Azure Azure Cache for Redis - KQL queries about service Firewall

Bart Olejnik 125

Hi all,

I'm currently preparing KQL querises for Azure Cache for Redis which check compliance with my security requirements. One of the requirement is to check IP adressess added to the Service Firewall (where publicNetworkAccess = Enabled)

User's image

Unfortunately these values are not presents in the default JSON

User's image

resources
| where type =~ 'Microsoft.Cache/Redis'

do you know how can I listed such of entries using KQL ? (which resources I should use)

ps. I know that I can use API but for this specific case I would like to use KQL.

https://video2.skills-academy.com/en-us/rest/api/redis/firewall-rules/create-or-update?tabs=HTTP

https://video2.skills-academy.com/en-us/azure/templates/microsoft.cache/redis/firewallrules?pivots=deployment-language-bicep

I will be gratefull for your help.

Best regards

Bartek

Oury Ba-MSFT 17,631 Reputation points Microsoft Employee

2023-08-02T22:01:24.1966667+00:00
@Bart Olejnik Thank you for reaching out.

Are you looking for the lists of Unique Redis client IP addresses that have successfully authenticated to the cache. or The lists of all Redis Client IP addresses entered.?

Open the Azure portal and navigate to your Log Analytics workspace.

Select "Logs" from the left-hand menu to open the query editor.

select scope. (Ex: Redis Cache)

Click on create queries (see image above)

Regards,

Oury
Oury Ba-MSFT 17,631 Reputation points Microsoft Employee

2023-08-03T20:33:18.5133333+00:00

Hi @Bart Olejnik

I wanted to do a quick follow up regarding the above question. Could you please answer the below question.

Regards,

Oury
Bart Olejnik 125 Reputation points

2023-08-07T08:46:24.03+00:00

Hi Oury Ba,

no, I would like to use KQL query to check configuration of the Redis Cache and compare with my requirements (e.g. list of accepted IP on the company level).

Your explanation is about monitoring who reaching Redis Cache and you are working on the logs from the Diagnostic Settings.

Best regards

Bartek
Oury Ba-MSFT 17,631 Reputation points Microsoft Employee

2023-08-17T23:10:32.6733333+00:00

@Bart Olejnik

Please let us know if that was helpful.

Regards,

Oury

1 answer

Oury Ba-MSFT 17,631 Reputation points Microsoft Employee

2023-08-15T18:10:47.4666667+00:00

Bart Olejnik

Sorry for the delay in response to your previous comment.

Firewall rules are defined as child resources under the cache resource, of "type": "Microsoft.Cache/Redis/firewallRules".

resources

| where type = 'Microsoft.Cache/Redis/firewallRules'

Regards,

Oury
Please sign in to rate this answer.
Bart Olejnik 125 Reputation points

2023-08-30T14:11:19.8133333+00:00

Hi Oury,

thank you for your answer. You are right that this information in the subresource but unfortunately this query doesn't work.

Do you know whether it's possible to query sub-resources in the Azure Graph Explorer?
Sign in to comment

Share via

Azure Azure Cache for Redis - KQL queries about service Firewall

1 answer