Sumo Logic for Azure Audit

Sumo Logic is the leading cloud-native, machine data analytics service, delivering real-time, continuous intelligence from structured, semi-structured and unstructured data across the entire application lifecycle and stack.

The Sumo Logic Solution Template for Azure Audit Logs collects and routes Azure Audit Logs and Active Directory access and usage reports to the Sumo Logic service where one can visualize operational and security activity including:

·Activity by source location

·Which users perform what actions and how frequently

·Events by resource over time

·Actions and events by subscription, resource group and region

·Failed / successful deployments, and failures

·Active Directory activity events such as audited events, group activity changes, and password and registration activity

Getting Started

Please follow the step-by-step directions here to deploy Sumo Logic’s Solution Template for Azure Audit Logs. You also need to have a Sumo Logic account to use alongside the Solution Template. To set up your free 30-day trial account of the Sumo Logic service, please click here