Configure Azure Resource Manager and access rights for Azure

Log in to the Azure portal using your Azure account:

Select
Azure Active Directory
from the left navigation bar.
Select the
App registrations
from the left panel on the
Default directory
page.
Select
New Registration
option from
App Registration
pane.
Enter the following information about the
Create
pane:
Name:
Name for the new application. Type in the desired application name. Example: GraphConnectorApp
Redirect URI (optional):
Returns an authentication response after successfully authenticating a user.
Edit the manifest file and change the value of the
oauth2AllowImplicitFlow
parameter to
true
after the application is created.
Select
Save
.
From the Registered App pane, select
API Permissions
.
Select
Add Permission
from the settings pane. Permissions must be set as the image below:
On the
Azure Portal
, go to
Subscriptions
and Select the Subscription.
Select
Access Control (IAM)
on the left side of the panel.
Select the
Add
button of the
Create a Custom Role
section.
Create a
Custom role
and
Add
permissions according to his requirements.
Selects the
resource type
,
resource
, and
Add Permissions
according to his requirement
Selects
Review + Create

Generate secret key

From
Azure Active Directory Admin Centre
, select the created Application from the list of App Registrations and
Create Certificates and Secrets
for the completed Application.
Log into your Azure account to access the Azure portal.
Select the created application name.
From the
Settings
pane, select the
Keys
option.
From the Keys pane, enter the
Description
Select the
Expiration
period.
Click
Save
.
From the
Keys
pane, copy the encoded key value and select save. This key value cannot be retrieved after leaving this pane. This encoded key value is the client's Secret Key that will be a part of the authentication credential.
Add the
Created custom role
to the created Application.

Get Tenant ID

From Azure
Active Directory Admin Center
, navigate to the App Registrations pane.
Log into the Azure portal.
Select
Azure Active Directory
→
App Registrations
.
From the
App Registrations
pane, click
Endpoints
.
From the
Endpoints
pane, click the copy icon next to the
OAuth 2.0 Token Endpoint
option.
Click
Save
.
Copy the value between microsoftonline.com/ and /oauth2/token from the copied endpoint URL. This is the Tenant ID that will be part of the authentication credential. This is the Tenant ID requested in the form described in DevOps Azure Cloud Platform Configuration.

Get the Client ID

From
Azure Active Directory Admin Center
, open the created application.
Select the
Settings
option.
Log into the Azure portal.
Select the created application name.
From the
Settings
pane, copy the
Application ID
value. This is the Client ID that will be part of the authentication credential. This is the Client ID requested in the form described in DevOps Azure Cloud Platform Configuration.

IAM connection prerequisite

From the tenant landing page, select the Main menu or the
Manage IAM
tile.
Select Admin and then,
IAM
.
On the IAM screen, select the
Connections
tab from the left panel.
Select the
Add New
Drop-down menu.
Select the
Add a Connection
.
Select the Technology Category as
Cloud Provider
.
Select
Azure Cloud
.
Enter the
Account Number
,
Access Key Id
, and
Access Secret Key
from the Azure account referred to in the previous section.
Validate your credentials by selecting
Test connection
.
Once the connection is successful, select
Add
to create a connection.

Azure Monitor support

Configure Azure Monitor

Navigate to IAM (Click Admin → IAM).
Click Connection on the left navigation panel.
Click
Add New Connection
from the Add New drop-down menu. The application navigates to the
Add Connection
page.
Select
Technology Category
.
For
Cloud Provider
,
Select Azure Cloud
.
Complete the form.
Click
Test Connection
to test the connection.
Click Add to add the connection when the connection is functioning.

metricbeat.modules:
 - module: azure
   metricsets:
     - container_insights
   period: 24h
   enabled: true
   continuous: true
   connectionID: "{{connectionID}}"
   queries:
     - name: CPUMemorystats
CPU Query