Before adding your MS Azure environment to Goliath Cloud Monitor (GCM), you will need to have your Goliath Cloud Monitor account setup. You can do that by clicking the following link here.
Overview
To add your MS Azure environment to Goliath, you will need the following Azure IDs and values:
-
- Subscription ID
- Tenant ID
- Application (client) ID
- Client Secret Value
The following sections describe how to create and obtain the information above as well as how to add your environment to Goliath.
- Create and register an App within your Azure subscription
- Assign a Role to the newly created App
- Create a new Certificate and Secret for the App
- Add your environment to Goliath
Log Analytics in MS Azure
In addition, Log Analytics must be enabled for GCM to pull metrics from Azure. If you haven't enabled Log Analytics or you are not sure, do the following:
- In MS Azure, navigate to the desired Host Pools and click Monitoring in the left navigation pane.
- Under Monitoring select Diagnostic Settings and ensure there is an entry present.
- If so, edit this entry and confirm all Category Groups are checked and sent to the proper Log Analytics Workspace.
- If not present, please create one and ensure it is set to send all Category Groups to the desired Log Analytics Workspace.
- Check to ensure that the proper subscription is selected so that metrics can be successfully captured.
Create and register an App
-
Within the Azure console, go to your subscriptions home page and copy and save your subscription ID. You will need this later when adding your environment to Goliath.
- Next, go to the Microsoft Entra ID Overview page and copy and save the Tenant ID.
- From the Overview page, click + Add and select App registration.
- Provide a name for the app, for example goliathmcm and leave the default, Single tenant option selected
- Click Register.
- When the App is created, copy and save the Application (client) ID as this will be used later to add the environment to Goliath.
Assign a Role to the App
- Go to your subscription home page and click Access Control (IAM).
- Click + Add then Add role assignment.
- In the Role section, select Reader
- In the Members section, click + Select members and find the app you created earlier from the dialog that opens.
- Click Select to select the app.
- Back in the Members section, you will see the app is added.
- Click Review + assign to add the role.
Create a new Certificate and Secret
- Within the Azure console, return to the App registrations page and select the new app you created.
- In the left hand menu, expand Manage, the click Certificates and Secrets.
- Click + New client secret.
- Provide a name for the secret and select an expiration time period and click Create.
- Copy and save the Client Secret Value as this will be used when adding your environment to Goliath.
NOTE: When a secret expires you will need to return to this step and create a new one, then update it within GCM.
Add the MS Azure Environment to the Goliath Cloud interface
- Go to goliathapp.com
- Sign in with the credentials you were provided. If you are not automatically directed to the Add Environment dialog, go to Settings > Environment then click the + plus icon at the top of the page.
- From the Type option dropdown, select MS Azure.
- In the Add Environment dialog that opens, enter a display name, for example "MS Azure"
- In the remaining fields, you will need to locate the details you saved from the steps above.
- Application (Client) ID
- Tenant ID
- Client Secret Value
- Subscription ID
-
Click Save.
The environment is added to the main menu on the left beneath an MS Azure parent menu object. Data will begin to populate the dashboards within a few minutes.