Azure Quick Start Guide

SevOne's Azure plugin allows you to collect metrics for Virtual Machines and Virtual Machine Scale Sets along with device metadata for each Resource type from an Azure environment. The Azure plugin allows you to monitor multiple different geographies for any given subscription. Multiple integrations can be created on a per subscription basis.

To monitor an Azure account, the following are necessary.

• Tenant ID
• Subscription ID
• App Registration

For the Azure plugin to run, it will need to authenticate with Azure by being registered as an application and using a client secret.

1. To register an application, please navigate to the Azure Portal, https://portal.azure.com.
2. Navigate to the App registrations.
3. Click New registration.
   Important: You may need to request your administrator for access to create a new registration.
   
4. On Register an application page,
   1. Name - enter a name. For example, SevOne NPM.
   2. Under Supported account types, select check box Accounts in this organizational directory only.
   3. Click Register.
5. Once registered, the Azure portal will navigate to the recently registered App.
   
   Important: Remember to copy and save the values in fields Application (client) ID and Directory (tenant) ID in the right panel. You will need these to start the Azure plugin in SevOne NMS.
   
6. Click Add a certificate or secret or from the left navigation bar, choose Certificates & secrets.
7. Click Client secrets tab in the right panel, and then click New client secret.
   1. Description - add a description. For example, Azure NMS Collector secret.
   2. Expires - select an expiry date for the secret. The recommended time is 6 months by Azure. For example, 4/24/2024.
      
      Important: This procedure for creating a new client secret will need to be repeated when this secret expires after the selected expiry date.
   3. Click Add.
8. After the secret is added, you should see the new client secret within the Client secrets tab. The Value field is the client secret that the collector needs to authenticate.
   
   Important: Remember to copy and save the client secret in field Value. You will need this in SevOne NMS to be able to start the Azure plugin.
   
   

For the Azure plugin to be able to retrieve the correct information from Azure, it will need to be assigned a role containing all of the permissions that it needs.

1. To assign a role to the application you created in the last section, please navigate to the Azure Portal, https://portal.azure.com.
2. Navigate to Subscriptions.
   
3. Click the name of the subscription that you want to monitor.
   
4. Click Access control (IAM) on the left navigation bar.
   
   Important: Remember to copy and save the Subscription ID value in the right pane. You will need this in order to start the Azure plugin in SevOne NMS
   
   
5. Click Add, then click Add role assignment from the dropdown menu.
   
6. In the Add role assignment page > tab Role,
   1. Type Monitoring Reader into the search bar.
   2. Click the Monitoring Reader entry in the table.
   3. Click Next.
      
7. In the Add role assignment page > tab Members,
   1. Click Select members.
   2. In the Select members panel,
      • Type the name of the app you registered into the Select search bar.
      • Click the correct entry for the app you registered in the results.
      • Click Select.
   3. Click Next.
      
8. In the Add role assignment page > tab Review + assign,
   1. Review the information on the page to make sure everything is correct.
   2. Click Review + assign.
      

Execute the following steps to monitor an Azure account. This will automatically create devices and collect metrics for various Azure resources within selected regions for that account.

1. To access the Device Manager from the navigation bar, click the Devices menu and select Device Manager.
2. Either add a device with the Azure plugin or edit an existing device to enable the Azure plugin.
   • Click Add Device to display the New Device page.
   • Click the wrench icon under the Actions column to display the Edit Device page.
3. Click the plugin drop-down. By default, it is set to SNMP. Select Azure.
   
4. Select the Enable Azure Integration check box.
5. In the Tenant ID field, enter the ID of the Azure tenant you want to monitor. This is the same as the Directory (tenant) ID value that was noted above.
6. In the Subscription ID field, enter the ID of the Azure subscription you want to monitor. This is the same as the Subscription ID that was noted above.
7. In the Application Client ID field, enter the ID of Azure registered application for SevOne. This is the same as the Application (client) ID value that was noted above.
8. In the Client Secret Value field, enter the value of the secret created for the Azure registered application. This is the same as the value noted in Value above.
9. Click Save As New to save the current changes as a New Device, or click Save to confirm the changes in the Edit Devicepage.
10. When the desired changes have been saved, click the Cancel button to return to the Device Manager page.

SevOne NMS contains a package with Azure-specific TopN views. To import, execute the following command.

$ podman exec -it nms-nms-nms SevOne-import --file /config/azure/topn.spk

Once the NMS Azure Plugin integration is setup and Devices and Objects are populated in the Device Manager, the following out-of-the-box (OOTB) reports are available in Data Insight to get insight on the resources.

• Azure ExpressRoute Circuit - report showing ExpressRoute Circuit metrics.
• Azure ExpressRoute Direct - report showing Azure ExpressRoute Direct metrics.
• Azure ExpressRoute Gateway - report showing Azure ExpressRoute Gateway metrics.
• Azure Load Balancer - report showing Azure Load Balancer metrics.
• Azure Storage Account - report showing Azure Storage Account metrics.
• Azure Virtual Machine - report showing Azure Virtual Machine metrics.
• Azure Virtual Machine Scale Set - report showing Azure Virtual Machine Scale Set metrics.
• Azure Virtual Machine Scale Set Instance - report showing Azure Virtual Machine Scale Set Instance metrics.
• Azure VPN Gateway - report showing Azure VPN Gateway metrics.