Azure Event Hubs configuration

Microsoft enables you to stream your Azure Files event logs to external auditing and monitoring tools using Azure Event Hubs. Before you configure streaming, you need to create an event hub and configure an Azure storage account to stream events to Event Hubs.

Create an Event Hubs namespace

1. Log in to the Azure portal using your Microsoft account.
2. Search for Event Hubs using the search bar at the top.
3. Select Event Hubs and click + Create on the toolbar to go to the Create Namespace page.
4. Select the Subscription in which you want to create the namespace.
5. Select an existing Resource group from the drop-down or click Create new and enter the name of the new resource group.
6. Specify the Namespace name and select a Location for the namespace.
7. Choose a Pricing tier based on your requirements.
8. Leave the Throughput Units (for the Standard tier) or Processing Units (for the Premium tier) setting as it is.
9. Click Review + create.

   

10. Review the settings, click Create, and wait for the deployment to complete.
11. Click Go to resource on the deployment page to navigate to the Event Hubs namespace you just created.

Create an event hub within the namespace

1. In the Azure portal, select Event Hubs from the left menu on the Event Hubs namespace page.
2. Select + Event Hub from the toolbar to go to the Create Event Hub page.

   

3. Enter a Name for your event hub and set the values for the Partition count and Retention based on your tier and requirements.
4. Enable Capture from the Capture tab if required.
5. Click Review + create.

   

6. Review the settings, click Create, and wait for the deployment to complete. On completion, you will find your event hub instance listed in your Event Hubs namespace.
7. Click the event hub you created, select Shared access policies on the left menu, and click + Add from the toolbar.
8. In the Add SAS Policy panel, enter a suitable Policy name, check Manage, and click Create.



9. Select the policy you just created and copy the Connection string–primary key to your clipboard. This key will be required when adding Azure Files in ADAudit Plus.

   

Configure an Azure storage account to stream events to Event Hubs

1. In the Azure portal, search for the storage account in the search bar.
2. From the left menu, under Monitoring, click Diagnostic settings and select file.

   

3. Click + Add diagnostic setting to go to the Diagnostic setting page.

   

4. Select all the Categories under Logs and enter a Diagnostic setting name.
5. Under Destination details, check Stream to an event hub.
6. Verify the information about your Subscription, Event hub namespace, and Event hub policy name.
7. Click Save on the toolbar.