Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use AVM for log analytics and application insights. #1817

Merged
merged 3 commits into from
Jul 16, 2024

Conversation

tonybaloney
Copy link
Contributor

Provisions the same resources but using the AVM resources. Replaces the 2 custom bicep files that existed for provisioning the resources with the custom private network flag.

name: 'loganalytics'
params: {
name: logAnalyticsName
location: location
tags: tags
skuName: 'PerGB2018'
dataRetention: 30
publicNetworkAccessForIngestion: publicNetworkAccess
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm surprised that the avm has a parameter named publicNetworkAccessForIngestion ? How is that working?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's a parameter of the log analytics workspace and the application insights account anyway https://github.com/Azure/bicep-registry-modules/blob/main/avm/res/operational-insights/workspace/main.bicep#L192-L193

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ohh, I thought it was one we made up ("ingestion" threw me off). Got it, thanks

@pamelafox
Copy link
Collaborator

Which envs have you tested with, both public and vnet? I want to figure out what still needs testing.

@tonybaloney
Copy link
Contributor Author

After doing a diff on the deployment, the only thing this changes is forceCmkForQuery to true (previously unspecified) for the log analytics workspace which improves security and should have no impact on most users.

@tonybaloney tonybaloney merged commit 93a0206 into Azure-Samples:main Jul 16, 2024
12 checks passed
@tonybaloney tonybaloney deleted the avm_monitoring branch July 16, 2024 04:01
@pamelafox
Copy link
Collaborator

Okay, thanks for diff'ing! @mattgotteiner This will be the first move to AVM but the hope is to move all modules to AVM, to reduce Bicep modules in our code and inherit best practices by default from AVM.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants