Article 02/01/2023 20 minutes to read (Video) Azure Monitor Logs Log Types
In this article Note
(Video) How to use the Log Analytics scope in Azure Monitor
This list is largely auto-generated. Any modification made to this list via GitHub might be written over without warning. Contact the author of this article for details on how to make permanent updates.
Azure Monitor resource logs are logs emitted by Azure services that describe the operation of those services or resources. All resource logs available through Azure Monitor share a common top-level schema. Each service has the flexibility to emit unique properties for its own events.
(Video) Azure Monitor with Log Analytics
Resource logs were previously known as diagnostic logs. The name was changed in October 2019 as the types of logs gathered by Azure Monitor shifted to include more than just the Azure resource.
A combination of the resource type (available in the resourceId property) and the category uniquely identifies a schema. There's a common schema for all resource logs with service-specific fields then added for different log categories. For more information, see Common and service-specific schema for Azure resource logs .
(Video) Azure Monitoring Introduction | Lecture 76
Costs Azure Monitor Log Analytics , Azure Storage , Azure Event Hubs , and partners who integrate directly with Azure Monitor (for example, Datadog ) have costs associated with ingesting data and storing data. Check the pricing pages linked in the previous sentence to understand the costs for those services. Resource logs are just one type of data that you can send to those locations.
In addition, there might be costs to export some categories of resource logs to those locations. Logs with possible export costs are listed in the table in the next section. For more information on export pricing, see the Platform Logs section on the Azure Monitor pricing page .
(Video) Microsoft Azure Monitor Agent and Data Collection Rule Overview
Supported log categories per resource type Following is a list of the types of logs available for each resource type.
Some categories might be supported only for specific types of resources. See the resource-specific documentation if you feel you're missing a resource. For example, Microsoft.Sql/servers/databases categories aren't available for all types of databases. For more information, see information on SQL Database diagnostic logging .
(Video) Complete Azure Monitor explained with overview in 20 Minutes
If you think something is missing, you can open a GitHub comment at the bottom of this article.
Microsoft.AAD/DomainServices Category Category Display Name Costs To Export AccountLogon AccountLogon No AccountManagement AccountManagement No DetailTracking DetailTracking No DirectoryServiceAccess DirectoryServiceAccess No LogonLogoff LogonLogoff No ObjectAccess ObjectAccess No PolicyChange PolicyChange No PrivilegeUse PrivilegeUse No SystemSecurity SystemSecurity No
microsoft.aadiam/tenants Category Category Display Name Costs To Export Signin Signin Yes
Microsoft.AgFoodPlatform/farmBeats Category Category Display Name Costs To Export ApplicationAuditLogs Application Audit Logs Yes FarmManagementLogs Farm Management Logs Yes FarmOperationLogs Farm Operation Logs Yes InsightLogs Insight Logs Yes JobProcessedLogs Job Processed Logs Yes ModelInferenceLogs Model Inference Logs Yes ProviderAuthLogs Provider Auth Logs Yes SatelliteLogs Satellite Logs Yes SensorManagementLogs Sensor Management Logs Yes WeatherLogs Weather Logs Yes
Microsoft.AnalysisServices/servers Category Category Display Name Costs To Export Engine Engine No Service Service No
Microsoft.ApiManagement/service Category Category Display Name Costs To Export GatewayLogs Logs related to ApiManagement Gateway No WebSocketConnectionLogs Logs related to Websocket Connections Yes
Microsoft.App/managedEnvironments Category Category Display Name Costs To Export ContainerAppConsoleLogs Container App console logs Yes ContainerAppSystemLogs Container App system logs Yes
Microsoft.AppConfiguration/configurationStores Category Category Display Name Costs To Export Audit Audit Yes HttpRequest HTTP Requests Yes
Microsoft.AppPlatform/Spring Category Category Display Name Costs To Export ApplicationConsole Application Console No BuildLogs Build Logs Yes ContainerEventLogs Container Event Logs Yes IngressLogs Ingress Logs Yes SystemLogs System Logs No
Microsoft.Attestation/attestationProviders Category Category Display Name Costs To Export AuditEvent AuditEvent message log category. No NotProcessed Requests which could not be processed. Yes Operational Operational message log category. Yes
Microsoft.Automation/automationAccounts Category Category Display Name Costs To Export AuditEvent AuditEvent Yes DscNodeStatus DscNodeStatus No JobLogs JobLogs No JobStreams JobStreams No
Microsoft.AutonomousDevelopmentPlatform/accounts Category Category Display Name Costs To Export Audit Audit Yes Operational Operational Yes Request Request Yes
Microsoft.AutonomousDevelopmentPlatform/workspaces Category Category Display Name Costs To Export Audit Audit Yes Operational Operational Yes Request Request Yes
microsoft.avs/privateClouds Category Category Display Name Costs To Export vmwaresyslog VMware Syslog Yes
Microsoft.Batch/batchaccounts Category Category Display Name Costs To Export AuditLog Audit Logs Yes ServiceLog Service Logs No ServiceLogs Service Logs Yes
microsoft.botservice/botservices Category Category Display Name Costs To Export BotRequest Requests from the channels to the bot Yes
Microsoft.Cache/redis Category Category Display Name Costs To Export ConnectedClientList Connected client list Yes
Microsoft.Cache/redisEnterprise/databases Category Category Display Name Costs To Export ConnectionEvents Connection events (New Connection/Authentication/Disconnection) Yes
Microsoft.Cdn/cdnwebapplicationfirewallpolicies Category Category Display Name Costs To Export WebApplicationFirewallLogs Web Appliation Firewall Logs No
Microsoft.Cdn/profiles Category Category Display Name Costs To Export AzureCdnAccessLog Azure Cdn Access Log No FrontDoorAccessLog FrontDoor Access Log Yes FrontDoorHealthProbeLog FrontDoor Health Probe Log Yes FrontDoorWebApplicationFirewallLog FrontDoor WebApplicationFirewall Log Yes
Microsoft.Cdn/profiles/endpoints Category Category Display Name Costs To Export CoreAnalytics Gets the metrics of the endpoint, e.g., bandwidth, egress, etc. No
Microsoft.ClassicNetwork/networksecuritygroups Category Category Display Name Costs To Export Network Security Group Rule Flow Event Network Security Group Rule Flow Event No
Microsoft.CodeSigning/codesigningaccounts Category Category Display Name Costs To Export SignTransactions Sign Transactions Yes
Microsoft.CognitiveServices/accounts Category Category Display Name Costs To Export Audit Audit Logs No RequestResponse Request and Response Logs No Trace Trace Logs No
Microsoft.Communication/CommunicationServices Category Category Display Name Costs To Export AuthOperational Operational Authentication Logs Yes CallAutomationOperational Operational Call Automation Logs Yes CallDiagnostics Call Diagnostics Logs Yes CallRecordingSummary Call Recording Summary Logs Yes CallSummary Call Summary Logs Yes ChatOperational Operational Chat Logs No EmailSendMailOperational Email Service Send Mail Logs Yes EmailStatusUpdateOperational Email Service Delivery Status Update Logs Yes EmailUserEngagementOperational Email Service User Engagement Logs Yes NetworkTraversalDiagnostics Network Traversal Relay Diagnostic Logs Yes NetworkTraversalOperational Operational Network Traversal Logs Yes RoomsOperational Operational Rooms Logs Yes SMSOperational Operational SMS Logs No Usage Usage Records No
Microsoft.Compute/virtualMachines Category Category Display Name Costs To Export SoftwareUpdateProfile SoftwareUpdateProfile Yes SoftwareUpdates SoftwareUpdates Yes
Microsoft.ConfidentialLedger/ManagedCCF Category Category Display Name Costs To Export applicationlogs CCF Application Logs Yes
Microsoft.ConfidentialLedger/ManagedCCFs Category Category Display Name Costs To Export applicationlogs CCF Application Logs Yes
Microsoft.ConnectedCache/CacheNodes Category Category Display Name Costs To Export Events Events Yes
Microsoft.ConnectedCache/ispCustomers Category Category Display Name Costs To Export Events Events Yes
Microsoft.ConnectedVehicle/platformAccounts Category Category Display Name Costs To Export Audit MCVP Audit Logs Yes Logs MCVP Logs Yes
Microsoft.ContainerRegistry/registries Category Category Display Name Costs To Export ContainerRegistryLoginEvents Login Events No ContainerRegistryRepositoryEvents RepositoryEvent logs No
Microsoft.ContainerService/managedClusters Category Category Display Name Costs To Export cloud-controller-manager Kubernetes Cloud Controller Manager Yes cluster-autoscaler Kubernetes Cluster Autoscaler No csi-azuredisk-controller csi-azuredisk-controller Yes csi-azurefile-controller csi-azurefile-controller Yes csi-snapshot-controller csi-snapshot-controller Yes guard guard No kube-apiserver Kubernetes API Server No kube-audit Kubernetes Audit No kube-audit-admin Kubernetes Audit Admin Logs No kube-controller-manager Kubernetes Controller Manager No kube-scheduler Kubernetes Scheduler No
Microsoft.CustomProviders/resourceproviders Category Category Display Name Costs To Export AuditLogs Audit logs for MiniRP calls No
Microsoft.D365CustomerInsights/instances Category Category Display Name Costs To Export Audit Audit events No Operational Operational events No
Microsoft.Dashboard/grafana Category Category Display Name Costs To Export GrafanaLoginEvents Grafana Login Events Yes
Microsoft.Databricks/workspaces Category Category Display Name Costs To Export accounts Databricks Accounts No accountsAccessControl Databricks Accounts Access Control Yes capsule8ContainerSecurityScanningReports Databricks Capsule8 Container Security Scanning Reports Yes clamAntiVirusReports Databricks Clam AntiVirus Reports Yes clusterLibraries Databricks Cluster Libraries Yes clusters Databricks Clusters No databrickssql Databricks DatabricksSQL Yes dbfs Databricks File System No deltaPipelines Databricks Delta Pipelines Yes featureStore Databricks Feature Store Yes genie Databricks Genie Yes gitCredentials Databricks Git Credentials Yes globalInitScripts Databricks Global Init Scripts Yes iamRole Databricks IAM Role Yes instancePools Instance Pools No jobs Databricks Jobs No mlflowAcledArtifact Databricks MLFlow Acled Artifact Yes mlflowExperiment Databricks MLFlow Experiment Yes modelRegistry Databricks Model Registry Yes notebook Databricks Notebook No partnerConnect Databricks Partner Connect Yes RemoteHistoryService Databricks Remote History Service Yes repos Databricks Repos Yes secrets Databricks Secrets No serverlessRealTimeInference Databricks Serverless Real-Time Inference Yes sqlanalytics Databricks SQL Analytics Yes sqlPermissions Databricks SQLPermissions No ssh Databricks SSH No unityCatalog Databricks Unity Catalog Yes webTerminal Databricks Web Terminal Yes workspace Databricks Workspace No
Microsoft.DataCollaboration/workspaces Category Category Display Name Costs To Export CollaborationAudit Collaboration Audit Yes Computations Computations Yes DataAssets Data Assets No Pipelines Pipelines No Pipelines Pipelines No Proposals Proposals No Scripts Scripts No
Microsoft.DataFactory/factories Category Category Display Name Costs To Export ActivityRuns Pipeline activity runs log No PipelineRuns Pipeline runs log No SandboxActivityRuns Sandbox Activity runs log Yes SandboxPipelineRuns Sandbox Pipeline runs log Yes SSISIntegrationRuntimeLogs SSIS integration runtime logs No SSISPackageEventMessageContext SSIS package event message context No SSISPackageEventMessages SSIS package event messages No SSISPackageExecutableStatistics SSIS package executable statistics No SSISPackageExecutionComponentPhases SSIS package execution component phases No SSISPackageExecutionDataStatistics SSIS package exeution data statistics No TriggerRuns Trigger runs log No
Microsoft.DataLakeAnalytics/accounts Category Category Display Name Costs To Export Audit Audit Logs No ConfigurationChange Configuration Change Event Logs Yes JobEvent Job Event Logs Yes JobInfo Job Info Logs Yes Requests Request Logs No
Microsoft.DataLakeStore/accounts Category Category Display Name Costs To Export Audit Audit Logs No Requests Request Logs No
Category Category Display Name Costs To Export ReceivedShareSnapshots Received Share Snapshots No SentShareSnapshots Sent Share Snapshots No Shares Shares No ShareSubscriptions Share Subscriptions No
Microsoft.DBforMariaDB/servers Category Category Display Name Costs To Export MySqlAuditLogs MariaDB Audit Logs No MySqlSlowLogs MariaDB Server Logs No
Microsoft.DBforMySQL/flexibleServers Category Category Display Name Costs To Export MySqlAuditLogs MySQL Audit Logs No MySqlSlowLogs MySQL Slow Logs No
Microsoft.DBforMySQL/servers Category Category Display Name Costs To Export MySqlAuditLogs MySQL Audit Logs No MySqlSlowLogs MySQL Server Logs No
Microsoft.DBforPostgreSQL/flexibleServers Category Category Display Name Costs To Export PostgreSQLLogs PostgreSQL Server Logs No
Microsoft.DBForPostgreSQL/serverGroupsv2 Category Category Display Name Costs To Export PostgreSQLLogs PostgreSQL Server Logs Yes
Microsoft.DBforPostgreSQL/servers Category Category Display Name Costs To Export PostgreSQLLogs PostgreSQL Server Logs No QueryStoreRuntimeStatistics PostgreSQL Query Store Runtime Statistics No QueryStoreWaitStatistics PostgreSQL Query Store Wait Statistics No
Microsoft.DBforPostgreSQL/serversv2 Category Category Display Name Costs To Export PostgreSQLLogs PostgreSQL Server Logs No
Microsoft.DesktopVirtualization/applicationgroups Category Category Display Name Costs To Export Checkpoint Checkpoint No Error Error No Management Management No
Microsoft.DesktopVirtualization/hostpools Category Category Display Name Costs To Export AgentHealthStatus AgentHealthStatus No AutoscaleEvaluationPooled Do not use - internal testing Yes Checkpoint Checkpoint No Connection Connection No ConnectionGraphicsData Connection Graphics Data Logs Preview Yes Error Error No HostRegistration HostRegistration No Management Management No NetworkData Network Data Logs Yes SessionHostManagement Session Host Management Activity Logs Yes
Microsoft.DesktopVirtualization/scalingplans Category Category Display Name Costs To Export Autoscale Autoscale logs Yes
Microsoft.DesktopVirtualization/workspaces Category Category Display Name Costs To Export Checkpoint Checkpoint No Error Error No Feed Feed No Management Management No
Microsoft.DevCenter/devcenters Category Category Display Name Costs To Export DataplaneAuditEvent Dataplane audit logs Yes
Microsoft.Devices/IotHubs Category Category Display Name Costs To Export C2DCommands C2D Commands No C2DTwinOperations C2D Twin Operations No Configurations Configurations No Connections Connections No D2CTwinOperations D2CTwinOperations No DeviceIdentityOperations Device Identity Operations No DeviceStreams Device Streams (Preview) No DeviceTelemetry Device Telemetry No DirectMethods Direct Methods No DistributedTracing Distributed Tracing (Preview) No FileUploadOperations File Upload Operations No JobsOperations Jobs Operations No Routes Routes No TwinQueries Twin Queries No
Microsoft.Devices/provisioningServices Category Category Display Name Costs To Export DeviceOperations Device Operations No ServiceOperations Service Operations No
Microsoft.DigitalTwins/digitalTwinsInstances Category Category Display Name Costs To Export DataHistoryOperation DataHistoryOperation Yes DigitalTwinsOperation DigitalTwinsOperation No EventRoutesOperation EventRoutesOperation No ModelsOperation ModelsOperation No QueryOperation QueryOperation No ResourceProviderOperation ResourceProviderOperation Yes
Microsoft.DocumentDB/cassandraClusters Category Category Display Name Costs To Export CassandraAudit CassandraAudit Yes CassandraLogs CassandraLogs Yes
Microsoft.DocumentDB/DatabaseAccounts Category Category Display Name Costs To Export CassandraRequests CassandraRequests No ControlPlaneRequests ControlPlaneRequests No DataPlaneRequests DataPlaneRequests No GremlinRequests GremlinRequests No MongoRequests MongoRequests No PartitionKeyRUConsumption PartitionKeyRUConsumption No PartitionKeyStatistics PartitionKeyStatistics No QueryRuntimeStatistics QueryRuntimeStatistics No TableApiRequests TableApiRequests Yes
Microsoft.EventGrid/domains Category Category Display Name Costs To Export DataPlaneRequests Data plane operations logs Yes DeliveryFailures Delivery Failure Logs No PublishFailures Publish Failure Logs No
Microsoft.EventGrid/partnerNamespaces Category Category Display Name Costs To Export DataPlaneRequests Data plane operations logs Yes PublishFailures Publish Failure Logs No
Microsoft.EventGrid/partnerTopics Category Category Display Name Costs To Export DeliveryFailures Delivery Failure Logs No
Microsoft.EventGrid/systemTopics Category Category Display Name Costs To Export DeliveryFailures Delivery Failure Logs No
Microsoft.EventGrid/topics Category Category Display Name Costs To Export DataPlaneRequests Data plane operations logs Yes DeliveryFailures Delivery Failure Logs No PublishFailures Publish Failure Logs No
Microsoft.EventHub/Namespaces Category Category Display Name Costs To Export ApplicationMetricsLogs Application Metrics Logs Yes ArchiveLogs Archive Logs No AutoScaleLogs Auto Scale Logs No CustomerManagedKeyUserLogs Customer Managed Key Logs No EventHubVNetConnectionEvent VNet/IP Filtering Connection Logs No KafkaCoordinatorLogs Kafka Coordinator Logs No KafkaUserErrorLogs Kafka User Error Logs No OperationalLogs Operational Logs No RuntimeAuditLogs Runtime Audit Logs Yes
Microsoft.HealthcareApis/services Category Category Display Name Costs To Export AuditLogs Audit logs No DiagnosticLogs Diagnostic logs Yes
Microsoft.HealthcareApis/workspaces/analyticsconnectors Category Category Display Name Costs To Export DiagnosticLogs Diagnostic logs for Analytics Connector Yes
Microsoft.HealthcareApis/workspaces/dicomservices Category Category Display Name Costs To Export AuditLogs Audit logs Yes
Microsoft.HealthcareApis/workspaces/fhirservices Category Category Display Name Costs To Export AuditLogs FHIR Audit logs Yes
Microsoft.HealthcareApis/workspaces/iotconnectors Category Category Display Name Costs To Export DiagnosticLogs Diagnostic logs Yes
microsoft.insights/autoscalesettings Category Category Display Name Costs To Export AutoscaleEvaluations Autoscale Evaluations No AutoscaleScaleActions Autoscale Scale Actions No
microsoft.insights/components Category Category Display Name Costs To Export AppAvailabilityResults Availability results No AppBrowserTimings Browser timings No AppDependencies Dependencies No AppEvents Events No AppExceptions Exceptions No AppMetrics Metrics No AppPageViews Page views No AppPerformanceCounters Performance counters No AppRequests Requests No AppSystemEvents System events No AppTraces Traces No
Microsoft.Insights/datacollectionrules Category Category Display Name Costs To Export DCRErrorLogs DCR Error Logs Yes
microsoft.keyvault/managedhsms Category Category Display Name Costs To Export AuditEvent Audit Event No
Microsoft.KeyVault/vaults Category Category Display Name Costs To Export AuditEvent Audit Logs No AzurePolicyEvaluationDetails Azure Policy Evaluation Details Yes
microsoft.kubernetesconfiguration/extensions Category Category Display Name Costs To Export KubernetesAudit Kubernetes Audit Logs Yes
Microsoft.Kusto/clusters Category Category Display Name Costs To Export Command Command No FailedIngestion Failed ingestion No IngestionBatching Ingestion batching No Journal Journal Yes Query Query No SucceededIngestion Succeeded ingestion No TableDetails Table details No TableUsageStatistics Table usage statistics No
microsoft.loadtestservice/loadtests Category Category Display Name Costs To Export OperationLogs Azure Load Testing Operations Yes
Microsoft.Logic/IntegrationAccounts Category Category Display Name Costs To Export IntegrationAccountTrackingEvents Integration Account track events No
Microsoft.Logic/Workflows Category Category Display Name Costs To Export WorkflowRuntime Workflow runtime diagnostic events No
Microsoft.MachineLearningServices/workspaces Category Category Display Name Costs To Export AmlComputeClusterEvent AmlComputeClusterEvent No AmlComputeClusterNodeEvent AmlComputeClusterNodeEvent Yes AmlComputeCpuGpuUtilization AmlComputeCpuGpuUtilization No AmlComputeJobEvent AmlComputeJobEvent No AmlRunStatusChangedEvent AmlRunStatusChangedEvent No ComputeInstanceEvent ComputeInstanceEvent Yes DataLabelChangeEvent DataLabelChangeEvent Yes DataLabelReadEvent DataLabelReadEvent Yes DataSetChangeEvent DataSetChangeEvent Yes DataSetReadEvent DataSetReadEvent Yes DataStoreChangeEvent DataStoreChangeEvent Yes DataStoreReadEvent DataStoreReadEvent Yes DeploymentEventACI DeploymentEventACI Yes DeploymentEventAKS DeploymentEventAKS Yes DeploymentReadEvent DeploymentReadEvent Yes EnvironmentChangeEvent EnvironmentChangeEvent Yes EnvironmentReadEvent EnvironmentReadEvent Yes InferencingOperationACI InferencingOperationACI Yes InferencingOperationAKS InferencingOperationAKS Yes ModelsActionEvent ModelsActionEvent Yes ModelsChangeEvent ModelsChangeEvent Yes ModelsReadEvent ModelsReadEvent Yes PipelineChangeEvent PipelineChangeEvent Yes PipelineReadEvent PipelineReadEvent Yes RunEvent RunEvent Yes RunReadEvent RunReadEvent Yes
Microsoft.MachineLearningServices/workspaces/onlineEndpoints Category Category Display Name Costs To Export AmlOnlineEndpointConsoleLog AmlOnlineEndpointConsoleLog Yes AmlOnlineEndpointEventLog AmlOnlineEndpointEventLog (preview) Yes AmlOnlineEndpointTrafficLog AmlOnlineEndpointTrafficLog (preview) Yes
Microsoft.ManagedNetworkFabric/networkDevices Category Category Display Name Costs To Export AppAvailabilityResults Availability results Yes AppBrowserTimings Browser timings Yes
Category Category Display Name Costs To Export KeyDeliveryRequests Key Delivery Requests No MediaAccount Media Account Health Status Yes
Microsoft.Media/mediaservices/liveEvents Category Category Display Name Costs To Export LiveEventState Live Event Operations Yes
Category Category Display Name Costs To Export StreamingEndpointRequests Streaming Endpoint Requests Yes
Microsoft.Media/videoanalyzers Category Category Display Name Costs To Export Audit Audit Logs Yes Diagnostics Diagnostics Logs Yes Operational Operational Logs Yes
Microsoft.NetApp/netAppAccounts/capacityPools Category Category Display Name Costs To Export Autoscale Capacity Pool Autoscaled Yes
Microsoft.NetApp/netAppAccounts/capacityPools/volumes Category Category Display Name Costs To Export ANFFileAccess ANF File Access Yes
Microsoft.Network/applicationgateways Category Category Display Name Costs To Export ApplicationGatewayAccessLog Application Gateway Access Log No ApplicationGatewayFirewallLog Application Gateway Firewall Log No ApplicationGatewayPerformanceLog Application Gateway Performance Log No
Microsoft.Network/azureFirewalls Category Category Display Name Costs To Export AZFWApplicationRule Azure Firewall Application Rule Yes AZFWApplicationRuleAggregation Azure Firewall Network Rule Aggregation (Policy Analytics) Yes AZFWDnsQuery Azure Firewall DNS query Yes AZFWFatFlow Azure Firewall Fat Flow Log Yes AZFWFlowTrace Azure Firewall Flow Trace Log Yes AZFWFqdnResolveFailure Azure Firewall FQDN Resolution Failure Yes AZFWIdpsSignature Azure Firewall IDPS Signature Yes AZFWNatRule Azure Firewall Nat Rule Yes AZFWNatRuleAggregation Azure Firewall Nat Rule Aggregation (Policy Analytics) Yes AZFWNetworkRule Azure Firewall Network Rule Yes AZFWNetworkRuleAggregation Azure Firewall Application Rule Aggregation (Policy Analytics) Yes AZFWThreatIntel Azure Firewall Threat Intelligence Yes AzureFirewallApplicationRule Azure Firewall Application Rule (Legacy Azure Diagnostics) No AzureFirewallDnsProxy Azure Firewall DNS Proxy (Legacy Azure Diagnostics) No AzureFirewallNetworkRule Azure Firewall Network Rule (Legacy Azure Diagnostics) No
microsoft.network/bastionHosts Category Category Display Name Costs To Export BastionAuditLogs Bastion Audit Logs No
Microsoft.Network/expressRouteCircuits Category Category Display Name Costs To Export PeeringRouteLog Peering Route Table Logs No
Microsoft.Network/frontdoors Category Category Display Name Costs To Export FrontdoorAccessLog Frontdoor Access Log No FrontdoorWebApplicationFirewallLog Frontdoor Web Application Firewall Log No
Microsoft.Network/loadBalancers Category Category Display Name Costs To Export LoadBalancerAlertEvent Load Balancer Alert Events No LoadBalancerProbeHealthStatus Load Balancer Probe Health Status No
Microsoft.Network/networksecuritygroups Category Category Display Name Costs To Export NetworkSecurityGroupEvent Network Security Group Event No NetworkSecurityGroupFlowEvent Network Security Group Rule Flow Event No NetworkSecurityGroupRuleCounter Network Security Group Rule Counter No
Microsoft.Network/networkSecurityPerimeters Category Category Display Name Costs To Export NspIntraPerimeterInboundAllowed Inbound access allowed within same perimeter. Yes NspIntraPerimeterOutboundAllowed Outbound attempted to same perimeter. Yes NspPrivateInboundAllowed Private endpoint traffic allowed. Yes NspPublicInboundPerimeterRulesAllowed Public inbound access allowed by NSP access rules. Yes NspPublicInboundPerimeterRulesDenied Public inbound access denied by NSP access rules. Yes NspPublicInboundResourceRulesAllowed Public inbound access allowed by PaaS resource rules. Yes NspPublicInboundResourceRulesDenied Public inbound access denied by PaaS resource rules. Yes NspPublicOutboundPerimeterRulesAllowed Public outbound access allowed by NSP access rules. Yes NspPublicOutboundPerimeterRulesDenied Public outbound access denied by NSP access rules. Yes NspPublicOutboundResourceRulesAllowed Public outbound access allowed by PaaS resource rules. Yes NspPublicOutboundResourceRulesDenied Public outbound access denied by PaaS resource rules Yes
Microsoft.Network/networkSecurityPerimeters/profiles Category Category Display Name Costs To Export NSPInboundAccessAllowed NSP Inbound Access Allowed. Yes NSPInboundAccessDenied NSP Inbound Access Denied. Yes NSPOutboundAccessAllowed NSP Outbound Access Allowed. Yes NSPOutboundAccessDenied NSP Outbound Access Denied. Yes
microsoft.network/p2svpngateways Category Category Display Name Costs To Export GatewayDiagnosticLog Gateway Diagnostic Logs No IKEDiagnosticLog IKE Diagnostic Logs No P2SDiagnosticLog P2S Diagnostic Logs No
Microsoft.Network/publicIPAddresses Category Category Display Name Costs To Export DDoSMitigationFlowLogs Flow logs of DDoS mitigation decisions No DDoSMitigationReports Reports of DDoS mitigations No DDoSProtectionNotifications DDoS protection notifications No
Microsoft.Network/trafficManagerProfiles Category Category Display Name Costs To Export ProbeHealthStatusEvents Traffic Manager Probe Health Results Event No
microsoft.network/virtualnetworkgateways Category Category Display Name Costs To Export GatewayDiagnosticLog Gateway Diagnostic Logs No IKEDiagnosticLog IKE Diagnostic Logs No P2SDiagnosticLog P2S Diagnostic Logs No RouteDiagnosticLog Route Diagnostic Logs No TunnelDiagnosticLog Tunnel Diagnostic Logs No
Microsoft.Network/virtualNetworks Category Category Display Name Costs To Export VMProtectionAlerts VM protection alerts No
microsoft.network/vpngateways Category Category Display Name Costs To Export GatewayDiagnosticLog Gateway Diagnostic Logs No IKEDiagnosticLog IKE Diagnostic Logs No RouteDiagnosticLog Route Diagnostic Logs No TunnelDiagnosticLog Tunnel Diagnostic Logs No
Microsoft.NetworkFunction/azureTrafficCollectors Category Category Display Name Costs To Export ExpressRouteCircuitIpfix Express Route Circuit IPFIX Flow Records Yes
Microsoft.NotificationHubs/namespaces Category Category Display Name Costs To Export OperationalLogs Operational Logs No
MICROSOFT.OPENENERGYPLATFORM/ENERGYSERVICES Category Category Display Name Costs To Export AirFlowTaskLogs Air Flow Task Logs Yes ElasticOperatorLogs Elastic Operator Logs Yes ElasticsearchLogs Elasticsearch Logs Yes
Microsoft.OpenLogisticsPlatform/Workspaces Category Category Display Name Costs To Export SupplyChainEntityOperations Supply Chain Entity Operations Yes SupplyChainEventLogs Supply Chain Event logs Yes
Microsoft.OperationalInsights/workspaces Category Category Display Name Costs To Export Audit Audit No
Microsoft.PlayFab/titles Category Category Display Name Costs To Export AuditLogs AuditLogs Yes
Microsoft.PowerBI/tenants Category Category Display Name Costs To Export Engine Engine No
Microsoft.PowerBI/tenants/workspaces Category Category Display Name Costs To Export Engine Engine No
Microsoft.PowerBIDedicated/capacities Category Category Display Name Costs To Export Engine Engine No
microsoft.purview/accounts Category Category Display Name Costs To Export DataSensitivityLogEvent DataSensitivity Yes ScanStatusLogEvent ScanStatus No Security PurviewAccountAuditEvents Yes
Microsoft.RecoveryServices/Vaults Category Category Display Name Costs To Export AddonAzureBackupAlerts Addon Azure Backup Alert Data No AddonAzureBackupJobs Addon Azure Backup Job Data No AddonAzureBackupPolicy Addon Azure Backup Policy Data No AddonAzureBackupProtectedInstance Addon Azure Backup Protected Instance Data No AddonAzureBackupStorage Addon Azure Backup Storage Data No AzureBackupReport Azure Backup Reporting Data No AzureSiteRecoveryEvents Azure Site Recovery Events No AzureSiteRecoveryJobs Azure Site Recovery Jobs No AzureSiteRecoveryProtectedDiskDataChurn Azure Site Recovery Protected Disk Data Churn No AzureSiteRecoveryRecoveryPoints Azure Site Recovery Recovery Points No AzureSiteRecoveryReplicatedItems Azure Site Recovery Replicated Items No AzureSiteRecoveryReplicationDataUploadRate Azure Site Recovery Replication Data Upload Rate No AzureSiteRecoveryReplicationStats Azure Site Recovery Replication Stats No CoreAzureBackup Core Azure Backup Data No
Microsoft.Relay/namespaces Category Category Display Name Costs To Export HybridConnectionsEvent HybridConnections Events No HybridConnectionsLogs HybridConnectionsLogs Yes
Microsoft.Search/searchServices Category Category Display Name Costs To Export OperationLogs Operation Logs No
Microsoft.Security/antiMalwareSettings Category Category Display Name Costs To Export ScanResults AntimalwareScanResults Yes
Microsoft.Security/defenderForStorageSettings Category Category Display Name Costs To Export ScanResults AntimalwareScanResults Yes
microsoft.securityinsights/settings Category Category Display Name Costs To Export Automation Automation Yes DataConnectors Data Collection - Connectors Yes
Microsoft.ServiceBus/Namespaces Category Category Display Name Costs To Export ApplicationMetricsLogs Application Metrics Logs(Unused) Yes OperationalLogs Operational Logs No RuntimeAuditLogs Runtime Audit Logs Yes VNetAndIPFilteringLogs VNet/IP Filtering Connection Logs No
Microsoft.SignalRService/SignalR Category Category Display Name Costs To Export AllLogs Azure SignalR Service Logs. No
Microsoft.SignalRService/WebPubSub Category Category Display Name Costs To Export ConnectivityLogs Connectivity logs for Azure Web PubSub Service. Yes HttpRequestLogs Http Request logs for Azure Web PubSub Service. Yes MessagingLogs Messaging logs for Azure Web PubSub Service. Yes
microsoft.singularity/accounts Category Category Display Name Costs To Export Activity Activity Logs Yes Execution Execution Logs Yes
Microsoft.Sql/managedInstances Category Category Display Name Costs To Export DevOpsOperationsAudit Devops operations Audit Logs No ResourceUsageStats Resource Usage Statistics No SQLSecurityAuditEvents SQL Security Audit Event No
Microsoft.Sql/managedInstances/databases Category Category Display Name Costs To Export Errors Errors No QueryStoreRuntimeStatistics Query Store Runtime Statistics No QueryStoreWaitStatistics Query Store Wait Statistics No SQLInsights SQL Insights No
Microsoft.Sql/servers/databases Category Category Display Name Costs To Export AutomaticTuning Automatic tuning No Blocks Blocks No DatabaseWaitStatistics Database Wait Statistics No Deadlocks Deadlocks No DevOpsOperationsAudit Devops operations Audit Logs No DmsWorkers Dms Workers No Errors Errors No ExecRequests Exec Requests No QueryStoreRuntimeStatistics Query Store Runtime Statistics No QueryStoreWaitStatistics Query Store Wait Statistics No RequestSteps Request Steps No SQLInsights SQL Insights No SqlRequests Sql Requests No SQLSecurityAuditEvents SQL Security Audit Event No Timeouts Timeouts No Waits Waits No
Microsoft.Storage/storageAccounts/blobServices Category Category Display Name Costs To Export StorageDelete StorageDelete Yes StorageRead StorageRead Yes StorageWrite StorageWrite Yes
Microsoft.Storage/storageAccounts/fileServices Category Category Display Name Costs To Export StorageDelete StorageDelete Yes StorageRead StorageRead Yes StorageWrite StorageWrite Yes
Microsoft.Storage/storageAccounts/queueServices Category Category Display Name Costs To Export StorageDelete StorageDelete Yes StorageRead StorageRead Yes StorageWrite StorageWrite Yes
Microsoft.Storage/storageAccounts/tableServices Category Category Display Name Costs To Export StorageDelete StorageDelete Yes StorageRead StorageRead Yes StorageWrite StorageWrite Yes
Microsoft.StorageCache/caches Category Category Display Name Costs To Export AscCacheOperationEvent HPC Cache operation event Yes AscUpgradeEvent HPC Cache upgrade event Yes AscWarningEvent HPC Cache warning Yes
Microsoft.StreamAnalytics/streamingjobs Category Category Display Name Costs To Export Authoring Authoring No Execution Execution No
Microsoft.Synapse/workspaces Category Category Display Name Costs To Export BuiltinSqlReqsEnded Built-in Sql Pool Requests Ended No GatewayApiRequests Synapse Gateway Api Requests No IntegrationActivityRuns Integration Activity Runs Yes IntegrationPipelineRuns Integration Pipeline Runs Yes IntegrationTriggerRuns Integration Trigger Runs Yes SQLSecurityAuditEvents SQL Security Audit Event No SynapseLinkEvent Synapse Link Event Yes SynapseRbacOperations Synapse RBAC Operations No
Microsoft.Synapse/workspaces/bigDataPools Category Category Display Name Costs To Export BigDataPoolAppEvents Big Data Pool Applications Execution Metrics Yes BigDataPoolAppsEnded Big Data Pool Applications Ended No BigDataPoolBlockManagerEvents Big Data Pool Block Manager Events Yes BigDataPoolDriverLogs Big Data Pool Driver Logs Yes BigDataPoolEnvironmentEvents Big Data Pool Environment Events Yes BigDataPoolExecutorEvents Big Data Pool Executor Events Yes BigDataPoolExecutorLogs Big Data Pool Executor Logs Yes BigDataPoolJobEvents Big Data Pool Job Events Yes BigDataPoolSqlExecutionEvents Big Data Pool Sql Execution Events Yes BigDataPoolStageEvents Big Data Pool Stage Events Yes BigDataPoolTaskEvents Big Data Pool Task Events Yes
Microsoft.Synapse/workspaces/kustoPools Category Category Display Name Costs To Export Command Synapse Data Explorer Command Yes FailedIngestion Synapse Data Explorer Failed Ingestion Yes IngestionBatching Synapse Data Explorer Ingestion Batching Yes Query Synapse Data Explorer Query Yes SucceededIngestion Synapse Data Explorer Succeeded Ingestion Yes TableDetails Synapse Data Explorer Table Details Yes TableUsageStatistics Synapse Data Explorer Table Usage Statistics Yes
Microsoft.Synapse/workspaces/scopePools Category Category Display Name Costs To Export ScopePoolScopeJobsEnded Scope Pool Scope Jobs Ended Yes ScopePoolScopeJobsStateChange Scope Pool Scope Jobs State Change Yes
Microsoft.Synapse/workspaces/sqlPools Category Category Display Name Costs To Export DmsWorkers Dms Workers No ExecRequests Exec Requests No RequestSteps Request Steps No SqlRequests Sql Requests No SQLSecurityAuditEvents Sql Security Audit Event No Waits Waits No
Microsoft.TimeSeriesInsights/environments Category Category Display Name Costs To Export Ingress Ingress No Management Management No
Microsoft.TimeSeriesInsights/environments/eventsources Category Category Display Name Costs To Export Ingress Ingress No Management Management No
microsoft.videoindexer/accounts Category Category Display Name Costs To Export Audit Audit Yes IndexingLogs Indexing Logs Yes
Microsoft.Web/hostingEnvironments Category Category Display Name Costs To Export AppServiceEnvironmentPlatformLogs App Service Environment Platform Logs No
Microsoft.Web/sites Category Category Display Name Costs To Export AppServiceAntivirusScanAuditLogs Report Antivirus Audit Logs No AppServiceAppLogs App Service Application Logs No AppServiceAuditLogs Access Audit Logs No AppServiceConsoleLogs App Service Console Logs No AppServiceFileAuditLogs Site Content Change Audit Logs No AppServiceHTTPLogs HTTP logs No AppServiceIPSecAuditLogs IPSecurity Audit logs No AppServicePlatformLogs App Service Platform logs No FunctionAppLogs Function Application Logs No WorkflowRuntime Workflow Runtime Logs Yes
Microsoft.Web/sites/slots Category Category Display Name Costs To Export AppServiceAntivirusScanAuditLogs Report Antivirus Audit Logs No AppServiceAppLogs App Service Application Logs No AppServiceAuditLogs Access Audit Logs No AppServiceConsoleLogs App Service Console Logs No AppServiceFileAuditLogs Site Content Change Audit Logs No AppServiceHTTPLogs HTTP logs No AppServiceIPSecAuditLogs IPSecurity Audit logs No AppServicePlatformLogs App Service Platform logs No FunctionAppLogs Function Application Logs No
microsoft.workloads/sapvirtualinstances Category Category Display Name Costs To Export ChangeDetection Change Detection Yes
Next Steps Learn more about resource logs Stream resource resource logs to Event Hubs Change resource log diagnostic settings using the Azure Monitor REST API Analyze logs from Azure storage with Log Analytics
FAQs
Collect, analyze, and act on telemetry data from your cloud and hybrid environments . Azure Monitor supports your operations at scale by helping you maximize the performance and availability of your resources and proactively identify problems.
What are different types of logs in Azure? ›
Types of logs in Azure
Log category Log type Virtual machines and cloud services Windows Event Log service and Linux Syslog Azure Storage Analytics Storage logging, provides metrics data for a storage account Network security group (NSG) flow logs JSON format, shows outbound and inbound flows on a per-rule basis
5 more rows Jan 19, 2023
What are Azure resource logs? ›
Azure resource logs are platform logs that provide insight into operations that were performed within an Azure resource . The content of resource logs varies by the Azure service and resource type. Resource logs aren't collected by default.
Which kind of data is collected by Azure Monitor? ›
The data is all stored together as Logs and Metrics, supporting Azure Monitor features such as log queries, alerts, and workbooks.
What are the 7 things Azure security Monitor can do? ›
Use Azure Monitor to monitor these types resources in Azure, other clouds, or on-premises:
Applications. Virtual machines. Guest operating systems. Containers. Databases. Security events in combination with Azure Sentinel. Networking events and health in combination with Network Watcher.
What is Azure Monitor logs? ›
The Azure Monitor activity log is a platform log in Azure that provides insight into subscription-level events . The activity log includes information like when a resource is modified or a virtual machine is started. You can view the activity log in the Azure portal or retrieve entries with PowerShell and the Azure CLI.
What are 4 types of logging? ›
Types of logging
Circular logging. Use circular logging if all you want is restart recovery, using the log to roll back transactions that were in progress when the system stopped. ... Linear logging. ... Active log. ... Inactive log. ... Secondary log files.
How many categories of logs are there? ›
There are three types of log files: 1. Request log files that document the execution of a concurrent program running as the result of a concurrent request. Every concurrent request generates a log file.
Can Azure Monitor collect data from any source? ›
The Azure Monitor agent allows you to collect logs from data sources that you configure using data collection rules or from monitoring solutions that provide additional insights into applications running on the machine. These can be sent to one or more Log Analytics workspaces.
Can Azure monitor detect threats? ›
Detect and respond to the latest threatsKroll Responder monitors Azure infrastructure for excessive server spin-ups, CPU spikes, and other abnormal events . Kroll Responder identifies login attempts from suspicious locations, unauthorised resource sharing and other events that could indicate a compromise.
Alerts help you detect and address issues before users notice them by proactively notifying you when Azure Monitor data indicates there might be a problem with your infrastructure or application. You can alert on any metric or log data source in the Azure Monitor data platform . This diagram shows you how alerts work.
What are some of the key features and use cases of Azure monitor? ›
Microsoft's Azure Monitor is designed to analyze and optimize the performance of web applications and infrastructure, including virtual machines (VMs), Azure Kubernetes Service (AKS), Azure Storage, and databases. Monitor Linux and Windows VMs and their health and dependencies—all on a single map.
1. Complete Azure Monitor explained with overview in 20 Minutes
2. Azure Monitor | What is Azure Monitor | Azure Monitor Tutorial | Azure Monitoring Tutorial
3. Azure | Monitor Azure activity log events using Azure Monitor and Action Groups
4. Azure Monitoring Data Types Activity logs DEMO
5. Understand and Implement Azure Monitor to Analyze Azure Infrastructure using Azure Monitor Logs
6. What is Azure Monitor?
Article information
Author : Greg Kuvalis
Last Updated : 03/13/2023
Views : 6117
Rating : 4.4 / 5 (75 voted)
Reviews : 90% of readers found this page helpful
Author information
Name : Greg Kuvalis
Birthday : 1996-12-20
Address : 53157 Trantow Inlet, Townemouth, FL 92564-0267
Phone : +68218650356656
Job : IT Representative
Hobby : Knitting, Amateur radio, Skiing, Running, Mountain biking, Slacklining, Electronics
Introduction : My name is Greg Kuvalis, I am a witty, spotless, beautiful, charming, delightful, thankful, beautiful person who loves writing and wants to share my knowledge and understanding with you.