Azure ARM template - set application settings and diagnostic log setitngs - azure-web-app-service

Question

I ran into an issue running arm template for an app service where II want to configure application settings and diagnostic log settings.
{
"type": "Microsoft.Web/sites",
"name": "[parameters('azureWebsiteName')]",
"apiVersion": "[variables('appServiceApiVersion')]",
"location": "[variables('location')]",
"tags": {
"Solution": "[parameters('solutionType')]",
"Sku": "[parameters('solutionSku')]"
},
"properties": {
"enabled": true,
"clientAffinityEnabled": false,
"serverFarmId": "[variables('hostingPlanName')]",
"siteConfig": {
"alwaysOn": true,
"siteAuthEnabled": true,
"siteAuthSettings": {
"clientId": "[parameters('aadClientId')]",
"clientSecret": "[parameters('aadClientSecret')]",
"unauthenticatedClientAction": "[parameters('apiSiteUnauthenticatedClientAction')]",
"defaultProvider": "[parameters('apiSiteDefaultProvider')]",
"allowedAudiences": [
"[parameters('aadAppIdUri')]"
]
},
"appSettings": [ ]
}
},
"identity": {
"type": "SystemAssigned"
},
"dependsOn": [
"[resourceId('Microsoft.Web/serverfarms', variables('hostingPlanName'))]"
],
"resources": [
{
"type": "config",
"name": "appsettings",
"apiVersion": "[variables('appServiceApiVersion')]",
"dependsOn": [
"[resourceId('Microsoft.Web/sites/', parameters('azureWebsiteName'))]",
"[resourceId('Microsoft.Web/sites/config/', parameters('azureWebsiteName'), 'logs')]",
"[resourceId('microsoft.insights/components/', parameters('appInsightsName'))]",
"Microsoft.ApplicationInsights.AzureWebSites",
"[resourceId('Microsoft.KeyVault/vaults/', parameters('keyVaultName'))]",
"[resourceId('Microsoft.KeyVault/vaults/secrets', parameters('keyVaultName'), variables('storageAccountConnectionString'))]",
"[resourceId('Microsoft.KeyVault/vaults/secrets', parameters('keyVaultName'), variables('documentDBAccessKey'))]"
],
"properties": {
"AzureWebJobsStorage": "[concat('#Microsoft.KeyVault(SecretUri=', reference(variables('storageAccountConnectionString')).secretUriWithVersion, ')')]"
}
},
{
"type": "config",
"name": "logs",
"apiVersion": "[variables('appServiceApiVersion')]",
"dependsOn": [
"[resourceId('Microsoft.Web/sites/', parameters('azureWebsiteName'))]",
"[resourceId('Microsoft.Storage/storageAccounts/', parameters('storageName'))]",
"[concat('Microsoft.Storage/storageAccounts/', parameters('storageName'), '/blobServices/default/containers/', variables('appLogsContainerName'))]",
"[concat('Microsoft.Storage/storageAccounts/', parameters('storageName'), '/blobServices/default/containers/', variables('webServerLogsContainerName'))]"
],
"properties": {
"httpLogs": {
"azureBlobStorage": {
"sasUrl": "[concat('https://',parameters('storageName'),'.blob.core.windows.net/',variables('webServerLogsContainerName'),'?',listServiceSas(parameters('storageName'), '2018-11-01', variables('webServerLogsSasProperties')).serviceSasToken)]",
"retentionInDays": "[parameters('diagnosticsLogsRetentionInDays')]",
"enabled": true
}
},
"failedRequestsTracing": {
"enabled": true
},
"detailedErrorMessages": {
"enabled": true
}
}
},
{
"type": "siteextensions",
"name": "Microsoft.ApplicationInsights.AzureWebSites",
"apiVersion": "[variables('appServiceApiVersion')]",
"dependsOn": [
"[resourceId('Microsoft.Web/Sites', parameters('azureWebsiteName'))]"
],
"properties": {}
}
]
}
The problem is when I deploy this, the logs config is set temporarily set then somehow gets un-set.
I believe it has something to do with multiple config objects(one for app-settings and one for logs) f I were to remove the app-settings config, the logs are correctly set and remain set.
Can someone help me understand what is happening?
Thanks!

Answer 1

Figured it out. I needed to add a dependency in logs on app settings.
"dependsOn": [
...
"[resourceId('Microsoft.Web/sites/config/', parameters('azureWebsiteName'), 'appsettings')]"
...
]
So the logs config will look like
{
"type": "config",
"name": "logs",
"apiVersion": "[variables('appServiceApiVersion')]",
"dependsOn": [
"[resourceId('Microsoft.Web/sites/', parameters('azureWebsiteName'))]",
"[resourceId('Microsoft.Web/sites/config/', parameters('azureWebsiteName'), 'appsettings')]",
"[resourceId('Microsoft.Storage/storageAccounts/', parameters('storageName'))]",
"[concat('Microsoft.Storage/storageAccounts/', parameters('storageName'), '/blobServices/default/containers/', variables('appLogsContainerName'))]",
"[concat('Microsoft.Storage/storageAccounts/', parameters('storageName'), '/blobServices/default/containers/', variables('webServerLogsContainerName'))]"
],
"properties": {
"applicationLogs": {
"azureBlobStorage": {
"level": "[parameters('diagnosticsLogsLevel')]",
"sasUrl": "[concat(reference(concat('Microsoft.Storage/storageAccounts/', parameters('storageName'))).primaryEndpoints.blob, variables('appLogsContainerName'), '?', listAccountSas(parameters('storageName'), variables('storageApiVersion'), variables('listAccountSasRequestContent')).accountSasToken)]",
"retentionInDays": "[parameters('diagnosticsLogsRetentionInDays')]"
}
},
"httpLogs": {
"azureBlobStorage": {
"sasUrl": "[concat(reference(concat('Microsoft.Storage/storageAccounts/', parameters('storageName'))).primaryEndpoints.blob, variables('webServerLogsContainerName'), '?', listAccountSas(parameters('storageName'), variables('storageApiVersion'), variables('listAccountSasRequestContent')).accountSasToken)]",
"retentionInDays": "[parameters('diagnosticsLogsRetentionInDays')]",
"enabled": true
}
},
"failedRequestsTracing": {
"enabled": true
},
"detailedErrorMessages": {
"enabled": true
}
}
},

Answer 2

Just merge properties of both configs into a single entity and apply that entity and it would work.
This happens because you overwrite the first write with the second write.