Send Devolutions Hub Business logs to Azure Log Analytics

This guide provides instructions for creating and configuring all the components needed to send Devolutions Hub Business logs to Azure Log Analytics.

1. Open the Azure portal and navigate to App Registrations.

2. Click on New Registration.

3. Give your app a name and click Register (no Redirect URL is necessary).

4. Under Supported account types, select Accounts in this organizational directory only.

After registration, locate Client ID and Tenant ID under the Overview section. These will be required later.

Create a Data Collection Endpoint (DCE) in Azure to receive requests from Devolutions Hub Business. In Devolutions Hub Business, this corresponds to the Azure Endpoint field.

Follow Microsoft's tutorial to create a Log Analytics table in Azure for sample data. Here is the required sample data sent by Devolutions Hub Business.

The TimeGenerated column in Azure Log Analytics is essential because it's the primary timestamp that determines when a log record was ingested into the system.

Transformation editor : source | extend TimeGenerated = now() will create a column TimeGenerated and log the time of the sync.

Assign the required permissions to the DCR: Monitoring Metrics Publisher.

1. Access DCR.

2. Access control (IAM).

3. Add Role assignment.

4. Select Monitoring Metrics Publisher.

5. Click Next.

6. In the Members section, select the app registration that was previously created.

1. Open the Devolutions Hub Business web interface.

2. Go to Administration - Logging.

3. Enter the Azure credentials.

The Devolutions Hub Services installer facilitates the installation and configuration of different features such as the Privileged Access Management module, the Encryption Service (SSO-enabled feature) and the Hub Reporting service. The installed service will establish communication between your Devolutions Hub Business and your internal resources.

1. Open Devolutions Hub Business.

2. Click Administration – Application Identities.

   

3. Select Add Application identity (+).

   

4. Enter a name and click Add.

5. Save the given Application Secret and Application key to your clipboard or as a PDF file. It will be needed during Devolutions Hub Services' installation.

   

1. Go to Devolutions Hub Business.

2. Click Administration – System permissions.

3. Go to the edit form.

4. Select System.

5. Select your Application User in the drop-down menu under Manage privileged access tasks, Manage privileged access providers and View administration logs and user activity.

1. In Devolutions Hub Business, go to Administration – Configuration & Security – System permissions.

2. Go to the edit form.

3. Select Vault.

4. Choose your Application user in the drop-down menu under the Contributor section.

5. Click Update to close the window.

1. In Devolutions Hub Business, go to Administration – Management –Vault.

2. Click Add.

3. Select PAM Vault in the menu to create your PAM Vault.

4. Go to the Security menu.

5. Select the Edit tab.

6. Choose your Application user in the drop-down menu under the Contributor section.

7. Click Add to close the window.

1. Download Devolutions Hub Services.

2. Launch the installer that you downloaded.

   

3. Click Next.

4. Read the End-User License Agreement and click I accept the terms in the License Agreement.

5. Click Next.

6. Select PAM in the Custom Setup. Note that the Encryption feature is currently unavailable.

7. Click Next.

8. Enter your Host URL.

9. Enter the Application Secret and Application key previously saved.

10. Click Finish to complete the installation.

11. Click Test Connection.

12. If your connection is successful, press Next.

    

Devolutions Hub Services logs are available here: C:\ProgramData\Devolutions\Hub\Reporting Service\Logs.