Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

An analyst wants to detect abusive resource consumption in Azure Virtual Machines.  Using the VM Metrics Azure collector to send CPU and disk usage to Devo, the analyst will find machines with too much resource usage.  As a result, the analyst will remove the malicious mining programs, preventing  them preventing them from degrading service and stealing compute.

Example tables

Table

Description

cloud.azure.vm.metrics_simple

Virtual machine performance data in Azure

Authorize It

Microsoft credentials are confusing. Consult Microsoft collector OAuth authentication before you beginBefore beginning, be aware of the different credential fields.

  1. In Azure, search for Entra ID.

    image-20250206-182248.pngImage Removedimage-20250217-211507.pngImage Added

  1. Click App registrations in the left menu and click the app (or Service Principal) that you are going to use.

    image-20250206-182408.pngImage Removedimage-20250217-211531.pngImage Added

    Register the application

    image-20250206-190600.png

...

  1. Click Certificates & Secrets on the menu and create a new client secret by clicking the New client secret button.

...

Add the secret.

Warning

Data loss warning: At the secret expiration time, the collector will stop working until the secret is replaced.

...