Skip to main content

Azure Web Apps

thumbnail icon

The Azure Web Apps app allows you to collect Azure web server and application diagnostics logs and monitor the health of your Azure Web Apps environment. This app provides preconfigured dashboards that allow you to monitor server operation, traffic requests, and response times.

For more information, see Azure Web Apps.

Log types​

The Azure Web Apps app supports:

  • Web Server Logging. Information about HTTP transactions using the W3C extended log file format. This is useful when determining overall site metrics such as the number of requests handled or how many requests are from a specific IP address.
  • Application Diagnostics Logs. Application diagnostics allows you to capture information produced by a web application. ASP.NET applications can use the System.Diagnostics.Trace class to log information to the application diagnostics log.

Sample log messages​

2017-09-25 23:27:36 eShopCart GET / X-ARR-LOG-ID=9b3056e8-21d5-43f7-8fd7-4aec6b29525e
80 - 60.4.192.44 Mozilla/5.0+(Macintosh+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,
+like+Gecko)+Chrome/60.4.192.44+Safari/537.36 PHPSESSID=tv2iv6tn8c9su542l464ibaro5;
+ARRAffinity=d6c6606b1a249bd37139b09d6c2cb4dd61f6b5cd607f934012aca86bd59515444 -
eShopCart.azurewebsites.net 200 0 0 3098 1008 1000

Sample queries​

Traffic over time outlier
_sourceCategory=Azure/Web-app
| parse regex "\d+-\d+-\d+ \d+:\d+:\d+ (?<s_sitename>\S+) (?<cs_method>\S+) (?<cs_uri_stem>\S+) (?<cs_uri_query>\S+) (?<src_port>\S+) (?<src_user>\S+) (?<client_ip>\S+) (?<cs_user_agent>\S+) (?<cs_cookie>\S+) (?<cs_referrer>\S+) (?<cs_host>\S+) (?<sc_status>\S+) (?<sc_substatus>\S+) (?<sc_win32_status>\S+) (?<sc_bytes>\S+) (?<cs_bytes>\S+) (?<time_taken>\S+)"
| timeslice 5m
| count by _timeslice
| outlier _count

Collecting Logs for Azure Web Apps​

In this step, you configure a pipeline for shipping logs from Azure Monitor to an Event Hub.

  1. Sumo Logic supports several methods for collecting logs from Event Hub. You can choose any of them to collect logs.

    When you configure the event hubs source or HTTP source, plan your source category to ease the querying process. A hierarchical approach allows you to make use of wildcards. For example: Azure/WebApps/Logs.

  2. Push logs from Azure Monitor to Event Hub.

    1. Sign in to Azure Portal.
    2. Go to your Azure Web App and in the left pane, go to Monitoring > Diagnostics Settings.
    3. Diagnostic Settings blade will show all your existing settings if any already exist. Click Edit Setting if you want to change your existing settings, or click Add diagnostic setting to add a new one.
    4. Select the Stream to an event hub box checkbox.
    5. Select an Azure subscription.
    6. Event bub namespace. If you have chosen Method 1 (Azure Event Hubs Source) for collecting logs, select the EventHubNamespace created manually, or else if you have chosen Method 2 (Collect logs from Azure monitor using Azure functions), then select SumoAzureLogsNamespace<UniqueSuffix> namespace created by the ARM template.
    7. Event hub name (optional). If you have chosen Method 1 (Azure Event Hub Source) for collecting logs, select the event hub name, which you created manually, or if you have chosen Method 2 (Collect logs from Azure monitor using Azure functions), then select insights-operational-logs.
    8. Select RootManageSharedAccessKey from Select Event hub policy name dropdown.
    9. Select the checkbox for log types under Categories which you want to ingest.
      diagnostic-setting-web-apps
    10. Click Save.

Collecting Metrics for Azure Web Apps (Optional)​

In this step, you configure a pipeline for shipping metrics from Azure Monitor to an Event Hub, on to an Azure Function, and finally to an HTTP Source on a hosted collector in Sumo Logic. The pipeline is described on Collect Metrics from Azure Monitor. For exporting metrics you need to create another diagnostic setting and select All Metrics only with the following Event Hub configurations.

The current Sumo Logic app for Web Apps does not support metric content so this step is optional.

  1. Perform Steps 1 and Step 2 of Collect Metrics from Azure Monitor.
    In Step 1, you create an HTTP source. When you configure the, plan your source category to ease the querying process. A hierarchical approach allows you to make use of wildcards. For example: Azure/WebApp/Metrics
  2. Push metrics from Azure Monitor to Event Hub.
    1. Sign in to Azure Portal.
    2. Go to your Azure Web App and in the left pane, go to Monitoring > Diagnostics Settings.
    3. Diagnostic Settings blade will show all your existing settings if any already exist. Click Edit Setting if you want to change your existing settings, or click Add diagnostic setting to add a new one.
    4. Select the Stream to an event hub box checkbox.
    5. Select an Azure subscription.
    6. Event hub namespace. Namespace created in Collect Metrics from Azure Monitor by Metrics ARM template starting with SumoMetricsNamespace<unique suffix>.
    7. Event hub name (optional). Select insights-metrics-pt1m from the Select Event hub name dropdown.
    8. Event hub policy. Select RootManageSharedAccessKey from Select Event hub policy name dropdown.
    9. Select the checkbox for AllMetrics types under Metrics which you want to ingest.
    10. Click Save.

Installing the Azure Web Apps app​

This section provides instructions on how to install the Azure Web Apps app, and shows examples of each of the preconfigured dashboards you can use to analyze your data.

To install the app:

  1. From the Sumo Logic navigation, select App Catalog.
  2. In the Search Apps field, search for and then select your app.
  3. Optionally, you can scroll down to preview the dashboards included with the app. Then, click Install App (sometimes this button says Add Integration).
    note

    If your app has multiple versions, you'll need to select the version of the service you're using before installation.

  4. On the next configuration page, under Select Data Source for your App, complete the following fields:
    • Data Source. Select one of the following options:
      • Choose Source Category and select a source category from the list; or
      • Choose Enter a Custom Data Filter, and enter a custom source category beginning with an underscore. For example, _sourceCategory=MyCategory.
    • Folder Name. You can retain the existing name or enter a custom name of your choice for the app.
    • All Folders (optional). Default location is the Personal folder in your Library. If desired, you can choose a different location and/or click New Folder to add it to a new folder.
  5. Click Next.
  6. Look for the dialog confirming that your app was installed successfully.
    app-success.png

Once an app is installed, it will appear in your Personal folder or the folder that you specified. From here, you can share it with other users in your organization. Dashboard panels will automatically start to fill with data matching the time range query received since you created the panel. Results won't be available immediately, but within about 20 minutes, you'll see completed graphs and maps.

Viewing Azure Web Apps dashboards​

Overview​

Overview

Visits by Country. Performs a geo location operation to display the IP addresses of visitors on a map of the world for the last three hours.

Response Time and Data Volume. Displays the average response time and data volume in a line chart on a timeline for the last three hours.

Traffic Over Time. Shows the traffic in a line chart on a timeline for the last 24 hours.

OS Platform Breakdown. Provides the operating systems used in a pie chart for the last three hours.

400 and 500 Server Errors. Displays any 400 and 500 server errors in a pie chart for the last 15 minutes.

Traffic Over Time (Outlier). Shows the traffic and any outliers in an outlier chart on a timeline for the last 24 hours.

OS Platform Breakdown by Country. Lists the operating system used by country in a table chart for the last three hours.

Errors by Country. Displays the number of errors by country in a bar chart for the last three hours.

Server Operation - Errors and Response Codes​

Server Operation - Errors and Response Codes

Server Errors by Site. Shows details on server errors by site in a column chart for the last three hours.

Response Codes Over Time. Displays the number of response codes over time in a line chart on a timeline for the last three hours.

Application Log Levels Over Time. Shows details on log levels over time in a column chart on a timeline for the last three hours.

Application Errors by Site. Provides details about application errors by site in a line chart on a timeline for the last three hours.

Client Errors. Displays details on client errors in a column chart for the last three hours.

Server Operation - Requests and Response Time​

Server Operation - Requests and Response Time

Requests by Hostname. Displays the number of requests by hostname in a line chart on a timeline for the last three hours.

Requests by Site Over Time. Shows the number of requests by site in a line chart on a timeline for the last three hours.

Top 10 Slowest Pages. Provides details on the top 10 slowest pages in a table chart including information on the URL and the average time in seconds for the last three hours.

Response Time Histogram. Displays response times in a column chart for the last three hours.

Response Throughput. Shows details on response throughput in a table chart including information on the URL and the average throughput in seconds for the last three hours.

Traffic Insights - Apps and Requests​

Traffic Insights - Apps and Requests

Visits by Country. Performs a geo lookup operation and displays the IP addresses of worldwide visitors on a map of the world for the last three hours.

US Visits by State. Performs a geo lookup operation and displays the IP addresses of US visitors on a map of the United States for the last three hours.

Requests by App. Displays the number of requests by app in a line chart on a timeline for the last three hours.

Top Clients. Provides details on the top clients by IP address in a bar chart for the last three hours.

Traffic Over Time (Outlier). Shows the traffic and any outliers in an outlier chart on a timeline for the last 24 hours.

Traffic Insights - Content and Client Platform​

Traffic Insights - Content and Client Platform

Media Types Requested Over Time. Displays media types requested over time by count in a line chart on a timeline in the last three hours.

OSes and Browsers. Shows details on operating systems and browsers used in a column chart for the last three hours.

Top Requested Documents. Provides the top requested documents in a table chart including details on the URL and number of requests for the last three hours.

OS Platform. Displays the different operating systems used in a pie chart for the last three hours.

Top Requested Documents by Country. Lists the top requested documents in a table chart including details on URI, country name, and number of requests for the last three hours.

Top 10 Slowest Pages by Country. Lists the 10 slowest pages by country in a table chart including details on URI, country name, and average time in seconds for the last three hours.

Status
Legal
Privacy Statement
Terms of Use

Copyright © 2024 by Sumo Logic, Inc.