3519581190","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Select ","type":"text"},{"text":"Networking ","type":"text","marks":[{"type":"strong"}]},{"text":"and then select the ","type":"text"},{"text":"Application Gateway ","type":"text","marks":[{"type":"strong"}]},{"text":"in the ","type":"text"},{"text":"Featured","type":"text","marks":[{"type":"strong"}]},{"text":" list.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"528","id":"947c5e3e-6e9a-433b-826c-f6d7cde66eca","collection":"contentId-3519581190","height":"250"}}},{"type":"hardBreak"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Basics tab","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"On the Basics tab, enter the following application gateway settings:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Subscription: your subscription that will be charged for the resource(s)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Resource Group: The resource group containing your resources","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Application gateway name: descriptive name to identify this resource (app-gateway-engineering)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Region: The region to deploy this resource into","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Tier: Standard V2 (determined by risk - V2 includes auto-scaling, WAF includes web-application firewall - this can be changed after initial deployment)","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"2a35b184-f24d-46c3-887a-fd23fc7985dc","collection":"contentId-3519581190","height":""}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enable autoscaling: Yes (determined by risk and cost)","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"minimum scale units: 0","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"maximum scale units: 2","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Availability zone: Zones 1","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"HTTP2: Disabled (default - HTTP2 may lead to some additional application development or service troubleshooting)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Virtual network: Engineering-subnet-2 (this virtual network must multiple subnets where one is dedicated to application gateway(s))","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Subnet: security_engineering-public02 (dedicated subnet)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select ","type":"text"},{"text":"Next: Frontends ","type":"text","marks":[{"type":"strong"}]},{"text":"to continue","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"406","id":"8e481aae-a535-432c-b225-9a676ba4a5be","collection":"contentId-3519581190","height":"250"}}},{"type":"hardBreak"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Frontends Tab","type":"text","marks":[{"type":"strong"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" On the ","type":"text"},{"text":"Frontends ","type":"text","marks":[{"type":"strong"}]},{"text":"tab, verify, ","type":"text"},{"text":"Frontend IP address type ","type":"text","marks":[{"type":"strong"}]},{"text":"is set to ","type":"text"},{"text":"Public ","type":"text","marks":[{"type":"strong"}]},{"text":"(maybe Public, Private, Both - dependent on implementation and routing)","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Add new if you do not have a free public IP (this may incur additional costs)","type":"text"}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

For the Application Gateway v2 SKU, there must be a Public frontend IP configuration. You can still have both a Public and a Private frontend IP configuration, but Private only frontend IP configuration (Only ILB mode) is currently not enabled for the v2 SKU.

","nestedContent":{"type":"doc","content":[{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"For the Application Gateway v2 SKU, there must be a ","type":"text"},{"text":"Public","type":"text","marks":[{"type":"strong"}]},{"text":" frontend IP configuration. You can still have both a Public and a Private frontend IP configuration, but Private only frontend IP configuration (Only ILB mode) is currently not enabled for the v2 SKU.","type":"text"}]}]}],"version":1},"reason":"An info macro in a list item can't be created or edited in the new editor."}}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Choose ","type":"text"},{"text":"Create new ","type":"text","marks":[{"type":"strong"}]},{"text":"for the ","type":"text"},{"text":"Public IP address ","type":"text","marks":[{"type":"strong"}]},{"text":"and enter ","type":"text"},{"text":"following ","type":"text","marks":[{"type":"em"}]},{"text":"for the public IP address name, and then select ","type":"text"},{"text":"OK","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Name","type":"text","marks":[{"type":"strong"}]},{"text":": engineering-app-gateway-public-ip","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SKU","type":"text","marks":[{"type":"strong"}]},{"text":": Standard (Basic, Standard - may not be able to choose)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Assignment","type":"text","marks":[{"type":"strong"}]},{"text":": Static (Dynamic, Static - may not be able to choose)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Availability zone","type":"text","marks":[{"type":"strong"}]},{"text":": 1 (limited to those that are chosen in Basic settings)","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"305","id":"f67d0052-c92c-49f0-8704-3c6db98987b6","collection":"contentId-3519581190","height":"250"}}}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Select ","type":"text"},{"text":"Next: Backends ","type":"text","marks":[{"type":"strong"}]},{"text":"to continue","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Backends tab","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"The backend pool is used to route requests to the backend servers that serve the request. Backend pools can be composed of NICs, virtual machine scale sets, public IPs, internal IPs, fully qualified domain names (FQDN), and multi-tenant back-ends like Azure App Service.","type":"text"}]},{"type":"paragraph","content":[{"text":"In this example, you'll add a virtual machine (VM) as the target backend with your application gateway. If you don't have any existing VM provisioned, you can follow the Microsoft docs link ","type":"text"},{"text":"here ","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal#add-backend-targets"}}]},{"text":"to create VM and test application gateway.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" On the ","type":"text"},{"text":"Backends ","type":"text","marks":[{"type":"strong"}]},{"text":"tab, ","type":"text"},{"text":"Add a backend pool","type":"text","marks":[{"type":"strong"}]},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"619","id":"0cf8ca96-1585-48ef-bae3-e7eea6998c74","collection":"contentId-3519581190","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" In the ","type":"text"},{"text":"Add a backend pool ","type":"text","marks":[{"type":"strong"}]},{"text":"window that opens, enter the following values to create a backend pool:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Name: engineering-backend-pool","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add backend pool without targets: No","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Backend targets:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Virtual machine: name of your virtual machine (multiple if available)","type":"text"}]}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"Add a backend pool ","type":"text","marks":[{"type":"strong"}]},{"text":"window, select ","type":"text"},{"text":"Add ","type":"text","marks":[{"type":"strong"}]},{"text":"to save the backend pool configuration and return to the ","type":"text"},{"text":"Backends","type":"text","marks":[{"type":"strong"}]},{"text":" tab","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"549","id":"82d06ffd-b4ff-4ab3-8ea9-f82fc963be90","collection":"contentId-3519581190","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Backend pool: engineering-backend-pool","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":67.0},"content":[{"type":"media","attrs":{"__fileSize":51023,"__fileMimeType":"image/png","width":945,"id":"f11c9e80-3b04-4545-9406-e61c59602658","collection":"contentId-3519581190","type":"file","__fileName":"image2020-6-26_7-48-0.png","height":507}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" On the ","type":"text"},{"text":"Backends ","type":"text","marks":[{"type":"strong"}]},{"text":"tab, select ","type":"text"},{"text":"Next: Configuration","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Configuration tab","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"On the ","type":"text"},{"text":"Configuration","type":"text","marks":[{"type":"strong"}]},{"text":" tab, you'll connect the frontend and backend pool you created using a routing rule.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Select ","type":"text"},{"text":"Add a rule ","type":"text","marks":[{"type":"strong"}]},{"text":"in the ","type":"text"},{"text":"Routing rules","type":"text","marks":[{"type":"strong"}]},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"544","id":"d262bc69-26c9-4ed1-9a6a-bfd6bf7bc5f2","collection":"contentId-3519581190","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" In the ","type":"text"},{"text":"Add a routing rule ","type":"text","marks":[{"type":"strong"}]},{"text":"window that opens, enter the following","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Rule name: app-gateway-route-rule-http","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Listener:","type":"text","marks":[{"type":"strong"}]}]},{"type":"extension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

Listener name: app-gateway-route-http-listener Frontend IP: Public Protocol: HTTP (should be HTTPS for production) Port: 80 (should be 443 for production) Listener type: Basic Error page url: No

Target type: Backend pool Backend target: engineering-backend-pool

HTTP Settings name: app-gateway-http-setting
Backend protocol: HTTP (should be HTTPS in production)
Backend port: 80 (should be 443 in production)
Cookie-based affinity: Disable (depends on application state management)
Connection draining Disable (depends on application state management)
Request time-out (seconds): 20
Override backend path: <leave blank>
Override with new hostname: No (depends on the application for routing requests)

Name: app-gateway-engineering team: Engineering cost_center: engineering owner: <email>

","nestedContent":{"type":"doc","content":[{"type":"table","attrs":{"__autoSize":true},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Name: ","type":"text"},{"text":"app-gateway-engineering","type":"text"},{"type":"hardBreak"},{"text":"team: ","type":"text"},{"text":"Engineering","type":"text"},{"type":"hardBreak"},{"text":"cost_center: ","type":"text"},{"text":"engineering","type":"text"},{"type":"hardBreak"},{"text":"owner: ","type":"text"}]}]}]}]}],"version":1},"reason":"A table in list item can't be created or edited in the new editor."}}},{"type":"mediaSingle","attrs":{"layout":"align-start","width":1287,"widthType":"pixel"},"content":[{"type":"media","attrs":{"__fileSize":100323,"__fileMimeType":"image/png","width":1280,"id":"d1875e37-05c2-4cc2-a5cc-58661146c3cb","collection":"contentId-3519581190","type":"file","__fileName":"image2020-6-26_7-49-57.png","height":602}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Select ","type":"text"},{"text":"Next: Review + create","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Review + create","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Review the settings on the ","type":"text"},{"text":"Review + create","type":"text","marks":[{"type":"strong"}]},{"text":" tab, and then select ","type":"text"},{"text":"Create","type":"text","marks":[{"type":"strong"}]},{"text":" to create the virtual network, the public IP address, and the application gateway. ","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":1119,"widthType":"pixel"},"content":[{"type":"media","attrs":{"__fileSize":105426,"__fileMimeType":"image/png","width":1280,"id":"291fd231-63f6-4710-a853-389be11e8c44","collection":"contentId-3519581190","type":"file","__fileName":"image2020-6-26_7-50-10.png","height":687}}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"It may take several minutes for Azure to create the application gateway. Wait until the deployment finishes successfully before moving on to the next section.","type":"text"}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"Resources successfully created.","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"574","id":"aba2892e-6218-4275-9f26-be8fbad8eaed","collection":"contentId-3519581190","height":"250"}}}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Microsoft.Resources/deployments: OK","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Microsoft.Network/applicationGateways: OK","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Microsoft.Network/publicIPAddresses: OK","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Application gateway with a Web Application Firewall (WAF)","type":"text"}]},{"type":"paragraph","content":[{"text":"You can also create an application gateway with a Web Application Firewall (WAF). Follow the Microsoft docs link ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-web-application-firewall-portal"}}]},{"text":".","type":"text"},{"text":" ","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Enable Event Hub","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Navigate to the resource","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Click on ","type":"text"},{"text":"Add Diagnostic settings","type":"text","marks":[{"type":"strong"}]},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"597","id":"9f9bea54-f211-4941-8871-06c25a3991cd","collection":"contentId-3519581190","height":"250"}}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter ","type":"text"},{"text":"Diagnostic settings name ","type":"text","marks":[{"type":"strong"}]},{"text":"engineering_logs","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"From ","type":"text"},{"text":"Category details ","type":"text","marks":[{"type":"strong"}]},{"text":"section","type":"text"},{"text":", ","type":"text","marks":[{"type":"strong"}]},{"text":"under the ","type":"text"},{"text":"log, ","type":"text","marks":[{"type":"strong"}]},{"text":"select below option:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ApplicationGatewayAccessLog","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ApplicationGatewayPerformanceLog","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ApplicationGatewayFirewallLog","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Choose option ","type":"text"},{"text":"Stream to an event hub ","type":"text","marks":[{"type":"strong"}]},{"text":"and select below information","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Subscription: Armor TDE (where this resource will be billed to)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Event hub namespace: armoreventhubnamespace (the name of the event hub namespace","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Event hub name: armor-logs","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Event hub policy name: armor-logs (depends on risk and permissions - this may be defined by another user/group within your organization)","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"382","id":"a3aed6e1-1677-470b-af2f-a9028b9932a2","collection":"contentId-3519581190","height":"250"}}},{"type":"hardBreak"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Verify Connection In AMP","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"To learn more about ","type":"text"},{"text":"\"Search For Collected Logs In Kibana (BETA)\"","type":"text","marks":[{"type":"strong"}]},{"text":" see the article ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Log+Management#LogManagement-SearchforCollectedLogsinKibanaSearchforCollectedLogsinKibana(BETA)"}}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Click ","type":"text"},{"text":"Discover ","type":"text","marks":[{"type":"strong"}]},{"text":"to take you to the log search screen","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" Armor platform assigned a unique identifier to each log source. For e.g 1024-event_hub_name-consumer_group. Search with this unique identifier","type":"text"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"568","id":"e52e87d1-356e-4c2d-b80d-ca4592606301","collection":"contentId-3519581190","height":"250"}}},{"type":"hardBreak"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Webhook Tagging:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"To learn more about Webhook Tagging, see the article ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Webhook+Tagging"}}]},{"text":". ","type":"text"}]},{"type":"paragraph","content":[{"text":"Cloud-based logs (e.g. Azure Application Gateway) are assigned unique identifiers from the Armor platform and require a log into AMP to gain access to them. The identifiers can be accessed from the \"HOSTNAME\" column at ","type":"text"},{"text":"https://portal.armor.com/security/log-management?activeTab=tab-External-Sources","type":"text","marks":[{"type":"link","attrs":{"href":"https://portal.armor.com/security/log-management?activeTab=tab-External-Sources"}}]},{"text":".","type":"text"},{"type":"hardBreak"},{"type":"hardBreak"},{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"inline-media-image","parameters":{"width":"500","id":"74719bf8-a731-4e7a-988e-476521a48348","collection":"contentId-3519581190","height":""}}},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"The tags endpoint is then called with a unique identifier. e.g. (1024-event_hub_name-consumer_group)","type":"text"}]},{"type":"codeBlock","content":[{"text":"POST /tags/1024-event_hub_name-consumer_group\n//Request Body:\n{\n \"tags\":\n [\n {\"Key\":\"id\",\"Value\":\"companyX\"},\n {\"Key\":\"index\",\"Value\":\"production\"}\n ]\n}\n","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"If the full resourceId (1024-event_hub_name-consumer_group) is not found, the Organization Id (1024) is referenced for tags information.","type":"text"}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"If no tag resourceId is found, then add_dynamic_tag will not add any fields to the webhook payload.","type":"text"}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Troubleshooting common issues","type":"text"}]},{"type":"paragraph","content":[{"text":"Validate logs are flowing for the Application Gateway. Refer below steps from Microsoft docs to verify application gateway","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Install IIS for testing","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal#install-iis-for-testing"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"Test the application gateway","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.microsoft.com/en-us/azure/application-gateway/quick-create-portal#test-the-application-gateway"}}]}]}]}]}],"version":1}

Browser not supported