Cấu hình Azure Monitor

# Tạo Resource Group
az group create \
  --name rg-az104-m28 \
  --location southeastasia \
  --tags Course=AZ-104 Module=28 Environment=Lab

# Tạo Log Analytics Workspace
az monitor log-analytics workspace create \
  --resource-group rg-az104-m28 \
  --workspace-name law-az104-m28 \
  --location southeastasia \
  --sku PerGB2018 \
  --retention-time 30

# Lấy Workspace ID và Key (dùng để kết nối agent)
WORKSPACE_ID=$(az monitor log-analytics workspace show \
  --resource-group rg-az104-m28 \
  --workspace-name law-az104-m28 \
  --query customerId -o tsv)

WORKSPACE_KEY=$(az monitor log-analytics workspace get-shared-keys \
  --resource-group rg-az104-m28 \
  --workspace-name law-az104-m28 \
  --query primarySharedKey -o tsv)

echo "Workspace ID: $WORKSPACE_ID"
echo "Workspace Key: $WORKSPACE_KEY"

# Tạo VM Ubuntu để giám sát
az vm create \
  --resource-group rg-az104-m28 \
  --name vm-monitor-lab28 \
  --image Ubuntu2204 \
  --size Standard_B1s \
  --admin-username azureuser \
  --generate-ssh-keys \
  --location southeastasia \
  --tags Course=AZ-104 Module=28

WORKSPACE_ID=$(az monitor log-analytics workspace show \
  --resource-group rg-az104-m28 \
  --workspace-name law-az104-m28 \
  --query id -o tsv)

VM_ID=$(az vm show \
  --resource-group rg-az104-m28 \
  --name vm-monitor-lab28 \
  --query id -o tsv)

# Bật Diagnostic Settings trên VM — gửi metrics sang Log Analytics
az monitor diagnostic-settings create \
  --name "vm-diag-to-law" \
  --resource "$VM_ID" \
  --workspace "$WORKSPACE_ID" \
  --metrics '[{"category":"AllMetrics","enabled":true,"retentionPolicy":{"enabled":false,"days":0}}]'

# Bật Diagnostic Settings trên Subscription — gửi Activity Log sang Log Analytics
SUB_ID=$(az account show --query id -o tsv)

az monitor diagnostic-settings subscription create \
  --name "sub-activitylog-to-law" \
  --location southeastasia \
  --workspace "$WORKSPACE_ID" \
  --logs '[{"category":"Administrative","enabled":true},{"category":"Security","enabled":true},{"category":"ServiceHealth","enabled":true},{"category":"Alert","enabled":true},{"category":"Policy","enabled":true}]'

echo "Diagnostic settings đã được cấu hình."
echo "Dữ liệu sẽ xuất hiện trong Log Analytics sau 5-10 phút."

VM_ID=$(az vm show \
  --resource-group rg-az104-m28 \
  --name vm-monitor-lab28 \
  --query id -o tsv)

# Xem danh sách metrics có sẵn cho VM
az monitor metrics list-definitions \
  --resource "$VM_ID" \
  --query "[].{Name:name.value,Unit:unit,Desc:displayDescription}" \
  --output table | head -20

# Lấy CPU Percentage của VM trong 1 giờ qua
az monitor metrics list \
  --resource "$VM_ID" \
  --metric "Percentage CPU" \
  --interval PT5M \
  --start-time $(date -u -d '1 hour ago' '+%Y-%m-%dT%H:%M:%SZ') \
  --end-time $(date -u '+%Y-%m-%dT%H:%M:%SZ') \
  --aggregation Average \
  --query "value[0].timeseries[0].data[*].{Time:timeStamp,CPU:average}" \
  --output table

# Xem Activity Log — lọc các delete operation gần đây
az monitor activity-log list \
  --resource-group rg-az104-m28 \
  --start-time $(date -u -d '24 hours ago' '+%Y-%m-%dT%H:%M:%SZ') \
  --query "[?contains(operationName.value,'delete') || contains(operationName.value,'write')].{Time:eventTimestamp,Op:operationName.value,Caller:caller,Status:status.value}" \
  --output table

SUB_ID=$(az account show --query id -o tsv)
VM_ID=$(az vm show \
  --resource-group rg-az104-m28 \
  --name vm-monitor-lab28 \
  --query id -o tsv)

# Tạo dashboard JSON template
cat > /tmp/monitor-dashboard.json << EOF
{
  "lenses": {
    "0": {
      "order": 0,
      "parts": {
        "0": {
          "position": {"x": 0, "y": 0, "colSpan": 6, "rowSpan": 4},
          "metadata": {
            "type": "Extension/Microsoft_Azure_Monitoring/PartType/MetricsChartPart",
            "settings": {
              "content": {
                "options": {
                  "chart": {
                    "metrics": [{
                      "resourceMetadata": {"id": "$VM_ID"},
                      "name": "Percentage CPU",
                      "aggregationType": 4,
                      "namespace": "microsoft.compute/virtualmachines",
                      "metricVisualization": {"displayName": "CPU %"}
                    }],
                    "title": "VM CPU Usage — Lab 28",
                    "titleKind": 1,
                    "visualization": {"chartType": 2}
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "metadata": {
    "model": {
      "timeRange": {
        "value": {"relative": {"duration": 24, "timeUnit": 1}},
        "type": "MsPortalFx.Composition.Configuration.ValueTypes.TimeRange"
      }
    }
  }
}
EOF

# Deploy dashboard
az portal dashboard create \
  --name "AZ104-Module28-Monitor" \
  --resource-group rg-az104-m28 \
  --location southeastasia \
  --input-path /tmp/monitor-dashboard.json

echo "Dashboard tạo thành công."
echo "Xem tại: Portal → Dashboard → AZ104-Module28-Monitor"

# Xóa Diagnostic Settings trên Subscription
az monitor diagnostic-settings subscription delete \
  --name "sub-activitylog-to-law" \
  --yes

# Xóa Resource Group — kéo theo VM, Log Analytics Workspace, Dashboard
az group delete --name rg-az104-m28 --yes --no-wait

echo "Cleanup đã được kích hoạt. RG sẽ bị xóa trong vài phút."