{"id":37193024,"url":"https://github.com/turbot/tailpipe-plugin-azure","last_synced_at":"2026-01-14T22:24:10.513Z","repository":{"id":274976873,"uuid":"843343311","full_name":"turbot/tailpipe-plugin-azure","owner":"turbot","description":"Collect Azure logs and query them instantly with SQL! Open source CLI. No DB required.","archived":false,"fork":false,"pushed_at":"2025-08-29T15:03:02.000Z","size":1398,"stargazers_count":8,"open_issues_count":9,"forks_count":0,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-08-29T18:23:01.424Z","etag":null,"topics":["activity-logs","azure","duckdb","sql","tailpipe","tailpipe-plugin"],"latest_commit_sha":null,"homepage":"https://hub.tailpipe.io/plugins/turbot/azure","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/turbot.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-08-16T10:00:25.000Z","updated_at":"2025-08-29T15:02:25.000Z","dependencies_parsed_at":"2025-01-30T14:23:54.779Z","dependency_job_id":"353193de-5189-467f-a461-a1e81f1c04b4","html_url":"https://github.com/turbot/tailpipe-plugin-azure","commit_stats":null,"previous_names":["turbot/tailpipe-plugin-azure"],"tags_count":17,"template":false,"template_full_name":null,"purl":"pkg:github/turbot/tailpipe-plugin-azure","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Ftailpipe-plugin-azure","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Ftailpipe-plugin-azure/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Ftailpipe-plugin-azure/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Ftailpipe-plugin-azure/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/turbot","download_url":"https://codeload.github.com/turbot/tailpipe-plugin-azure/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/turbot%2Ftailpipe-plugin-azure/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28436307,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T21:32:52.117Z","status":"ssl_error","status_checked_at":"2026-01-14T21:32:33.442Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["activity-logs","azure","duckdb","sql","tailpipe","tailpipe-plugin"],"created_at":"2026-01-14T22:24:09.667Z","updated_at":"2026-01-14T22:24:10.490Z","avatar_url":"https://github.com/turbot.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Azure Plugin for Tailpipe\n\n[Tailpipe](https://tailpipe.io) is an open-source CLI tool that allows you to collect logs and query them with SQL.\n\n[Azure](https://azure.microsoft.com) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis.\n\nThe [Azure Plugin for Tailpipe](https://hub.tailpipe.io/plugins/turbot/azure) allows you to collect and query Azure logs using SQL to track activity, monitor trends, detect anomalies, and more!\n\n- **[Get started →](https://hub.tailpipe.io/plugins/turbot/azure)**\n- Documentation: [Table definitions \u0026 examples](https://hub.tailpipe.io/plugins/turbot/azure/tables)\n- Community: [Join #tailpipe on Slack →](https://turbot.com/community/join)\n- Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-azure/issues)\n\nCollect and query logs:\n![image](docs/images/azure_activity_log_terminal.png)\n\n## Getting Started\n\nInstall Tailpipe from the [downloads](https://tailpipe.io/downloads) page:\n\n```sh\n# MacOS\nbrew install turbot/tap/tailpipe\n```\n\n```sh\n# Linux or Windows (WSL)\nsudo /bin/sh -c \"$(curl -fsSL https://tailpipe.io/install/tailpipe.sh)\"\n```\n\nInstall the plugin:\n\n```sh\ntailpipe plugin install azure\n```\n\nConfigure your [connection credentials](https://hub.tailpipe.io/plugins/turbot/azure#connection-credentials), table partition, and data source ([examples](https://hub.tailpipe.io/plugins/turbot/azure/tables/azure_activity_log#example-configurations)):\n\n```sh\nvi ~/.tailpipe/config/azure.tpc\n```\n\n```hcl\nconnection \"azure\" \"my_subscription\" {\n  tenant_id       = \"00000000-0000-0000-0000-000000000000\"\n  subscription_id = \"00000000-0000-0000-0000-000000000000\"\n  client_id       = \"00000000-0000-0000-0000-000000000000\"\n  client_secret   = \"my plaintext secret\"\n}\n\npartition \"azure_activity_log\" \"my_logs\" {\n  source \"azure_blob_storage\" {\n    connection   = connection.azure.my_subscription\n    account_name = \"storage_account_name\"\n    container    = \"container_name\"\n  }\n}\n```\n\nDownload, enrich, and save logs from your source ([examples](https://tailpipe.io/docs/reference/cli/collect)):\n\n```sh\ntailpipe collect azure_activity_log\n```\n\nEnter interactive query mode:\n\n```sh\ntailpipe query\n```\n\nRun a query:\n\n```sql\nselect\n  resource_type,\n  operation_name,\n  count(*) as operation_count\nfrom\n  azure_activity_log\ngroup by\n  resource_type,\n  operation_name\norder by\n  operation_count desc;\n```\n\n```sh\n+-----------------------------------------------------------+------------------------------------------------------------------+-----------------+\n| resource_type                                             | operation_name                                                   | operation_count |\n+-----------------------------------------------------------+------------------------------------------------------------------+-----------------+\n| Microsoft.Resources/deployments                           | Microsoft.Resources/deployments/write                            | 86              |\n| Microsoft.Resources/deployments                           | Microsoft.Resources/deployments/validate/action                  | 58              |\n| Microsoft.Compute/virtualMachines                         | Microsoft.Authorization/policies/auditIfNotExists/action         | 54              |\n| Microsoft.Compute/virtualMachines                         | Microsoft.Authorization/policies/audit/action                    | 36              |\n| Microsoft.Sql/servers                                     | Microsoft.Authorization/policies/auditIfNotExists/action         | 25              |\n| Microsoft.Sql/servers/databases                           | Microsoft.Sql/servers/databases/read                             | 20              |\n| MICROSOFT.CDN/profiles                                    | Microsoft.Resourcehealth/healthevent/Activated/action            | 18              |\n+-----------------------------------------------------------+------------------------------------------------------------------+-----------------+\n```\n\n## Detections as Code with Powerpipe\n\nPre-built dashboards and detections for the Azure plugin are available in [Powerpipe](https://powerpipe.io) mods, helping you monitor and analyze activity across your Azure subscriptions.\n\nFor example, the [Azure Activity Log Detections mod](https://hub.powerpipe.io/mods/turbot/tailpipe-mod-azure-activity-log-detections) scans your activity logs for anomalies, such as a SQL server firewall rule getting updated or a change in your virtual networks.\n\nDashboards and detections are [open source](https://github.com/topics/tailpipe-mod), allowing easy customization and collaboration.\n\nTo get started, choose a mod from the [Powerpipe Hub](https://hub.powerpipe.io/?engines=tailpipe\u0026q=azure).\n\n![image](docs/images/azure_activity_log_mitre_dashboard.png)\n\n## Developing\n\nPrerequisites:\n\n- [Tailpipe](https://tailpipe.io/downloads)\n- [Golang](https://golang.org/doc/install)\n\nClone:\n\n```sh\ngit clone https://github.com/turbot/tailpipe-plugin-azure.git\ncd tailpipe-plugin-azure\n```\n\nAfter making your local changes, build the plugin, which automatically installs the new version to your `~/.tailpipe/plugins` directory:\n\n```sh\nmake\n```\n\nRe-collect your data:\n\n```sh\ntailpipe collect azure_activity_log\n```\n\nTry it!\n\n```sh\ntailpipe query\n\u003e .inspect azure_activity_log\n```\n\n## Open Source \u0026 Contributing\n\nThis repository is published under the [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) (source code) and [CC BY-NC-ND](https://creativecommons.org/licenses/by-nc-nd/2.0/) (docs) licenses. Please see our [code of conduct](https://github.com/turbot/.github/blob/main/CODE_OF_CONDUCT.md). We look forward to collaborating with you!\n\n[Tailpipe](https://tailpipe.io) is a product produced from this open source software, exclusively by [Turbot HQ, Inc](https://turbot.com). It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our [Open Source FAQ](https://turbot.com/open-source).\n\n## Get Involved\n\n**[Join #tailpipe on Slack →](https://turbot.com/community/join)**\n\nWant to help but don't know where to start? Pick up one of the `help wanted` issues:\n\n- [Tailpipe](https://github.com/turbot/tailpipe/labels/help%20wanted)\n- [Azure Plugin](https://github.com/turbot/tailpipe-plugin-azure/labels/help%20wanted)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fturbot%2Ftailpipe-plugin-azure","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fturbot%2Ftailpipe-plugin-azure","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fturbot%2Ftailpipe-plugin-azure/lists"}