You can archive your logs for long-term storage by sending them to a Microsoft Azure Storage container.
Minimal permissions
Layerlog will need:
- Storage Blob Data Contributor permissions to archive data to a Microsoft Azure Storage account.
- Storage Blob Data Reader permissions to restore data from a Microsoft Azure Storage account.
Setting up a Storage container and App registration in Microsoft Azure
Before you begin, you’ll need: Permissions to manage a Storage container and App registration in Microsoft Azure.
Create an App registration
Open your Azure Portal. Select Azure Active Directory > App registrations from the left-menu.
If you have an existing App registration you can use, select it. Otherwise create a new one.
Click + New registration to create an App registration. Name it, leave the default settings and click Register.
Copy the App registration parameters
The App Overview page provides 2 of the credentials required to fill-in the form in Layerlog: Application (client) ID & Directory (tenant) ID.
Copy them for future reference.
Create & copy the Client secret password
On the same App registration page, select Certificates & secrets from the left-menu. Click + New client secret to create a new one. Select a time frame for its expiration, add a description, and click Add.
Copy the secret for future reference. (Note that the password value will not be available once you leave the page.)
If the secret is set to expire, you will need to remember to renew the credentials and reconfigure archiving in Layerlog!
Create a Storage account
Click the main menu in the top-left corner, and select Storage account.
If you have an existing Storage account you can use, select it. Otherwise create a new one.
Click + Create to create a new account.
Create a Storage container
In the Storage account, create a storage container (or select an existing one).
Assign App & role to your Storage container
Still on the Storage container page, select Access Control (IAM) from the left-menu.
Select Add role assignments.
Fill in the form:
- Role - Select Storage Blob Data Contributor.
- Assign access to - Leave the defaults unchanged. They should be User, group, or service principal
- Select - Start typing in the name of the app and select it from the dropdown list.
- Click save.
Configure Layerlog Archive & Restore
Open your Layerlog app.
In the Archive configuration tab, select the Azure tab, and fill in the form with the credentials you created and copied in the previous steps.
