Azure Arc Onboarding Plan

Onboard Fachtest and Prod servers onto Azure Arc, install Azure Monitor Agent (AMA), and apply Data Collection Rules (DCR) for Windows Event Logs.

Overview

• Scope: Fachtest + Prod server infrastructure
• Target: Azure Arc + AMA + DCR per server role
• Event Log Baseline: windows-event-log-baseline.md
• Created: 2026-03-25

Tasks per Server

For each server the following steps must be completed:

1. Arc - Server onboarded onto Azure Arc
2. AMA - Azure Monitor Agent installed (Arc extension)
3. DCR - Data Collection Rule applied (role-specific)

Data Collection Rules

Naming convention: dcr-tis-<env>-eventlogs-<role>

• <env> — fachtest or prod
• <role> — web, app, db, adfs
• ADFS role exists only in Prod

Environment	Server Role	DCR Name
Fachtest	Web	dcr-tis-fachtest-eventlogs-web
Fachtest	App	dcr-tis-fachtest-eventlogs-app
Fachtest	DB	dcr-tis-fachtest-eventlogs-db
Prod	Web	dcr-tis-prod-eventlogs-web
Prod	App	dcr-tis-prod-eventlogs-app
Prod	DB	dcr-tis-prod-eventlogs-db
Prod	ADFS	dcr-tis-prod-eventlogs-adfs

---

Fachtest

Server	Role	Arc	AMA	DCR	Notes
TISWEB01	Web	✅	✅	✅
TISAPP01	App	✅	✅	✅
TISAPP02	App	✅	✅	✅
TISAPP03	App	✅	✅	✅
TISAPP003	App	✅	✅	✅
TISDB003	DB	✅	✅	✅
TISDB004	DB	✅	✅	✅

Prod

Server	Role	Arc	AMA	DCR	Notes
TISWEB01	Web	✅	✅	✅
TISWEB02	Web	✅	✅	✅
TISAPP01	App	✅	✅	✅
TISAPP02	App	✅	✅	✅
TISAPP03	App	✅	✅	✅
TISDB01	DB	✅	✅	✅
TISDB02	DB	✅	✅	✅
TISWAP01	WAP	✅	✅	✅	WEB DCR applied (dcr-tis-prod-eventlogs-web)
TISADFS01	ADFS	✅	✅	✅	dcr-tis-prod-eventlogs-adfs

Open question: Should Domain Controllers (TISDC01, TISDC02) be included in the Arc onboarding? Needs discussion.