Parameters

Advanced mode

Configuration file (--conf)

agents_group_id = Pandora FMS agent group ID where the agents will be created.
interval = task monitoring interval in seconds.
subscription_id = Azure subscription identifier.
tenant_id = Azure Active Directory tenant identifier.
client_id = Service Principal application identifier.
client_secret = Service Principal secret.
resource_group = optional Azure resource group to monitor. If left empty, Application Gateways from the whole subscription are discovered.
target_agent = target agent used when one agent per Application Gateway is not created.
agent_per_application_gateway = creates one agent per discovered Application Gateway.
application_gateway_agent_prefix = optional prefix for the agents created per Application Gateway.
modules_prefix = optional prefix for module names.
scan_application_gateways = enables automatic Application Gateway discovery.
entities_list = path to the temporary file where discovered entities are stored.
enable_entities_interval = enables periodic refresh of the entities file.
entities_interval = entities file refresh interval in seconds.
time_window = time window in minutes used to query Azure Monitor metrics.
metric_interval = Azure Monitor metric granularity in ISO-8601 format, for example PT1M.
metric_timeout = timeout in seconds for Azure API calls. If set to 0 or a negative value, the plugin uses 30 seconds.
max_retries = maximum number of retries for temporary API errors, including HTTP 429 rate limiting.
output_format = output format. Use json for Discovery and xml for manual tests.
module_allow_list_file = optional file with allowed module regular expressions, one per line.
module_deny_list_file = optional file with denied module regular expressions, one per line.
check_performance_modules = enables performance modules.
check_request_modules = enables request modules.
check_backend_modules = enables backend modules.
check_latency_modules = enables latency modules.
check_traffic_modules = enables traffic modules.
check_security_modules = enables security modules.
check_capacity_modules = enables capacity modules.
check_waf_modules = enables WAF modules.
check_websocket_modules = enables WebSocket modules.
check_application_gateway_count = enables the Application Gateway count module.
mock_api_url = optional Azure mock URL for local testing. It must be left empty in production.

Example

[CONF]
agents_group_id = 10
interval = 300
subscription_id = 00000000-0000-0000-0000-000000000000
tenant_id = 11111111-1111-1111-1111-111111111111
client_id = 22222222-2222-2222-2222-222222222222
client_secret = my_client_secret
resource_group = rg-production
target_agent = Azure Application Gateways
agent_per_application_gateway = 1
application_gateway_agent_prefix = Azure Application Gateway 
modules_prefix =
scan_application_gateways = 1
entities_list = /tmp/tmp_discovery.azure_application_gateway.entities
enable_entities_interval = 1
entities_interval = 3600
time_window = 5
metric_interval = PT1M
metric_timeout = 30
max_retries = 2
output_format = json
module_allow_list_file =
module_deny_list_file =
check_performance_modules = 1
check_request_modules = 1
check_backend_modules = 1
check_latency_modules = 1
check_traffic_modules = 1
check_security_modules = 1
check_capacity_modules = 1
check_waf_modules = 1
check_websocket_modules = 1
check_application_gateway_count = 1
mock_api_url =