AzShim

Automate the deployment of Azure Monitor Diagnostic Settings for the integration with Blumira SIEM. For additional information regarding Blumira's eventhubs information please see, https://blumira.help/azure.

Pre-requisites

This script assumes the following:

1. You have an Azure subscription (have not tested with Gov Cloud only standard Azure subscriptions)
2. You are a contributor or higher in said subscription
3. You know or can set up an Azure CLI cloud shell or have a local machine that is using BASH and not ZSH

Setting Up Azure Cloud Shell

Before running the script it is recommended that you set up or configure Azure Cloud Shell. You can use the defaults without issue, but when prompted for Location within the script, please use the region ID where you have most of your other resources in your subscription. Azure by default may place the storage account in a separate region. When starting make sure to run Azure Cloud Shell in BASH and not Powershell. Use this video below for help in getting started with Azure Cloud Shell (Skip to 0:58s from Cloud Guru).

Cloning the Repo and Running the Script

To get started copy and paste the following into your Azure Cloud Shell terminal window. The following commands clone the repo, place you in the directory, set the script to have the proper permissions to run, and finally run the script.

git clone https://github.com/Blumira/AzShim.git
cd ./AzShim
chmod +x ./AzShim.azcli
./AzShim.azcli -c