The Azure Quickstart templates are currently available in English

Alsid Syslog/Sentinel proxy

Sist oppdatert: 14.05.2021

This template creates and configures a Syslog server with an onboarded Azure Sentinel Agent for a specified workspace.

Denne Azure Resource Manager (ARM)-malen ble opprettet av et medlem av fellesskapet og ikke av Microsoft. Hver ARM-mal er lisensiert til deg i henhold til en lisensavtale med eieren, ikke med Microsoft. Microsoft er ikke ansvarlig for ARM-maler som leveres og lisensieres av medlemmer og siler dem ikke ut med tanke på sikkerhet, kompatibilitet eller ytelse. Fellesskapets ARM-maler støttes ikke av noe Microsoft-støtteprogram eller -tjeneste, og er gjort tilgjengelig SOM DE ER, uten noen form for garanti.

Parametere

Parameternavn Beskrivelse
vmName Hostname of the virtual machine.
vmAdminUserName User name of the administrator account of the virtual machine.
vmAdminPassword Password of the administrator account of the virtual machine
dnsLabelPrefix DNS Label for the Public IP. Must be lowercase. It should match with the following regular expression: ^[a-z][a-z0-9-]{1,61}[a-z0-9]$ or it will raise an error.
workspaceId The ID of the log analytics workspace where you want to forward the logs. To find it, go to your workspace and you will have both the workspace ID and Primary key in the 'Agent management' tab.
primaryKey The key to authenticate to the log analytics workspace where you want to forward the logs. To find it, go to your workspace and you will have both the workspace ID and Primary key in the 'Agent management' tab.
vmUbuntuOSVersion Version of the Ubuntu OS.
vmSize Size of the virtual machine's disk
location Location where resources should be deployed.
_artifactsLocation The base URI where artifacts required by this template are located including a trailing '/'
_artifactsLocationSasToken The sasToken required to access _artifactsLocation. When the template is deployed using the accompanying scripts, a sasToken will be automatically generated. Use the defaultValue if the staging location is not secured.

Bruke malen

PowerShell

New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/demos/alsid-syslog-proxy/azuredeploy.json
Installere og konfigurere Azure PowerShell

Kommandolinje

az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/demos/alsid-syslog-proxy/azuredeploy.json
Installer og konfigurer Azures kommandolinjegrensesnitt for alle plattformer