Azure

Queries Azure APIs to retrieve the state of a virtual machine.
The name of the virtual machine must be the same as in Azure.

Configuration: Directory ID, Application ID, Application Key, Subscription ID, Resource Group.

Use Azure APIs.

Generic plugin to get metrics from Azure PaaS objects.

Configuration: Directory ID, Application ID, Application Key, Subscription ID, Azure Object Name, Additional Information, Metric Name, Unit, Alert Threshold, Critical Threshold, Freshness Timeout.

Queries the Azure APIs to retrieve the selected metric of the specified virtual machine. This metric is compared to thresholds and triggers an alert if it is exceeded.

List of available metrics : Metric

Configuration: Directory ID, Application ID, Application Key, Subscription ID, Resource Group, Virtual Machine Name, Metric Name, Metric Unit, Alert Threshold, Critical Threshold

Generic plugin to retrieve the status of various Azure PaaS resources.

Configuration Azure monitoring account, Azure resource name, Azure resource type, Status mode.

Allows you to run a Kusto query on an Application Insights.

The query should return an array of numeric values. Each value in the array will be collected and available in a graph.

Possibility to perform a mathematical calculation between the different values of the table.

Configuration: Directory ID, Application ID, Application Key, Subscription ID, Application Insights ID, Kusto query, check interval, calculation, column to filter, threshold alert, critical threshold.

Allows to run a Kusto query on a Log Analytics workspace.

The query should return an array of numeric values. Each value in the array will be collected and available in a graph.

Possibility to perform a mathematical calculation between the different values of the table.

Configuration: Directory ID, Application ID, Application Key, Subscription ID, Log Analytics namespace ID, Kusto query, check interval, calculation, column to filter, alert threshold, critical threshold.

Allows you to monitor the status of backups performed with Azure Backup.
For each backed up item: checks that the backup is active, retrieves the integrity status based on the last received hearbeat, retrieves the status of the backup pre-check and checks the status of the last backup. It is also possible to check the freshness of the last backup.
Alert if a problem is present on one of the saved items or/and if the freshness of the last save is exceeded.
Ability to filter saved items with a black or white list.

Configuration Directory ID, Application ID, Application Key, Subscription ID, Recovery Services Vault Name, Whitelist, Blacklist, Freshness threshold of the last backup.

Monitors the quota used by an Azure file sharing service and alerts if it exceeds configured thresholds.
Configuration: Azure connection information, file share name, unit, alert threshold, critical threshold.

Checks Microsoft audit logs via the Graph API, according to filters passed in parameter and alerts if at least one item is returned.

Configuration: Tenant ID, Application ID and secret provided by Microsoft, filtering criteria.
Prerequisite: Rights according to Microsoft documentation: https://docs.microsoft.com/fr-fr/graph/api/directoryaudit-list?view=graph-rest-1.0&tabs=http

Checks Microsoft connection logs via the Graph API, according to filters passed in parameter and alerts if at least one item is returned.

Configuration: Tenant ID, Application ID and secret provided by Microsoft, filtering criteria.
Prerequisite: Rights according to Microsoft documentation: https://docs.microsoft.com/fr-fr/graph/api/signin-list?view=graph-rest-1.0&tabs=http

Returns the list of alerts present in the Security Center according to Microsoft filters, and alerts according to the value of a field present in the alert.
Configuration: Tenant ID, Application ID and secret provided by Microsoft, filtering criteria.
Prerequisite: Rights according to Microsoft documentation: https://docs.microsoft.com/fr-fr/graph/api/alert-list?view=graph-rest-1.0&tabs=http

Checks the latest security score returned by the Microsoft SecureScore API and alerts if thresholds are exceeded.

Configuration: Tenant ID, Application ID, Microsoft Graph API Access Key, thresholds

Prerequisite: Rights indicated in the Microsoft documentation

Supervision in IaaS and PaaS mode, via the installation of a box in the Azure environment. See the documentation available at the following address: https://coservit.com/servicenav/fr/document/azure/