Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Azure Function App logs without Application Insights instance?

S
Saumya last edited by

I'm a bit confused about my options for Function App logging on Azure. Is Application Insights the only mechanism available to observe the output logged through the function application's context? In other words, can logs be tailed or log files be temporarily observed anywhere without draining to an instance of Application Insights?
Reply Quote 0
1 Reply Last reply
Z
zymir last edited by
You can also configure Azure Functions with NLog:

https://github.com/NLog/NLog.Extensions.Logging/wiki/NLog-cloud-logging-with-Azure-function-or-AWS-lambda

Here you can find a sample that shows an Azure Function with NLog and GrayLog

https://www.gokhan-gokalp.com/en/logging-api-requests-and-responses-to-graylog-over-azure-api-management-using-azure-functions/

nlog.config:
```
  
    
    
  
  
    
  
  
    
  
```
Reply Quote 0
1 Reply Last reply

2
Posts

0
Views

Suggested Topics

Linux: is sending prompt notifications on ssh logins a security measure?
Security, Penetration Testing • linux ssh logging • • morde

2

0
Votes

2
Posts

0
Views

D

About the insecurity, imho, you're thinking in the wrong direction. What bad things do you think this system is preventing? Absolutely nothing, and that's why it cant fail to prevent it. On the opposite, it's added security; because if someone gains unauthorized access, there's at least a chance that he didn't know about (or couldn't prevent) the mail. The only thing to remember the customer is that relying on the mails too much isn't good. As alert, fine, as single source of truth ("we are not hacked because there's no mail"), no. There are too many ways emails can fail, and too many ways to get hacked without proper SSH login. About the firewall, if someone blocks incomding SSH connections then nobody can login anymore. That's probably not helpful. About a method that doesn't rely on the user and shell, PAM can do it too. See https://serverfault.com/questions/395393/email-notification-about-each-ssh-connection-to-linux-server There is even an option to deny login if the command failed, but in this case, that's not really helpful (no login because the mailserver is down or whatever, and successfully sending it to the server doesn't mean that it arrived at the receiver). About SMS, no, they are not more secure than emails.
G

Does local cache solve the problem with locked files when deploying to Azure App Service?
Continuous Integration and Delivery (CI, CD) • azure • • guilherme

2

0
Votes

2
Posts

1
Views

B

The answer is no, if you are using the recommended setup, which is: App Service should have Staging and Production slots Staging slot has Local Cache disabled Production slot has Local Cache enabled The following settings are configured as "Slot setting" aka "Sticky setting" - WEBSITE_LOCAL_CACHE_OPTION, WEBSITE_LOCAL_CACHE_SIZEINMB The code is deployed to Staging slot Staging slot is swapped with Production slot For deployments to Staging, I created the following steps: Shut down Staging slot by introducing App_Offline.htm (POST to SCM URI or can be part of artifact being deployed) Wait for slot to stop before cleaning (probe the URL of Staging slot) Cleanup wwwroot (post to SCM URI) - this is to clean unused files. Deployments are not incremental, so if it's important to have clean old files, you can introduce this step. Deploy to Staging slot using az webapp deployment source config-zip Remove App_Offline.htm (POST to SCM URI) For swapping slots: Check Staging slot is up and ready (probe the URL of Staging slot) - this one is useful when triggering deployment environments in Atlassian Bamboo when deployed to Staging. You need to wait for Staging to be up and loaded before swapping, otherwise issues may occur Swap the slots using az webapp deployment slot swap If you deploy directly to Production slot, and restart it right after (because of Local Cache enabled), then yes, there should be no file locks when using this method. But this creates the downtime during deployment, in contrast with deployments to Staging slot and swapping it with Production.
A

Get all change logs of since last successful build in Jenkins Pipeline
Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline • • Avante

2

0
Votes

2
Posts

1
Views

B

You may try something like this: node('my_kubernetes_pod') { passedBuilds = [] lastSuccessfulBuild(passedBuilds, currentBuild); def changeLog = getChangeLog(passedBuilds) echo "changeLog ${changeLog}" } def lastSuccessfulBuild(passedBuilds, build) { if ((build != null) && (build.result != 'SUCCESS')) { passedBuilds.add(build) lastSuccessfulBuild(passedBuilds, build.getPreviousBuild()) } } @NonCPS def getChangeLog(passedBuilds) { def log = "" for (int x = 0; x < passedBuilds.size(); x++) { def currentBuild = passedBuilds[x]; def changeLogSets = currentBuild.rawBuild.changeSets for (int i = 0; i < changeLogSets.size(); i++) { def entries = changeLogSets[i].items for (int j = 0; j < entries.length; j++) { def entry = entries[j] log += "* ${entry.msg} by ${entry.author} \n" } } } return log; } Additionally, you may try out "Changes Since Last Success Plugin": https://wiki.jenkins.io/display/JENKINS/Changes+Since+Last+Success+Plugin But it will not work together with pipeline, this is a separate approach.
Z

Docker Push Container to Azure ACR "unauthorized: authentication required"
Continuous Integration and Delivery (CI, CD) • docker azure devops azure pipelines azure container registry • • zymir

2

0
Votes

2
Posts

0
Views

K

spottedmahn had the answer for me on this thread (though it's far from the top answer, while other answers are much more particular to using Azure Devops UI): https://stackoverflow.com/questions/55495223/push-docker-image-task-to-acr-fails-in-azure-unauthorized-authentication-requi The image name needs to be in all lowercase. You can't just change the push command to lowercase. $ docker build -t arcticacr.azurecr.io/sftp01/sftptest:0.02 -f Dockerfile . $ az login $ az acr login --name arcticacr $ docker push arcticacr.azurecr.io/sftp01/sftptest:0.02
J

How to determine MAXDOP setting when using DTU in Azure SQL
SQL, Database Testing • sql server performance azure sql database azure performanc languagee tuni maxdop • • jonetta

2

0
Votes

2
Posts

0
Views

C

DTU is a blended measure of CPU, memory, and data I/O and transaction log I/O…. This means that there is no definitive measure of equating x DTU = x CPU, X Memory etc. Since, you have Premium P11 tier - this means that you have 1750 DTUs. Based on this blog post - By Andy Mallon, below is the CPU-to-DTU-to-Service Tier mapping : +--------------+------+---------------+ | Number Cores | DTUs | Service Tier | +--------------+------+---------------+ | 1 | 100 | Standard – S3 | | 2-4 | 500 | Premium – P4 | | 5-8 | 1000 | Premium – P6 | | 9-13 | 1750 | Premium – P11 | | 14-16 | 4000 | Premium – P15 | +--------------+------+---------------+ You should use Query Performance Insight for Azure SQL Database to review and adjust the db workload settings. Since you have db scoped configuration as non default (0 is default) - set to 1, you will need to review it and potentially change it so that you can utilize all the cores.
A

What is the AWS equivalent of Azure Management Groups?
Continuous Integration and Delivery (CI, CD) • azure amazon web services management groups • • Anderson

2

0
Votes

2
Posts

1
Views

J

There is no direct equivalent to Management Groups in AWS. You can achieve some of the same functionality by using AWS Control Tower, specifically around access controls. I.e. you can set up groups and assign roles to any accounts in an AWS Organization on a per-account or per-group basis and have them deployed to child AWS accounts. However, there is no such equivalent around, for example, resource allocation. You can achieve some of the same functionality by using CloudFormation, or by using CT IAM policies policies with specific restrictions, but it's a much more convoluted process than with Azure.
B

How are logs stored with ISP?
Security, Penetration Testing • privacy ip logging user trac languageking • • baileigh

2

0
Votes

2
Posts

0
Views

S

It think your question was not about the internal hierarchical routing and IP prefixes, than much more about the techniques itself - right? Well, some savage once thought that the IP addresses don't tell you everything (true) so he came up with the idea of logging the DNS questions and answers - passive DNS. This way the ISP has the mapping between the names you type combined with the IP addresses so that DNS requests provide a much better overview - but they do not the know the full URL, which is on the HTTP level. However they have the port numbers and protocols being used. So now they filter services. When you visit a specific website, it contains specific plugins, ads, trackers, etc which all reveal DNS requests. Any ISP who wants to grow does this mainly for accounting hush..dig...profile...hush. The DNS method does not show the full URL but it has no overhead data in the packets and it's amazingly efficient to build up a digital fingerprint. I mentioned the HTTP level - the same data can be gained if your ISP is monitoring your HTTPS traffic. They will see www.stackexchange.com but the rest is not visible because the (clean, no MITM, operating on a smaller scale) certificate is registered to domain.com. However your ISP could MitM your connection to utterly and completely defeat the encryption, and you would never know. HTTP is plain text, unlimited raw information - which gives ALL POWER to your ISP or someone who is monitoring your traffic. This is a lot of data, but you can assume your ISP has a tool which does a deep packet inspection on the Socket API level - so they don't have to store the full packets. In theory if you want to obfuscate such monitoring you would connect to a rooted server or a strong VPN (L2TP/IPsec, no logs) then use Tor (Tails) and all encrypted services - this way all your ISP would see is undecipherable gibberish, well they would see an enstablished connection to the VPN (which would then see you are connecting to tor). And they would not care - unless its consistent extreme saturation of your line, especially if it impacts other users. The answer to the question: No, they cannot click on your URL - they have to copy paste it. They certainly don't bother.
S

Fortigate Creating Millions of DNS events to standard domains
Security, Penetration Testing • dns firewalls logging siem • • simrah

2

0
Votes

2
Posts

1
Views

Y

It's Fortinet querying them because match some of the FQDN Addresses defined in the Policy & Objects --> Addresses. FortiGate will re-query the FQDN address 5 seconds before its TTL expires. It can all be disabled either by deleting or moving them to Wildcard FQDN addresses. See this Fortinet KB for more info: https://kb.fortinet.com/kb/documentLink.do?externalID=FD45787
Y

If we are using Kubernetes do we need to implement HA on both the infrastructure and application level?
Continuous Integration and Delivery (CI, CD) • kubernetes high availability gcp infrastructure minikube • • yajahira

2

0
Votes

2
Posts

1
Views

Your application requirements really do influence your options here, maybe add more detail about the app because this subject is very much about your application architecture too. The application state is fixed, pod's are rebuilt as per the spec or source container that defines them and the replication sets take care of the deployment so I'd say the application from a Kubernetes perspective is already highly available by design and the reason why the documentation contains little coverage if any with regard to application level HA. It's worth noting too that Kubernetes High Availability with kubeadm is still in its experimental stage and your clusters need to be running Kubernetes version 1.12 or later. Google's Kubernetes Engine for instance; offers 'Regional Clusters' and these are spread over many zones in a region. This certainly increases your cluster availability. More here in GKE regions The official word on the current state of Kubernetes HA cluster options are well documented here. https://kubernetes.io/docs/setup/independent/ha-topology/
D

Rationale for using Docker to containerize applications
Continuous Integration and Delivery (CI, CD) • docker containers • • derk

2

0
Votes

2
Posts

0
Views

A

I'm struggling to understand the rationale of using Docker where the environments are essentially the same, and the applications are relatively simple. In reality, it is highly unlikely that any development environment on any project would ever be anywhere near the same as staging/production. Services running in staging/production will nearly always be physically hosted and managed somewhere which is not intended to be operated interactively by a human day-to-day, with an appropriate IT/security profile to match; The nature of development work, and even internal build/testing typically requires a different IT profile to that of a production server. Developers rarely have control over the underlying infrastructure or the organisation's IT/security policies. There are many ways in which the IT profile of developer environments, including build agents and even test machines, can deviate from production: Users/permissions or other security settings. Installed tools, SDKs, runtimes, debug/test tools, OS features/packages, and other dependencies operating with debug/test configurations enabled. Environment variables Filesystem structure and the content of files in globally shared directories Configurations of globally-installed dependencies such as web servers. Furthermore, consider the nature of physical devices and VMs They are stateful and mutable Every change to any aspect of a device or VM, including installed software and configuration changes potentially affects its entire state for all processes running on it. Physical devices and VMs typically run many processes/services concurrently, it would usually not be considered economical to have a whole server or VM just for a single running process. What containers provide: Isolation from the host device/VM and from an organisation's IT, Network and Infrastructure policies. Isolation from each other - for example, consider the issue of requiring multiple versions of globally-installed runtime dependencies or modifications to shared host resources such as environment variables or local files. Developers typically have full control over their choices of container images and the networking/orchestration inside the container runtime. Images are based on immutable layers, meaning it is not possible for the state of any layer in an image to change, so a published image should always be a good, known, valid starting point. The size of a parent image tends to be inconsequential because there's typically no reason to duplicate nor to re-download it unless a new version of that parent image is published. A container is its own thin, mutable layer on top of an image, usually negligible in size, and uses the parent image for all dependencies. if a container ends up in an invalid state, it may be quickly and cheaply disposed and replaced with a fresh, clean new container almost instantly by recreating another fresh new container layer. The cheap, light-weight nature of containers makes it very efficient to run a single process per-container.
N

SQL 2014 Availability group of Same DB produces different size Backup from Node A to Node B
SQL, Database Testing • backup sql server 2014 availability groups azure • • Nykeriab

2

0
Votes

2
Posts

0
Views

D

In AGs writes can only occur on the primary. Since the AlwaysOn Availabiliy Groups feature was introduced, we got new options to make the backups strategy more complete, but also more complex. Taking an advantage of secondary replicas, we can offload both, the FULL and even the Transaction Log backups from the Primary Replica to the Secondary, leaving the Primary replica dedicated to serve the production application. For example i am attaching here a 'Backup preferences' Window screen for your better understanding. Note 1)Full and differential backups always run on the primary replica. 2)Full copy only and transaction log backups run either on the primary replica, if the primary replica is set as the preferred replica for running backups, or on the secondary replica with the highest backup priority. 3)For successful backup of availability databases, verify that the secondary replica can communicate with the primary replica, and that the replicas are either Synchronized or Synchronizing. As per mssqltips blog documentation Here Microsoft has provided us with a system function called sys.fn_hadr_backup_is_preferred_replica. This function will return 0 if the current instance is not the preferred backup location or 1 if it is the preferred replica for backups according to the preference and priority settings IF sys.fn_hadr_backup_is_preferred_replica(@DatabaseName) = 1 BEGIN --Perform backup END The AG behavior of the “Backup Priority” setting: The replicas with the lower value will be in the end of the queue. Those replicas will only be used if no other is available. The replicas with the higher priority value will be on the top of the backup replica choice. In the case of have two or more replicas with the same priority value (weight) SQL Server will give priority based on the alphabetical order. For Your further refence Understanding backups on AlwaysOn Availability Groups & Here
K

SQL Azure "hot" table query slowdown over time
SQL, Database Testing • sql server performance azure loc languageking • • kalena

2

0
Votes

2
Posts

0
Views

J

The problem might be cardinality estimation, index fragmentation and stale statistics causing performance issues that increase over time. If you're not rebuilding your indexes and updating your statistics, this can be affecting the optimiser's plan choices and causing performance degradation over time. It might also explain why TRUNCATE seems to correct the issue (see Kendra Little's article, basically the optimiser tracks TRUNCATE to ensure it makes sensible decisions on empty tables even without statistics updates). You need to do a couple of things to track down the root cause: Enable Query Store to identify regressions in query performance over time. If a new plan is being selected due to cardinality issues or stale statistics, Query Store will highlight them. Implement regular index and statistics maintenance tasks if you haven't already. If you have stats or index frag issues, this should help alleviate them. Track your wait statistics over the one-two week period to see if a particular wait is increasing over time causing the degradation. Next time it occurs, don't truncate to fix - you need to collect as much data as you can to try and determine the root cause. Get the statistics details for the table, get the index frag details for the table, get the current execution plan details, collect BlitzCache details, these will all help you identify the root cause.
How do you set ms office on Azure Cloud Services?
Software Programming • c sharp asp.net mvc azure cloud office365 • • Bogopo

2

0
Votes

2
Posts

0
Views

A

About putting something in a cloud. Classic Cloud Service is a simple virtula from Windows 2016. It's possible to activate remote access to the install and to do anything. I'm not sure if you get from WorkerRole to gain access to the environment, but the COM facility should be available.
N

Azure DevOps/Pipelines seed job equivalent?
Continuous Integration and Delivery (CI, CD) • jenkins azure devops • • Nykeriab

2

0
Votes

2
Posts

1
Views

A

Yes this can be done, Azure Pipelines can ingest a yaml file, configuring the pipeline as code. These yaml files should be source controlled and the pipeline can be set up to build in an automated way. You can also reuse steps within the pipeline
How to fetch resource group name( with pattern matching) using Azurecli
Continuous Integration and Delivery (CI, CD) • azure • • Bogopo

2

0
Votes

2
Posts

1
Views

C

There are at least two ways to achieve this. First is to go with transforming json output to proper object for PowerShell as described in this thread: how do you select just one property from an array of “results” from the Azure command 'az group list in powershell'? Second it to use --query global parameter for Azure CLI: az group list --query "[?contains(name,'kafka')].name" But remember to use at least PowerShell 6.2 as previous versions have an issue: powershell --query error #9047

Azure Function App logs without Application Insights instance?

Suggested Topics

Linux: is sending prompt notifications on ssh logins a security measure? Security, Penetration Testing • linux ssh logging • • morde

Does local cache solve the problem with locked files when deploying to Azure App Service? Continuous Integration and Delivery (CI, CD) • azure • • guilherme

Get all change logs of since last successful build in Jenkins Pipeline Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline • • Avante

Docker Push Container to Azure ACR "unauthorized: authentication required" Continuous Integration and Delivery (CI, CD) • docker azure devops azure pipelines azure container registry • • zymir

How to determine MAXDOP setting when using DTU in Azure SQL SQL, Database Testing • sql server performance azure sql database azure performanc languagee tuni maxdop • • jonetta

What is the AWS equivalent of Azure Management Groups? Continuous Integration and Delivery (CI, CD) • azure amazon web services management groups • • Anderson

How are logs stored with ISP? Security, Penetration Testing • privacy ip logging user trac languageking • • baileigh

Fortigate Creating Millions of DNS events to standard domains Security, Penetration Testing • dns firewalls logging siem • • simrah

If we are using Kubernetes do we need to implement HA on both the infrastructure and application level? Continuous Integration and Delivery (CI, CD) • kubernetes high availability gcp infrastructure minikube • • yajahira

Rationale for using Docker to containerize applications Continuous Integration and Delivery (CI, CD) • docker containers • • derk

SQL 2014 Availability group of Same DB produces different size Backup from Node A to Node B SQL, Database Testing • backup sql server 2014 availability groups azure • • Nykeriab

SQL Azure "hot" table query slowdown over time SQL, Database Testing • sql server performance azure loc languageking • • kalena

How do you set ms office on Azure Cloud Services? Software Programming • c sharp asp.net mvc azure cloud office365 • • Bogopo

Azure DevOps/Pipelines seed job equivalent? Continuous Integration and Delivery (CI, CD) • jenkins azure devops • • Nykeriab

How to fetch resource group name( with pattern matching) using Azurecli Continuous Integration and Delivery (CI, CD) • azure • • Bogopo

Linux: is sending prompt notifications on ssh logins a security measure?
Security, Penetration Testing • linux ssh logging • • morde

Does local cache solve the problem with locked files when deploying to Azure App Service?
Continuous Integration and Delivery (CI, CD) • azure • • guilherme

Get all change logs of since last successful build in Jenkins Pipeline
Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline • • Avante

Docker Push Container to Azure ACR "unauthorized: authentication required"
Continuous Integration and Delivery (CI, CD) • docker azure devops azure pipelines azure container registry • • zymir

How to determine MAXDOP setting when using DTU in Azure SQL
SQL, Database Testing • sql server performance azure sql database azure performanc languagee tuni maxdop • • jonetta

What is the AWS equivalent of Azure Management Groups?
Continuous Integration and Delivery (CI, CD) • azure amazon web services management groups • • Anderson

How are logs stored with ISP?
Security, Penetration Testing • privacy ip logging user trac languageking • • baileigh

Fortigate Creating Millions of DNS events to standard domains
Security, Penetration Testing • dns firewalls logging siem • • simrah

If we are using Kubernetes do we need to implement HA on both the infrastructure and application level?
Continuous Integration and Delivery (CI, CD) • kubernetes high availability gcp infrastructure minikube • • yajahira

Rationale for using Docker to containerize applications
Continuous Integration and Delivery (CI, CD) • docker containers • • derk

SQL 2014 Availability group of Same DB produces different size Backup from Node A to Node B
SQL, Database Testing • backup sql server 2014 availability groups azure • • Nykeriab

SQL Azure "hot" table query slowdown over time
SQL, Database Testing • sql server performance azure loc languageking • • kalena

How do you set ms office on Azure Cloud Services?
Software Programming • c sharp asp.net mvc azure cloud office365 • • Bogopo

Azure DevOps/Pipelines seed job equivalent?
Continuous Integration and Delivery (CI, CD) • jenkins azure devops • • Nykeriab

How to fetch resource group name( with pattern matching) using Azurecli
Continuous Integration and Delivery (CI, CD) • azure • • Bogopo