> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/fr/knowledge-base/how-to-articles/send-devolutions-server-logs-to-azure-log-analytics.md). # Envoyer les journaux de Devolutions Server vers Azure Log Analytics Ce guide fournit des instructions pour créer et configurer tous les composants nécessaires à l'envoi des journaux de Devolutions Server vers Azure Log Analytics. ### Créer une nouvelle inscription d'application 1. Ouvrez le portail Azure et accédez à ***Inscriptions d'applications***. 2. Cliquez sur ***Nouvelle inscription***. 3. Donnez un nom à votre application et cliquez sur ***Inscrire*** (aucune URL de redirection n'est nécessaire). 4. Sous ***Types de comptes pris en charge***, sélectionnez ***Comptes dans cet annuaire organisationnel uniquement***. #### Récupérer l'ID client et l'ID de locataire Après l'inscription, repérez ***l'ID client*** et ***l'ID de locataire*** dans la section ***Vue d'ensemble***. Ces informations seront requises ultérieurement. #### Créer un secret client 1. Accédez à **Certificats et secrets**. 2. Cliquez sur **Nouveau secret client** pour créer un secret. 3. Enregistrez la valeur du secret de façon sécurisée, car elle sera utilisée ultérieurement dans Devolutions Server. 4. Une fois le secret expiré, vous devez le renouveler et le mettre à jour dans Devolutions Server ; sinon, l'ingestion des journaux s'arrêtera. #### Configurer un point de terminaison de collecte de données (DCE) Créez un point de terminaison de collecte de données (DCE) dans Azure pour recevoir les requêtes de Devolutions Server. {% hint style="info" %} Dans Devolutions Server, cela correspond au champ **Point de terminaison Azure**. {% endhint %} #### Créer une table Log Analytics Azure Suivez le [tutoriel de Microsoft](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/tutorial-logs-ingestion-portal#create-new-table-in-log-analytics-workspace) pour créer une table Log Analytics dans Azure à partir d'exemples de données. Consultez les exemples de données envoyées par Devolutions Server à la fin de cet article. #### Récupérer l'ID immuable et le nom du flux Une fois la table ***Log Analytics*** créée, repérez l'**ID immuable** et le **Nom du flux** pour la diffusion des journaux. La configuration de l'ingestion des journaux ne nécessite pas de configuration supplémentaire à cette étape. #### Attribuer des autorisations à la règle de collecte de données (DCR) 1. Depuis la DCR dans Azure, accédez à ***Contrôle d'accès (IAM)*** – ***Ajouter une attribution de rôle***. 2. Sélectionnez ***Éditeur de métriques de surveillance***, puis ***Suivant***. 3. Cochez ***Utilisateur, groupe ou principal de service***, puis cliquez sur ***Sélectionner les membres***. 4. Cliquez sur l'application créée lors de l'inscription. Cliquez sur ***Vérifier + attribuer*** pour vous assurer que tout est en ordre avant d'enregistrer. {% hint style="info" %} Consultez la [documentation Microsoft](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/tutorial-logs-ingestion-api?utm_source=chatgpt.com\&tabs=dcr#assign-permissions-to-a-dcr) pour plus de détails sur la règle de collecte de données (DCR). {% endhint %} #### Tester et activer la journalisation Cliquez sur ***Tester la connexion*** ou activez les journaux pour vérifier qu'ils sont bien envoyés dans Sentinel. #### Commandes KQL Voici quelques requêtes KQL pour vous aider à *analyser* rapidement les journaux envoyés par Devolutions Server dans votre environnement Azure Log Analytics.
DescriptionCommandes
Filtrer les événements de débogageTable_Name
| where tostring(Event.Level) != "Debug"
Déstructurer le journal des entréesTable_Name
| where tostring(Event.Level) != "Debug"
| extend eventData = parse_json(Event)
| extend LogEvent_Properties = parse_json(tostring(eventData.Properties.LogEvent_Properties))
| project
Timestamp = eventData.Timestamp,
Level = eventData.Level,
Message = eventData.MessageTemplate,
ConnectionID = LogEvent_Properties.ConnectionID,
ConnectionName = LogEvent_Properties.ConnectionName,
Duration = LogEvent_Properties.Duration,
GroupDate = LogEvent_Properties.GroupDate,
MachineName = LogEvent_Properties.MachineName,
Username = LogEvent_Properties.Username
#### Configuration de Devolutions Server 1. Ouvrez le service web de Devolutions Server. 2. Accédez à ***Administration - Paramètres du serveur - Journalisation***. 3. Saisissez les informations. ![](https://cdnweb.devolutions.net/docs/DVLS6035_2025_3.png) #### Exemples de données de Devolutions Server Voici les exemples de données envoyées par Devolutions Server : ``` [ { "TimeGenerated": "2024-10-16T13:44:47.5509387Z", "Event": { "Timestamp": "2024-10-16T09:44:25.8462542-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "c12cb69321ff0864707e3527d05dcce7", "SpanId": "79f11f0b42e9c4f0", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/security/application/users/list", "StatusCode": 200, "Elapsed": 156.3594, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000016-0000-fe00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "156.3594" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/security/application/users/list\" responded 200 in 156.3594 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5515067Z", "Event": { "Timestamp": "2024-10-16T09:44:25.8462943-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "05a78b4781e238171db4eeb0c02227a2", "SpanId": "02b5cf6af13f085c", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/connections/partial/tree/2a18029b-883d-4930-9d3f-c1eb1a57cbdb?includeSummary=false", "StatusCode": 200, "Elapsed": 106.5969, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000008-000a-fd00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "106.5969" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/connections/partial/tree/2a18029b-883d-4930-9d3f-c1eb1a57cbdb?includeSummary=false\" responded 200 in 106.5969 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5515531Z", "Event": { "Timestamp": "2024-10-16T09:44:25.9138522-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "04761490f7195b1de4265d0794bb8cda", "SpanId": "c6a3435990708323", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/password-configuration", "StatusCode": 200, "Elapsed": 167.2742, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000002-0000-fc00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "167.2742" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/password-configuration\" responded 200 in 167.2742 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5515767Z", "Event": { "Timestamp": "2024-10-16T09:44:25.9138500-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "ee5022da714a27f1644c53abc111f3c1", "SpanId": "53cda82c4ed064b4", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/security/roles/basic", "StatusCode": 200, "Elapsed": 211.735, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000002-0000-fd00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "211.7350" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/security/roles/basic\" responded 200 in 211.7350 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5515982Z", "Event": { "Timestamp": "2024-10-16T09:44:25.9139175-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "7e2d65d01dcb95c74ef2b03c0af22140", "SpanId": "84d30dbb5cbbcecd", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/connections/partial/tree/00000000-0000-0000-0000-000000000000?includeSummary=false", "StatusCode": 200, "Elapsed": 186.1316, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000002-0006-fe00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "186.1316" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/connections/partial/tree/00000000-0000-0000-0000-000000000000?includeSummary=false\" responded 200 in 186.1316 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5516143Z", "Event": { "Timestamp": "2024-10-16T09:44:25.9502376-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "a3b65a98ff6fe33f67f22ff451094b13", "SpanId": "5f3ab7c12942b19c", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/security/resolved-permissions?connectionId=ca90060e-a410-455d-967d-46ca2c3eb39d", "StatusCode": 200, "Elapsed": 103.5951, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "4000000f-000a-ff00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "103.5951" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/security/resolved-permissions?connectionId=ca90060e-a410-455d-967d-46ca2c3eb39d\" responded 200 in 103.5951 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5516328Z", "Event": { "Timestamp": "2024-10-16T09:44:25.9832335-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "02f7d828e01ff47212b339fc4931001b", "SpanId": "5fc4b3b327a2dfc5", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/connection/vpn-group/00000000-0000-0000-0000-000000000000", "StatusCode": 200, "Elapsed": 71.9778, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000019-0006-ff00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "71.9778" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/connection/vpn-group/00000000-0000-0000-0000-000000000000\" responded 200 in 71.9778 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5516484Z", "Event": { "Timestamp": "2024-10-16T09:44:27.6131069-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "d843142d0e1a4967851abec402433361", "SpanId": "40cd4ec917ea3ef0", "Properties": { "RequestMethod": "PUT", "RequestPath": "/dps/api/connection/releaselockedit/ca90060e-a410-455d-967d-46ca2c3eb39d", "StatusCode": 200, "Elapsed": 49.0958, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000002-0005-ff00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "49.0958" } ] } }, "Message": "HTTP \"PUT\" \"/dps/api/connection/releaselockedit/ca90060e-a410-455d-967d-46ca2c3eb39d\" responded 200 in 49.0958 ms" }, { "TimeGenerated": "2024-10-16T13:44:47.5516696Z", "Event": { "Timestamp": "2024-10-16T09:44:30.2814335-04:00", "Level": "Debug", "MessageTemplate": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "TraceId": "f68d75f4a69a6b0de24ae5d3c637e229", "SpanId": "9b1d7ff780c07959", "Properties": { "RequestMethod": "GET", "RequestPath": "/dps/api/connections/partial/templates?forRepositoryId=00000000-0000-0000-0000-000000000000", "StatusCode": 200, "Elapsed": 57.0181, "SourceContext": "Serilog.AspNetCore.RequestLoggingMiddleware", "RequestId": "40000011-000a-ff00-b63f-84710c7967bb" }, "Renderings": { "Elapsed": [ { "Format": "0.0000", "Rendering": "57.0181" } ] } }, "Message": "HTTP \"GET\" \"/dps/api/connections/partial/templates?forRepositoryId=00000000-0000-0000-0000-000000000000\" responded 200 in 57.0181 ms" } ] ``` --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.devolutions.net/server/fr/knowledge-base/how-to-articles/send-devolutions-server-logs-to-azure-log-analytics.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.