Setting up Zia Insights

    Last updated on:

    In this page

    Overview

    Zia Insights provides AI-powered actionable insights on incidents, alerts and logs using the Bring Your Own Key (BYOK) model, supporting integration with Azure OpenAI and OpenAI services. Only one provider can be active at a time, and all AI-driven features will use the currently enabled model.

    This page explains the configurations required to enable Zia Insights, including setting up your chosen AI provider, retrieving the required credentials, and integrating the service with the product console.

    Pre-requisites

    Before beginning the setup, ensure the following:

    • Zia Insights capability is only available for the Professional and MSSP plan subscription users.
    • You must have an active Azure subscription with access to the Azure OpenAI service.
    • The following credentials are required from your Azure portal:
      • Endpoint URL
      • API key
      • Deployed model name
    • The following credentials are required from OpenAI:
      • Model
      • API key

    Accessing Zia Insights

    1. Log in to the product console.
    2. Go to the Settings tab.
    3. Navigate to Admin Settings. Under Zia, select Configuration.
      Setting up Zia Insights
      Figure 1: Navigating to Zia Configuration
    4. In the Zia page, choose either Azure OpenAI or OpenAI and click Configure Now.
      NOTE Only one provider can be enabled at a time.
      Setting up Zia Insights
      Figure 2: Configuring AI service
    5. A configuration window appears.
    6. If you select Azure OpenAI, enter the following details obtained from your Azure Portal:
      • Endpoint URL
      • Deployment Name
      • API Key
      NOTE Refer to the following pages to configure Azure OpenAI:
      Setting up Zia Insights
      Figure 3: Configuring Azure OpenAI
    7. Click Save to complete the initial setup.
    8. If you select OpenAI, select the Model from the dropdown.
      Setting up Zia Insights
      Figure 4: Selecting a model
    9. Enter the API Key.
      NOTE Refer to this section to configure OpenAI.
      Setting up Zia Insights
      Figure 5: Entering API key
    10. Click Save to complete the initial setup.
    11. After configuring Azure OpenAI or OpenAI:
      • Use the Insights toggle to enable or disable Zia Insights.
      Setting up Zia Insights
      Figure 6: Enabling Zia Insights
    12. When you enable Zia Insights, a pop-up window appears displaying the data privacy notice. Read the notice carefully, select the checkbox to acknowledge the terms, and then click Proceed to continue.
      NOTE To generate AI-powered insights, the processes contextual data associated with logs, alerts, and entities. This includes the following types of information:
      • User-related information: usernames, account names, email, phone number, department, group names, mailgroups, mailbox names, company names, user information, and security ID (SID).
      • Device and directory information: hostnames, computer names, domain, distinguished path of AD object, and AD object names.
      • Network and location information: IP address, region, and country.
      • Request and URL information: URL links, HTTP requests, and HTTP request parameters.
      • Application and database information: database name.

      This data is processed only to support contextual analysis, correlation, and remediation guidance within the product.

      Setting up Zia Insights
      Figure 7: Data privacy note for Azure OpenAI
      Setting up Zia Insights
      Figure 8: Data privacy note for OpenAI
    13. To switch between Azure OpenAI and OpenAI, use the toggle to disable the currently active provider.
      Setting up Zia Insights
      Figure 9: Disabling an AI service
    14. A confirmation pop-up will appear. Click Yes to disable, and then configure the other provider.
      Setting up Zia Insights
      Figure 10: Disabling an AI service
    15. To delete a configuration, select Delete existing Azure/OpenAI configuration and click Yes to confirm your deletion.
      Setting up Zia Insights
      Figure 11: Deleting an AI service
      NOTE If you attempt to configure another provider while one is already enabled, the existing provider will be disabled automatically.
      Setting up Zia Insights
      Figure 12: Configuring an AI service

      In the confirmation pop-up that appears, click Proceed to continue with the new configuration.

      Setting up Zia Insights
      Figure 13: Configuring a new service

    Creating an Azure OpenAI resource

    If you do not already have an Azure OpenAI resource, follow these steps:

    NOTE If you already have an Azure OpenAI resource, refer to this to obtain the API key and Endpoint URL.

    1. Log in to Azure portal and click Create a resource.
      Setting up Zia Insights
      Figure 14: Creating a resource in Microsoft Azure
    2. Select Azure OpenAI as the resource type.
      Setting up Zia Insights
      Figure 15: Creating an Azure OpenAI resource
    3. Choose a Subscription of your choice.
    4. Select an existing Resource group or create a new one.
      Setting up Zia Insights
      Figure 16: Creating a resource group in Microsoft Azure
    5. Pick your desired Region and Pricing Tier.
    6. Enter a suitable Name for the resource.
      Setting up Zia Insights
      Figure 17: Instance details for Azure OpenAI service
    7. Under Networking, select All networks, including the internet, can access this resource.

      NOTE The Azure OpenAI resource must be publicly available on the internet so that the product console can access the endpoint.

      Setting up Zia Insights
      Figure 18: Configuring network security for Azure AI services resource
    8. Click Next to configure Tags (optional).
    9. Click Next again to move to the Review + Submit page.
      Setting up Zia Insights
      Figure 19: Final review to create resource
    10. Review your settings and click Create to provision the resource.

    Steps to obtain Endpoint URL and API key

    If you already have an Endpoint URL and API key, skip to the next section. If not:

    1. Log in to Azure portal and navigate to your Azure OpenAI resource.
    2. In the left pane, under the Resource Management section, click on Keys and Endpoint. It will open Keys and Endpoint console.
    3. In this window, you will find the Endpoint URL and API keys for your Azure OpenAI resource. Copy these details for use in the product.
      Setting up Zia Insights
      Figure 20: Obtaining API keys and Endpoint URL for Azure OpenAI resource

    Deploying a model in Azure OpenAI

    A deployed model is a version of an AI model (such as GPT-4o or GPT-4.1) that has been activated and made available for use within your Azure OpenAI resource. The product console will interact with the deployed model to generate AI-powered insights from your logs and alerts.

    NOTE If you already have a deployed model, you can directly use its deployment name when integrating with the product console. Ensure that the model is one of the following types:
    1. The Chat Completion API model (models GPT-4o or newer). For better results, use latest available model such as GPT-4.1 or newer.
    2. A non-reasoning model, excluding versions like o1-preview and o1-mini.

    If you do not have a deployed model, follow the steps below.

    Steps to deploy a model

    1. Navigate to your Azure OpenAI resource and click Go to Azure AI Foundry portal.
      Setting up Zia Insights
      Figure 21: Deploying a model in the Azure AI Foundry portal
    2. On the Azure AI Foundry portal, navigate to the Deployments section, click Deploy model, and select Deploy base model.
      Setting up Zia Insights
      Figure 22: Deploying a model in Azure AI Foundry portal
    3. Choose a model that meets the following constraints:
      • Must support the Chat Completion API (models GPT-4o or newer). For better results, use latest available model such as GPT-4.1 or newer. Avoid reasoning models like o1-preview and o1-mini because they do not support system prompts.
      Setting up Zia Insights
      Figure 23: Available models for deployment in Azure AI Foundry portal
    4. Enter a deployment name of your choice (defaults to the model name).
      Setting up Zia Insights
      Figure 24: Deployment settings in Azure AI Foundry portal
    5. Select the deployment type based on your data processing needs. Learn more about deployment types.
      Setting up Zia Insights
      Figure 25: Deployment settings in Azure AI Foundry portal
    6. Click Create resource and deploy to complete the model deployment.
      Setting up Zia Insights
      Figure 26: Model deployment in Azure AI Foundry portal

    NOTE Once you've completed these steps and obtained your credentials, refer to this section to access Zia Insights.

    Generating an OpenAI API key

    1. Log in to your OpenAI account.
    2. Click Create new secret key.
      Setting up Zia Insights
      Figure 27: Creating a secret key
    3. In the pop-up window, select the You tab.
    4. Enter a Name for the key (optional).
      Setting up Zia Insights
      Figure 28: Entering a name
    5. Select Default project from the Project drop-down.
      Setting up Zia Insights
      Figure 29: Selecting a project
    6. Choose the appropriate Permissions based on your requirement.
      NOTE For product integration, the key must have permission to read and write API resources.
    7. Click Create secret key.
      Setting up Zia Insights
      Figure 30: Creating a secret key
    8. Copy the generated API key displayed in the Save your key pop-up.
      Setting up Zia Insights
      Figure 31: Copying the secret key
    9. Use this API key in the product console when configuring the OpenAI option in Setting up Zia Insights

    Read also

    This document detailed the configuration steps required to enable Zia Insights, including Azure OpenAI resource creation, model deployment, and integration setup. To leverage the capabilities of Zia Insights, refer to the following articles: