Azure Operations Management Suite Explained – Part 2

By Bala Murugesan, Microsoft Cloud Specialist, Data#3

In my previous blog post, I covered Azure Operations Management Suite (OMS) Log Analytics, which included the OMS overview, Architecture, and the list of solution packs and their functionalities. In this blog post, I will be covering how to setup OMS and also how to analyse and report on events through the Azure OMS Portal.

How to Setup OMS

OMS is incredibly easy to configure if there is an existing Azure tenancy although, be careful to select the right settings in the new Portal (ARM) and not the classic items from the old ASM portal.

Below are the required steps to setup OMS

Create an OMS Workspace

1. Login to the Azure Management Portal and Search for “Log Analytics (OMS)”.  Azure Operations Management Suite
2. Provide the appropriate details, including subscription, pay level and then create a workspace.  Azure Operations Management Suite

Connect Azure Storage to OMS Log Analytics

Before on-boarding an Azure storage account to OMS, the diagnostic logs need to be enabled on the VM so that the logs are stored on the allocated blob storage. Follow this article for more information on how to configure this but the general settings are below:

1. Browse to the OMS workspace on Azure portal. Click on the workspace – Settings – Storage and logs to point the OMS to the Storage locations where the VM diagnostics logs are stored. Azure Operations Management Suite
2. Choose a previously created Azure storage account.  Azure Operations Management Suite
3. Choose the logs that you want to analyse and the source table will get selected based on the type of data that you wish to analyse.  Azure Operations Management Suite
4. Click ok to save the settings.

Connect Azure Virtual Machine to OMS Log Analytics

To perform additional analysis, including configuration change tracking, SQL assessment and update assessment against VM’s, then head to the OMS dashboard and click on the Virtual machines blade.

1. This will query the list of virtual machines present in the tenancy where the OMS is created.  Azure Operations Management Suite
2. Click on the Virtual machine that you want to connect to  Azure Operations Management Suite
3. Click the connect button to connect the VM to OMS which will install an agent on the VM and the flow of analytics will start to OMS.  Azure Operations Management Suite
4. It may take a couple of minutes to connect but once it is connected you are good to go.
Now browse to OMS Portal and start searching and analysing the logs to your heart’s content.
 Azure Operations Management Suite

Lastly, it is worth mentioning the following dashboard that is part of the free OMS and shows the number of failed logins. Personally, I have configured an alert for this event every 15 minutes which works well and will let me know if anyone is trying to get into my tenant. This is not an instant alert though, considering the OMS logs needs to read the information from storage logs and report to the dashboard and then notify myself via email. It’s not instantaneous, but for a free package, it has plenty of potential and I would recommend setting this up wherever it is appropriate to give Azure administrators more visibility of their tenant.

Azure Operations Management Suite

That’s all for now. I hope you found my blog series useful. Feel free to reach out to me on LinkedIn if you would like to discuss any points mentioned.

Tags: Microsoft



The governance lens to managing risk across hybrid cloud (Part 2)

Cloud spending is on an upwards trajectory. Despite this, according to a global survey, 28% of cloud…

The operational lens to managing risk across hybrid cloud (Part 1)

In our digital-infused world, finding an enterprise without some sort of cloud presence is mission impossible. Whether it’s Azure, Amazon…

Customer Story: Knight Frank

Cloud Transition an Azure Success Story for Knight Frank Download Customer Story Contact a Specialist Objective…

8 Best Practice Tips for Cost Optimisation in Azure: Maximising Efficiency and Savings

Microsoft Azure is now the preferred cloud platform for many enterprises and SMBs. According to statistics from 2022, 80% of…

Hybrid Heroes Rap
Hybrid Heroes: The Azure Arc and HPE GreenLake Rap

Ever wondered about the combined power of Azure Arc and HPE GreenLake, but find your eyes glaze over…

Managed Services eBook
Your guide to Data#3 Managed Services

Digital disruption is causing significant changes in the workplace, leading to higher expectations for access, security, and support regardless of…

JuiceIT Guest Blog | IT Trends in Security, Cloud, and More

The calendar year is well underway, and businesses are looking ahead to FY ‘23/24 and beyond, and…

Customer Story: Pernod Ricard Winemakers

Azure Migration gives Pernod Ricard Greater Flexibility and Improved Performance Download Customer Story Contact a Specialist…