Azure 快速入門範本目前提供英文版
This template creates and configures a Syslog server with an onboarded Azure Sentinel Agent for a specified workspace.
此 Azure Resource Manager (ARM) 範本是由社群成員 (而非 Microsoft) 建立。每個 ARM 範本都是由其擁有者 (而非 Microsoft) 依據授權合約授權給您。Microsoft 並不負責社群成員所提供和授權的 ARM 範本，而不會為了安全性、相容性或效能進行篩選。社群 ARM 範本並未依據任何 Microsoft 支援方案或服務提供支援，而且會在沒有任何擔保的情況下依現況提供。
參數
| 參數名稱 | 說明 |
|---|---|
| vmName | Hostname of the virtual machine. |
| vmAdminUserName | User name of the administrator account of the virtual machine. |
| vmAdminPassword | Password of the administrator account of the virtual machine |
| dnsLabelPrefix | DNS Label for the Public IP. Must be lowercase. It should match with the following regular expression: ^[a-z][a-z0-9-]{1,61}[a-z0-9]$ or it will raise an error. |
| workspaceId | The ID of the log analytics workspace where you want to forward the logs. To find it, go to your workspace and you will have both the workspace ID and Primary key in the 'Agent management' tab. |
| primaryKey | The key to authenticate to the log analytics workspace where you want to forward the logs. To find it, go to your workspace and you will have both the workspace ID and Primary key in the 'Agent management' tab. |
| vmUbuntuOSVersion | Version of the Ubuntu OS. |
| vmSize | Size of the virtual machine's disk |
| location | Location where resources should be deployed. |
| _artifactsLocation | The base URI where artifacts required by this template are located including a trailing '/' |
| _artifactsLocationSasToken | The sasToken required to access _artifactsLocation. When the template is deployed using the accompanying scripts, a sasToken will be automatically generated. Use the defaultValue if the staging location is not secured. |
使用範本
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/demos/alsid-syslog-proxy/azuredeploy.json
命令列
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure 跨平台命令列介面
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/demos/alsid-syslog-proxy/azuredeploy.json