Configure Event Logging

Event logging serves as a tool for preserving detailed information concerning the individuals responsible for specific governance actions related to a resource. These governance activities encompass crucial actions, like confirming a process or conducting access reviews. Upon activation, all such operations are systematically recorded within a log analytics workspace of your choice, adhering to a retention period set by your specifications.

info

Learn about event logging, the events, and troubleshooting activities here.

To configure event logging, you will need an Application Insight resource associated with a Log Analytics Workspace in your selected Azure subscription. Two operational modes should be considered:

Ingestion Mode: In this mode, events are transmitted to your Log Analytics Workspace through Application Insights and require the connection string to your resource.

Read Mode: This mode grants read-only access to your Log Analytics Workspace, allowing you to review logs within the EasyLife 365 Collaboration app.

If you wish to record data, ingestion mode is mandatory, while setting up read mode is optional.

Create the Azure Resources

1. Access your Azure Subscription dashboard.
2. Name your Application Insights and ensure you are using the "Workspace-based" Resource Mode.
3. Under Workspace Details, assign an existing Log Analytics Workspace or create a new one.
4. Click "Create" to generate the resource.

Adjusting Event Log Retention

EasyLife is designed solely to display values stored in your analytics workspace. By default, Application Insights data types retain information for 90 days, after which they inherit the workspace retention period if it exceeds 90 days. If you wish to extend the retention period up to 730 days, follow these steps:

1. Go to the Azure portal and locate your Application Insights Resource. Navigate to the overview page.
2. On the overview page, find the link directing you to the associated Log Analytics Workspace and click on it.
3. In the Log Analytics Workspace, go to "Usage and estimated costs."
4. Under "Daily cap," locate the "Data Retention (Days)" setting.
5. Adjust the value to your desired retention period.

Enable Ingestion Mode

1. Locate the Application Insights Resource in your Azure portal and navigate to the overview page.
2. From the overview page, copy the connection string.
3. Open the EasyLife 365 Admin Insiders (https://admin.insiders.easylife365.cloud/collab)
4. Go to Settings -> Logging.
5. Paste the Application Insights Connection string and save your changes.

info

Note: When changing the connection string, it might take up to 24 hours to reflect your changes.

Enable Reading Mode

1. Click on the link in the overview page that directs you to the associated Log Analytics Workspace.
2. Copy the Workspace ID from the overview page.
3. In the Log Analytics Workspace, navigate to Access control (IAM).
4. Click "Add" -> "Add role assignment."
5. Choose the Log Analytics Reader role and click next.
6. Under Members, click "Select members" and search for the EasyLife 365 Insiders app.
7. Click "Review + assign."
8. Open the EasyLife 365 Admin Insiders (https://admin.insiders.easylife365.cloud/collab)
9. Go to Settings -> Logging.
10. Paste the Workspace ID and save your changes.