You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Fix Acrolinx issues in tutorial-configure-event-hub.md
- Remove minimizing language (simply)
- Replace Since with Because at sentence start
- Replace jargon (upsert, sink, peek) with standard terms
- Update ms.date not needed (already current)
Co-authored-by: Copilot <[email protected]>
Copy file name to clipboardExpand all lines: articles/cloud-hsm/tutorial-configure-event-hub.md
+26-26Lines changed: 26 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Tutorial - Configure Event Hub for Azure Cloud HSM
2
+
title: Tutorial - Configure Event Hubs for Azure Cloud HSM
3
3
description: Learn how to configure Azure Event Hubs as a destination for Azure Cloud HSM operation event logs for real-time streaming and downstream processing.
4
4
author: keithp
5
5
manager: keithp
@@ -9,34 +9,34 @@ ms.date: 04/08/2026
9
9
ms.author: keithp
10
10
ai-usage: ai-assisted
11
11
12
-
#Customer Intent: As an IT pro, I want to stream Azure Cloud HSM operation logs to Event Hub for real-time processing and integration with downstream systems.
12
+
#Customer Intent: As an IT pro, I want to stream Azure Cloud HSM operation logs to Event Hubs for real-time processing and integration with downstream systems.
13
13
14
14
---
15
15
16
-
# Tutorial: Configure Event Hub for Azure Cloud HSM
16
+
# Tutorial: Configure Event Hubs for Azure Cloud HSM
17
17
18
-
If you configured operation event logging for Azure Cloud HSM, you already have a working diagnostic setting on your Cloud HSM cluster that routes `HsmServiceOperations` logs to Storage and Log Analytics. Adding Event Hub is simply adding a third destination to that same diagnostic setting or creating a new one that targets Event Hub.
18
+
If you configured operation event logging for Azure Cloud HSM, you already have a working diagnostic setting on your Cloud HSM cluster that routes `HsmServiceOperations` logs to Storage and Log Analytics. To add Event Hubs as a destination, add a third destination to that same diagnostic setting or create a new one that targets Event Hubs.
19
19
20
-
Azure Monitor diagnostic settings support multiple destinations simultaneously. Since your Log Analytics pipeline already proves that log emission from Cloud HSM is working, Event Hub becomes another sink receiving the same `HsmServiceOperations` category.
20
+
Azure Monitor diagnostic settings support multiple destinations simultaneously. Because your Log Analytics pipeline already proves that log emission from Cloud HSM is working, Event Hubs becomes another destination receiving the same `HsmServiceOperations` category.
21
21
22
22
In this tutorial, you:
23
23
24
24
> [!div class="checklist"]
25
25
>
26
26
> - Create an Event Hub namespace and event hub for Cloud HSM logs.
27
27
> - Configure authorization rules with least-privilege permissions.
28
-
> - Update diagnostic settings to stream logs to Event Hub.
-An Azure Cloud HSM resource that's deployed and activated. For more information, see the [Azure Cloud HSM onboarding guide](onboarding-guide.md).
33
+
-A deployed and activated Azure Cloud HSM resource. For more information, see the [Azure Cloud HSM onboarding guide](onboarding-guide.md).
34
34
- Diagnostic settings emitting operation event logs to Storage and Log Analytics. For more information, see [Configure and query operation event logging for Azure Cloud HSM](tutorial-operation-event-logging.md).
35
35
-`Contributor` or `Monitoring Contributor` role on the Cloud HSM resource group.
36
36
37
37
## Verify the logs resource group exists
38
38
39
-
Event Hub should deploy into the same resource group that contains your storage account and Log Analytics workspace for operational event logging. If you didn't set up operational event logging, first follow the guidance in [Configure and query operation event logging for Azure Cloud HSM](tutorial-operation-event-logging.md).
39
+
Event Hubs should deploy into the same resource group that contains your storage account and Log Analytics workspace for operational event logging. If you didn't set up operational event logging, first follow the guidance in [Configure and query operation event logging for Azure Cloud HSM](tutorial-operation-event-logging.md).
40
40
41
41
Verify that your targeted resource group exists:
42
42
@@ -87,12 +87,12 @@ New-AzEventHubNamespace `
87
87
Key options:
88
88
89
89
-**Standard SKU**: The Basic tier doesn't support diagnostic settings as a destination.
90
-
-**Capacity 1**: One throughput unit (1MB/s ingress, 2MB/s egress) is sufficient for HSM audit logs.
91
-
-**Auto-inflate disabled**: HSM log volume is low, so auto-inflate isn't necessary.
90
+
-**Capacity 1**: One throughput unit (1-MB/s ingress, 2-MB/s egress) is sufficient for HSM audit logs.
91
+
-**Autoinflate disabled**: HSM log volume is low, so autoinflate isn't necessary.
92
92
93
93
## Create an event hub inside the namespace
94
94
95
-
Create an event hub (topic) to receive the Cloud HSM logs.
95
+
To receive the Cloud HSM logs, create an event hub inside the namespace.
96
96
97
97
# [Azure CLI](#tab/azure-cli)
98
98
@@ -123,7 +123,7 @@ New-AzEventHub `
123
123
Key options:
124
124
125
125
-**Partition count 2**: Two partitions are sufficient for HSM audit log throughput.
126
-
-**Retention time 168 hours**: Keep messages for 7 days (the maximum for Standard tier).
126
+
-**Retention time 168 hours**: Keep messages for seven days (the maximum for Standard tier).
127
127
-**Cleanup policy Delete**: Delete messages after the retention period expires.
> This rule grants only `Send` permission, not `Listen` or `Manage`. Follow the principle of least privilege. Your downstream consumers (such as Azure Functions or Stream Analytics) should use a separate rule with `Listen` permission.
182
+
> This rule grants only `Send` permission, not `Listen`, or `Manage`. Follow the principle of least privilege. Your downstream consumers (such as Azure Functions or Stream Analytics) should use a separate rule with `Listen` permission.
## Update the diagnostic setting to add Event Hubs
217
217
218
-
You have two options for adding Event Hub as a destination:
218
+
You have two options for adding Event Hubs as a destination:
219
219
220
220
### Option A: Update the existing diagnostic setting (recommended)
221
221
222
-
This approach updates your existing diagnostic setting to add Event Hub while keeping Storage and Log Analytics.
222
+
This approach updates your existing diagnostic setting to add Event Hubs while keeping Storage and Log Analytics.
223
223
224
224
# [Azure CLI](#tab/azure-cli)
225
225
@@ -312,11 +312,11 @@ New-AzDiagnosticSetting `
312
312
---
313
313
314
314
> [!IMPORTANT]
315
-
> Both CLI and PowerShell commands perform an upsert operation. If the name matches an existing setting, it replaces the setting entirely. You must include the storage account and workspace again, or those destinations are removed.
315
+
> Both CLI and PowerShell commands replace the entire diagnostic setting if the name matches an existing one. You must include the storage account and workspace again, or those destinations are removed.
316
316
317
-
### Option B: Create a separate diagnostic setting for Event Hub only
317
+
### Option B: Create a separate diagnostic setting for Event Hubs only
318
318
319
-
If you prefer to keep your existing setting unchanged and add a second one:
319
+
If you prefer to keep your existing setting unchanged and add a second one,
320
320
321
321
# [Azure CLI](#tab/azure-cli)
322
322
@@ -377,17 +377,17 @@ New-AzDiagnosticSetting `
377
377
> [!NOTE]
378
378
> Azure supports up to five diagnostic settings per resource. A second setting is valid and keeps concerns separated.
379
379
380
-
## Verify Event Hub is receiving messages
380
+
## Verify Event Hubs is receiving messages
381
381
382
-
After you configure the diagnostic setting, verify that Event Hub is receiving Cloud HSM logs.
382
+
After you configure the diagnostic setting, verify that Event Hubs is receiving Cloud HSM logs.
383
383
384
384
### Check the diagnostic setting in the portal
385
385
386
386
1. In the Azure portal, go to your Cloud HSM cluster.
387
387
1. Under **Monitoring**, select **Diagnostic settings**.
388
-
1. Confirm that Event Hub is listed as a destination.
388
+
1. Confirm that Event Hubs is listed as a destination.
389
389
390
-
### Check Event Hub metrics
390
+
### Check Event Hubs metrics
391
391
392
392
Run the following command to check incoming messages over the last hour:
393
393
@@ -423,7 +423,7 @@ Get-AzMetric `
423
423
424
424
---
425
425
426
-
### Peek at messages (optional)
426
+
### View messages (optional)
427
427
428
428
If you want to read a few messages to confirm content, create a **Listen** rule:
429
429
@@ -466,7 +466,7 @@ $keys.PrimaryConnectionString
466
466
467
467
---
468
468
469
-
You can use this connection string with Azure Event Hub Explorer, the VS Code Event Hub extension, or a Python script to peek at messages.
469
+
You can use this connection string with Azure Event Hubs Explorer, the Visual Studio Code Event Hubs extension, or a Python script to view messages.
0 commit comments