Log Analytics

Connecting ClearInsights to your Azure Log Analytics workspace

An Azure App Registration is required to connect and grant ClearInsights read access into your log analytics workspace.

Creating An Azure App Registration

1. Go To App Registration Service: Search for and navigate to Azure's App Registration service. This can be done by navigating to All Services page or searching via Azure portals main search bar.

2. Create An App Registration: From the App Registration service > click on New Registration.

   • Add a name for this App Registration. (Suggested Name: ClearInsights Log Managment)

   • Choose Supported Account Type (Recommended: Accounts in this organizational directory only)

It's recommended to create a new app registration as the sole purpose of this app registration is to grant ClearInsights read only access to the desired Log Analytics Workspaces.

Connect ClearInsights to App Registration

1. Grab your Tenant ID: How to find your Azure Tenant ID?

2. Get Your App Client ID: From the Overview tab on your Azure App Registration - copy & paste the value of Application (client) ID into the ClearInsights Log Analytics Workspace form.

3. Get Your Client Secret: From the Certificates & Secrets tab on your Azure App Registration - Create a new client secret and copy & paste the secret value into the ClearInsights Log Analytics Workspace form.

4. Get Your Log Analytics Workspace ID: In Azure, go to Log Analytics workspaces > Select Workspace and then "Overview" tab. From here you can retrieve a Workspace ID. Copy & paste this Workspace ID into the ClearInsights Log Analytics Workspace form.

Grant App Registration access to Log Analytics Workspace

1. Go To Log Analytics workspaces Service: Search for and navigate to Azure's Log Analytics workspaces service. This can be done by navigating to All Services page or searching via Azure portals main search bar.

2. Select the workspace: You may have more than 1 workspace available in this list, most likely separated by environment or resource group. Select the appropriate workspace(s) that contain the logs that you'd like to ingest into ClearInsights.

3. Grant Access: From the Access control (IAM) blade > Select the "Role assignments" tab.

   1. Click on "Add role assignment" under the Add menu.

   2. Select "Reader" from the Role tab.

   3. Assign access to User, group, or service principal

   4. Members: Click select members > Search for the name of the App Registration created above (Suggested Name: ClearInsights Log Managment)

   5. Save: Click "Review + Assign". Your app registration should now have read access to this log analytics workspace.

Additional Resources

How to find your tenant ID - Microsoft EntraMicrosoftLearn

Create Log Analytics workspaces - Azure MonitorMicrosoftLearn