Supported categories for Azure Monitor resource logs - Azure Monitor (2023)

  • Article
  • 20 minutes to read
(Video) Azure Monitor Logs Log Types

Note

(Video) How to use the Log Analytics scope in Azure Monitor

This list is largely auto-generated. Any modification made to this list via GitHub might be written over without warning. Contact the author of this article for details on how to make permanent updates.

Azure Monitor resource logs are logs emitted by Azure services that describe the operation of those services or resources. All resource logs available through Azure Monitor share a common top-level schema. Each service has the flexibility to emit unique properties for its own events.

(Video) Azure Monitor with Log Analytics

Resource logs were previously known as diagnostic logs. The name was changed in October 2019 as the types of logs gathered by Azure Monitor shifted to include more than just the Azure resource.

A combination of the resource type (available in the resourceId property) and the category uniquely identifies a schema. There's a common schema for all resource logs with service-specific fields then added for different log categories. For more information, see Common and service-specific schema for Azure resource logs.

(Video) Azure Monitoring Introduction | Lecture 76

Costs

Azure Monitor Log Analytics, Azure Storage, Azure Event Hubs, and partners who integrate directly with Azure Monitor (for example, Datadog) have costs associated with ingesting data and storing data. Check the pricing pages linked in the previous sentence to understand the costs for those services. Resource logs are just one type of data that you can send to those locations.

In addition, there might be costs to export some categories of resource logs to those locations. Logs with possible export costs are listed in the table in the next section. For more information on export pricing, see the Platform Logs section on the Azure Monitor pricing page.

(Video) Microsoft Azure Monitor Agent and Data Collection Rule Overview

Supported log categories per resource type

Following is a list of the types of logs available for each resource type.

Some categories might be supported only for specific types of resources. See the resource-specific documentation if you feel you're missing a resource. For example, Microsoft.Sql/servers/databases categories aren't available for all types of databases. For more information, see information on SQL Database diagnostic logging.

(Video) Complete Azure Monitor explained with overview in 20 Minutes

If you think something is missing, you can open a GitHub comment at the bottom of this article.

Microsoft.AAD/DomainServices

CategoryCategory Display NameCosts To Export
AccountLogonAccountLogonNo
AccountManagementAccountManagementNo
DetailTrackingDetailTrackingNo
DirectoryServiceAccessDirectoryServiceAccessNo
LogonLogoffLogonLogoffNo
ObjectAccessObjectAccessNo
PolicyChangePolicyChangeNo
PrivilegeUsePrivilegeUseNo
SystemSecuritySystemSecurityNo

microsoft.aadiam/tenants

CategoryCategory Display NameCosts To Export
SigninSigninYes

Microsoft.AgFoodPlatform/farmBeats

CategoryCategory Display NameCosts To Export
ApplicationAuditLogsApplication Audit LogsYes
FarmManagementLogsFarm Management LogsYes
FarmOperationLogsFarm Operation LogsYes
InsightLogsInsight LogsYes
JobProcessedLogsJob Processed LogsYes
ModelInferenceLogsModel Inference LogsYes
ProviderAuthLogsProvider Auth LogsYes
SatelliteLogsSatellite LogsYes
SensorManagementLogsSensor Management LogsYes
WeatherLogsWeather LogsYes

Microsoft.AnalysisServices/servers

CategoryCategory Display NameCosts To Export
EngineEngineNo
ServiceServiceNo

Microsoft.ApiManagement/service

CategoryCategory Display NameCosts To Export
GatewayLogsLogs related to ApiManagement GatewayNo
WebSocketConnectionLogsLogs related to Websocket ConnectionsYes

Microsoft.App/managedEnvironments

CategoryCategory Display NameCosts To Export
ContainerAppConsoleLogsContainer App console logsYes
ContainerAppSystemLogsContainer App system logsYes

Microsoft.AppConfiguration/configurationStores

CategoryCategory Display NameCosts To Export
AuditAuditYes
HttpRequestHTTP RequestsYes

Microsoft.AppPlatform/Spring

CategoryCategory Display NameCosts To Export
ApplicationConsoleApplication ConsoleNo
BuildLogsBuild LogsYes
ContainerEventLogsContainer Event LogsYes
IngressLogsIngress LogsYes
SystemLogsSystem LogsNo

Microsoft.Attestation/attestationProviders

CategoryCategory Display NameCosts To Export
AuditEventAuditEvent message log category.No
NotProcessedRequests which could not be processed.Yes
OperationalOperational message log category.Yes

Microsoft.Automation/automationAccounts

CategoryCategory Display NameCosts To Export
AuditEventAuditEventYes
DscNodeStatusDscNodeStatusNo
JobLogsJobLogsNo
JobStreamsJobStreamsNo

Microsoft.AutonomousDevelopmentPlatform/accounts

CategoryCategory Display NameCosts To Export
AuditAuditYes
OperationalOperationalYes
RequestRequestYes

Microsoft.AutonomousDevelopmentPlatform/workspaces

CategoryCategory Display NameCosts To Export
AuditAuditYes
OperationalOperationalYes
RequestRequestYes

microsoft.avs/privateClouds

CategoryCategory Display NameCosts To Export
vmwaresyslogVMware SyslogYes

Microsoft.Batch/batchaccounts

CategoryCategory Display NameCosts To Export
AuditLogAudit LogsYes
ServiceLogService LogsNo
ServiceLogsService LogsYes

microsoft.botservice/botservices

CategoryCategory Display NameCosts To Export
BotRequestRequests from the channels to the botYes

Microsoft.Cache/redis

CategoryCategory Display NameCosts To Export
ConnectedClientListConnected client listYes

Microsoft.Cache/redisEnterprise/databases

CategoryCategory Display NameCosts To Export
ConnectionEventsConnection events (New Connection/Authentication/Disconnection)Yes

Microsoft.Cdn/cdnwebapplicationfirewallpolicies

CategoryCategory Display NameCosts To Export
WebApplicationFirewallLogsWeb Appliation Firewall LogsNo

Microsoft.Cdn/profiles

CategoryCategory Display NameCosts To Export
AzureCdnAccessLogAzure Cdn Access LogNo
FrontDoorAccessLogFrontDoor Access LogYes
FrontDoorHealthProbeLogFrontDoor Health Probe LogYes
FrontDoorWebApplicationFirewallLogFrontDoor WebApplicationFirewall LogYes

Microsoft.Cdn/profiles/endpoints

CategoryCategory Display NameCosts To Export
CoreAnalyticsGets the metrics of the endpoint, e.g., bandwidth, egress, etc.No

Microsoft.ClassicNetwork/networksecuritygroups

CategoryCategory Display NameCosts To Export
Network Security Group Rule Flow EventNetwork Security Group Rule Flow EventNo

Microsoft.CodeSigning/codesigningaccounts

CategoryCategory Display NameCosts To Export
SignTransactionsSign TransactionsYes

Microsoft.CognitiveServices/accounts

CategoryCategory Display NameCosts To Export
AuditAudit LogsNo
RequestResponseRequest and Response LogsNo
TraceTrace LogsNo

Microsoft.Communication/CommunicationServices

CategoryCategory Display NameCosts To Export
AuthOperationalOperational Authentication LogsYes
CallAutomationOperationalOperational Call Automation LogsYes
CallDiagnosticsCall Diagnostics LogsYes
CallRecordingSummaryCall Recording Summary LogsYes
CallSummaryCall Summary LogsYes
ChatOperationalOperational Chat LogsNo
EmailSendMailOperationalEmail Service Send Mail LogsYes
EmailStatusUpdateOperationalEmail Service Delivery Status Update LogsYes
EmailUserEngagementOperationalEmail Service User Engagement LogsYes
NetworkTraversalDiagnosticsNetwork Traversal Relay Diagnostic LogsYes
NetworkTraversalOperationalOperational Network Traversal LogsYes
RoomsOperationalOperational Rooms LogsYes
SMSOperationalOperational SMS LogsNo
UsageUsage RecordsNo

Microsoft.Compute/virtualMachines

CategoryCategory Display NameCosts To Export
SoftwareUpdateProfileSoftwareUpdateProfileYes
SoftwareUpdatesSoftwareUpdatesYes

Microsoft.ConfidentialLedger/ManagedCCF

CategoryCategory Display NameCosts To Export
applicationlogsCCF Application LogsYes

Microsoft.ConfidentialLedger/ManagedCCFs

CategoryCategory Display NameCosts To Export
applicationlogsCCF Application LogsYes

Microsoft.ConnectedCache/CacheNodes

CategoryCategory Display NameCosts To Export
EventsEventsYes

Microsoft.ConnectedCache/ispCustomers

CategoryCategory Display NameCosts To Export
EventsEventsYes

Microsoft.ConnectedVehicle/platformAccounts

CategoryCategory Display NameCosts To Export
AuditMCVP Audit LogsYes
LogsMCVP LogsYes

Microsoft.ContainerRegistry/registries

CategoryCategory Display NameCosts To Export
ContainerRegistryLoginEventsLogin EventsNo
ContainerRegistryRepositoryEventsRepositoryEvent logsNo

Microsoft.ContainerService/managedClusters

CategoryCategory Display NameCosts To Export
cloud-controller-managerKubernetes Cloud Controller ManagerYes
cluster-autoscalerKubernetes Cluster AutoscalerNo
csi-azuredisk-controllercsi-azuredisk-controllerYes
csi-azurefile-controllercsi-azurefile-controllerYes
csi-snapshot-controllercsi-snapshot-controllerYes
guardguardNo
kube-apiserverKubernetes API ServerNo
kube-auditKubernetes AuditNo
kube-audit-adminKubernetes Audit Admin LogsNo
kube-controller-managerKubernetes Controller ManagerNo
kube-schedulerKubernetes SchedulerNo

Microsoft.CustomProviders/resourceproviders

CategoryCategory Display NameCosts To Export
AuditLogsAudit logs for MiniRP callsNo

Microsoft.D365CustomerInsights/instances

CategoryCategory Display NameCosts To Export
AuditAudit eventsNo
OperationalOperational eventsNo

Microsoft.Dashboard/grafana

CategoryCategory Display NameCosts To Export
GrafanaLoginEventsGrafana Login EventsYes

Microsoft.Databricks/workspaces

CategoryCategory Display NameCosts To Export
accountsDatabricks AccountsNo
accountsAccessControlDatabricks Accounts Access ControlYes
capsule8ContainerSecurityScanningReportsDatabricks Capsule8 Container Security Scanning ReportsYes
clamAntiVirusReportsDatabricks Clam AntiVirus ReportsYes
clusterLibrariesDatabricks Cluster LibrariesYes
clustersDatabricks ClustersNo
databrickssqlDatabricks DatabricksSQLYes
dbfsDatabricks File SystemNo
deltaPipelinesDatabricks Delta PipelinesYes
featureStoreDatabricks Feature StoreYes
genieDatabricks GenieYes
gitCredentialsDatabricks Git CredentialsYes
globalInitScriptsDatabricks Global Init ScriptsYes
iamRoleDatabricks IAM RoleYes
instancePoolsInstance PoolsNo
jobsDatabricks JobsNo
mlflowAcledArtifactDatabricks MLFlow Acled ArtifactYes
mlflowExperimentDatabricks MLFlow ExperimentYes
modelRegistryDatabricks Model RegistryYes
notebookDatabricks NotebookNo
partnerConnectDatabricks Partner ConnectYes
RemoteHistoryServiceDatabricks Remote History ServiceYes
reposDatabricks ReposYes
secretsDatabricks SecretsNo
serverlessRealTimeInferenceDatabricks Serverless Real-Time InferenceYes
sqlanalyticsDatabricks SQL AnalyticsYes
sqlPermissionsDatabricks SQLPermissionsNo
sshDatabricks SSHNo
unityCatalogDatabricks Unity CatalogYes
webTerminalDatabricks Web TerminalYes
workspaceDatabricks WorkspaceNo

Microsoft.DataCollaboration/workspaces

CategoryCategory Display NameCosts To Export
CollaborationAuditCollaboration AuditYes
ComputationsComputationsYes
DataAssetsData AssetsNo
PipelinesPipelinesNo
PipelinesPipelinesNo
ProposalsProposalsNo
ScriptsScriptsNo

Microsoft.DataFactory/factories

CategoryCategory Display NameCosts To Export
ActivityRunsPipeline activity runs logNo
PipelineRunsPipeline runs logNo
SandboxActivityRunsSandbox Activity runs logYes
SandboxPipelineRunsSandbox Pipeline runs logYes
SSISIntegrationRuntimeLogsSSIS integration runtime logsNo
SSISPackageEventMessageContextSSIS package event message contextNo
SSISPackageEventMessagesSSIS package event messagesNo
SSISPackageExecutableStatisticsSSIS package executable statisticsNo
SSISPackageExecutionComponentPhasesSSIS package execution component phasesNo
SSISPackageExecutionDataStatisticsSSIS package exeution data statisticsNo
TriggerRunsTrigger runs logNo

Microsoft.DataLakeAnalytics/accounts

CategoryCategory Display NameCosts To Export
AuditAudit LogsNo
ConfigurationChangeConfiguration Change Event LogsYes
JobEventJob Event LogsYes
JobInfoJob Info LogsYes
RequestsRequest LogsNo

Microsoft.DataLakeStore/accounts

CategoryCategory Display NameCosts To Export
AuditAudit LogsNo
RequestsRequest LogsNo
CategoryCategory Display NameCosts To Export
ReceivedShareSnapshotsReceived Share SnapshotsNo
SentShareSnapshotsSent Share SnapshotsNo
SharesSharesNo
ShareSubscriptionsShare SubscriptionsNo

Microsoft.DBforMariaDB/servers

CategoryCategory Display NameCosts To Export
MySqlAuditLogsMariaDB Audit LogsNo
MySqlSlowLogsMariaDB Server LogsNo

Microsoft.DBforMySQL/flexibleServers

CategoryCategory Display NameCosts To Export
MySqlAuditLogsMySQL Audit LogsNo
MySqlSlowLogsMySQL Slow LogsNo

Microsoft.DBforMySQL/servers

CategoryCategory Display NameCosts To Export
MySqlAuditLogsMySQL Audit LogsNo
MySqlSlowLogsMySQL Server LogsNo

Microsoft.DBforPostgreSQL/flexibleServers

CategoryCategory Display NameCosts To Export
PostgreSQLLogsPostgreSQL Server LogsNo

Microsoft.DBForPostgreSQL/serverGroupsv2

CategoryCategory Display NameCosts To Export
PostgreSQLLogsPostgreSQL Server LogsYes

Microsoft.DBforPostgreSQL/servers

CategoryCategory Display NameCosts To Export
PostgreSQLLogsPostgreSQL Server LogsNo
QueryStoreRuntimeStatisticsPostgreSQL Query Store Runtime StatisticsNo
QueryStoreWaitStatisticsPostgreSQL Query Store Wait StatisticsNo

Microsoft.DBforPostgreSQL/serversv2

CategoryCategory Display NameCosts To Export
PostgreSQLLogsPostgreSQL Server LogsNo

Microsoft.DesktopVirtualization/applicationgroups

CategoryCategory Display NameCosts To Export
CheckpointCheckpointNo
ErrorErrorNo
ManagementManagementNo

Microsoft.DesktopVirtualization/hostpools

CategoryCategory Display NameCosts To Export
AgentHealthStatusAgentHealthStatusNo
AutoscaleEvaluationPooledDo not use - internal testingYes
CheckpointCheckpointNo
ConnectionConnectionNo
ConnectionGraphicsDataConnection Graphics Data Logs PreviewYes
ErrorErrorNo
HostRegistrationHostRegistrationNo
ManagementManagementNo
NetworkDataNetwork Data LogsYes
SessionHostManagementSession Host Management Activity LogsYes

Microsoft.DesktopVirtualization/scalingplans

CategoryCategory Display NameCosts To Export
AutoscaleAutoscale logsYes

Microsoft.DesktopVirtualization/workspaces

CategoryCategory Display NameCosts To Export
CheckpointCheckpointNo
ErrorErrorNo
FeedFeedNo
ManagementManagementNo

Microsoft.DevCenter/devcenters

CategoryCategory Display NameCosts To Export
DataplaneAuditEventDataplane audit logsYes

Microsoft.Devices/IotHubs

CategoryCategory Display NameCosts To Export
C2DCommandsC2D CommandsNo
C2DTwinOperationsC2D Twin OperationsNo
ConfigurationsConfigurationsNo
ConnectionsConnectionsNo
D2CTwinOperationsD2CTwinOperationsNo
DeviceIdentityOperationsDevice Identity OperationsNo
DeviceStreamsDevice Streams (Preview)No
DeviceTelemetryDevice TelemetryNo
DirectMethodsDirect MethodsNo
DistributedTracingDistributed Tracing (Preview)No
FileUploadOperationsFile Upload OperationsNo
JobsOperationsJobs OperationsNo
RoutesRoutesNo
TwinQueriesTwin QueriesNo

Microsoft.Devices/provisioningServices

CategoryCategory Display NameCosts To Export
DeviceOperationsDevice OperationsNo
ServiceOperationsService OperationsNo

Microsoft.DigitalTwins/digitalTwinsInstances

CategoryCategory Display NameCosts To Export
DataHistoryOperationDataHistoryOperationYes
DigitalTwinsOperationDigitalTwinsOperationNo
EventRoutesOperationEventRoutesOperationNo
ModelsOperationModelsOperationNo
QueryOperationQueryOperationNo
ResourceProviderOperationResourceProviderOperationYes

Microsoft.DocumentDB/cassandraClusters

CategoryCategory Display NameCosts To Export
CassandraAuditCassandraAuditYes
CassandraLogsCassandraLogsYes

Microsoft.DocumentDB/DatabaseAccounts

CategoryCategory Display NameCosts To Export
CassandraRequestsCassandraRequestsNo
ControlPlaneRequestsControlPlaneRequestsNo
DataPlaneRequestsDataPlaneRequestsNo
GremlinRequestsGremlinRequestsNo
MongoRequestsMongoRequestsNo
PartitionKeyRUConsumptionPartitionKeyRUConsumptionNo
PartitionKeyStatisticsPartitionKeyStatisticsNo
QueryRuntimeStatisticsQueryRuntimeStatisticsNo
TableApiRequestsTableApiRequestsYes

Microsoft.EventGrid/domains

CategoryCategory Display NameCosts To Export
DataPlaneRequestsData plane operations logsYes
DeliveryFailuresDelivery Failure LogsNo
PublishFailuresPublish Failure LogsNo

Microsoft.EventGrid/partnerNamespaces

CategoryCategory Display NameCosts To Export
DataPlaneRequestsData plane operations logsYes
PublishFailuresPublish Failure LogsNo

Microsoft.EventGrid/partnerTopics

CategoryCategory Display NameCosts To Export
DeliveryFailuresDelivery Failure LogsNo

Microsoft.EventGrid/systemTopics

CategoryCategory Display NameCosts To Export
DeliveryFailuresDelivery Failure LogsNo

Microsoft.EventGrid/topics

CategoryCategory Display NameCosts To Export
DataPlaneRequestsData plane operations logsYes
DeliveryFailuresDelivery Failure LogsNo
PublishFailuresPublish Failure LogsNo

Microsoft.EventHub/Namespaces

CategoryCategory Display NameCosts To Export
ApplicationMetricsLogsApplication Metrics LogsYes
ArchiveLogsArchive LogsNo
AutoScaleLogsAuto Scale LogsNo
CustomerManagedKeyUserLogsCustomer Managed Key LogsNo
EventHubVNetConnectionEventVNet/IP Filtering Connection LogsNo
KafkaCoordinatorLogsKafka Coordinator LogsNo
KafkaUserErrorLogsKafka User Error LogsNo
OperationalLogsOperational LogsNo
RuntimeAuditLogsRuntime Audit LogsYes

Microsoft.HealthcareApis/services

CategoryCategory Display NameCosts To Export
AuditLogsAudit logsNo
DiagnosticLogsDiagnostic logsYes

Microsoft.HealthcareApis/workspaces/analyticsconnectors

CategoryCategory Display NameCosts To Export
DiagnosticLogsDiagnostic logs for Analytics ConnectorYes

Microsoft.HealthcareApis/workspaces/dicomservices

CategoryCategory Display NameCosts To Export
AuditLogsAudit logsYes

Microsoft.HealthcareApis/workspaces/fhirservices

CategoryCategory Display NameCosts To Export
AuditLogsFHIR Audit logsYes

Microsoft.HealthcareApis/workspaces/iotconnectors

CategoryCategory Display NameCosts To Export
DiagnosticLogsDiagnostic logsYes

microsoft.insights/autoscalesettings

CategoryCategory Display NameCosts To Export
AutoscaleEvaluationsAutoscale EvaluationsNo
AutoscaleScaleActionsAutoscale Scale ActionsNo

microsoft.insights/components

CategoryCategory Display NameCosts To Export
AppAvailabilityResultsAvailability resultsNo
AppBrowserTimingsBrowser timingsNo
AppDependenciesDependenciesNo
AppEventsEventsNo
AppExceptionsExceptionsNo
AppMetricsMetricsNo
AppPageViewsPage viewsNo
AppPerformanceCountersPerformance countersNo
AppRequestsRequestsNo
AppSystemEventsSystem eventsNo
AppTracesTracesNo

Microsoft.Insights/datacollectionrules

CategoryCategory Display NameCosts To Export
DCRErrorLogsDCR Error LogsYes

microsoft.keyvault/managedhsms

CategoryCategory Display NameCosts To Export
AuditEventAudit EventNo

Microsoft.KeyVault/vaults

CategoryCategory Display NameCosts To Export
AuditEventAudit LogsNo
AzurePolicyEvaluationDetailsAzure Policy Evaluation DetailsYes

microsoft.kubernetesconfiguration/extensions

CategoryCategory Display NameCosts To Export
KubernetesAuditKubernetes Audit LogsYes

Microsoft.Kusto/clusters

CategoryCategory Display NameCosts To Export
CommandCommandNo
FailedIngestionFailed ingestionNo
IngestionBatchingIngestion batchingNo
JournalJournalYes
QueryQueryNo
SucceededIngestionSucceeded ingestionNo
TableDetailsTable detailsNo
TableUsageStatisticsTable usage statisticsNo

microsoft.loadtestservice/loadtests

CategoryCategory Display NameCosts To Export
OperationLogsAzure Load Testing OperationsYes

Microsoft.Logic/IntegrationAccounts

CategoryCategory Display NameCosts To Export
IntegrationAccountTrackingEventsIntegration Account track eventsNo

Microsoft.Logic/Workflows

CategoryCategory Display NameCosts To Export
WorkflowRuntimeWorkflow runtime diagnostic eventsNo

Microsoft.MachineLearningServices/workspaces

CategoryCategory Display NameCosts To Export
AmlComputeClusterEventAmlComputeClusterEventNo
AmlComputeClusterNodeEventAmlComputeClusterNodeEventYes
AmlComputeCpuGpuUtilizationAmlComputeCpuGpuUtilizationNo
AmlComputeJobEventAmlComputeJobEventNo
AmlRunStatusChangedEventAmlRunStatusChangedEventNo
ComputeInstanceEventComputeInstanceEventYes
DataLabelChangeEventDataLabelChangeEventYes
DataLabelReadEventDataLabelReadEventYes
DataSetChangeEventDataSetChangeEventYes
DataSetReadEventDataSetReadEventYes
DataStoreChangeEventDataStoreChangeEventYes
DataStoreReadEventDataStoreReadEventYes
DeploymentEventACIDeploymentEventACIYes
DeploymentEventAKSDeploymentEventAKSYes
DeploymentReadEventDeploymentReadEventYes
EnvironmentChangeEventEnvironmentChangeEventYes
EnvironmentReadEventEnvironmentReadEventYes
InferencingOperationACIInferencingOperationACIYes
InferencingOperationAKSInferencingOperationAKSYes
ModelsActionEventModelsActionEventYes
ModelsChangeEventModelsChangeEventYes
ModelsReadEventModelsReadEventYes
PipelineChangeEventPipelineChangeEventYes
PipelineReadEventPipelineReadEventYes
RunEventRunEventYes
RunReadEventRunReadEventYes

Microsoft.MachineLearningServices/workspaces/onlineEndpoints

CategoryCategory Display NameCosts To Export
AmlOnlineEndpointConsoleLogAmlOnlineEndpointConsoleLogYes
AmlOnlineEndpointEventLogAmlOnlineEndpointEventLog (preview)Yes
AmlOnlineEndpointTrafficLogAmlOnlineEndpointTrafficLog (preview)Yes

Microsoft.ManagedNetworkFabric/networkDevices

CategoryCategory Display NameCosts To Export
AppAvailabilityResultsAvailability resultsYes
AppBrowserTimingsBrowser timingsYes
CategoryCategory Display NameCosts To Export
KeyDeliveryRequestsKey Delivery RequestsNo
MediaAccountMedia Account Health StatusYes

Microsoft.Media/mediaservices/liveEvents

CategoryCategory Display NameCosts To Export
LiveEventStateLive Event OperationsYes
CategoryCategory Display NameCosts To Export
StreamingEndpointRequestsStreaming Endpoint RequestsYes

Microsoft.Media/videoanalyzers

CategoryCategory Display NameCosts To Export
AuditAudit LogsYes
DiagnosticsDiagnostics LogsYes
OperationalOperational LogsYes

Microsoft.NetApp/netAppAccounts/capacityPools

CategoryCategory Display NameCosts To Export
AutoscaleCapacity Pool AutoscaledYes

Microsoft.NetApp/netAppAccounts/capacityPools/volumes

CategoryCategory Display NameCosts To Export
ANFFileAccessANF File AccessYes

Microsoft.Network/applicationgateways

CategoryCategory Display NameCosts To Export
ApplicationGatewayAccessLogApplication Gateway Access LogNo
ApplicationGatewayFirewallLogApplication Gateway Firewall LogNo
ApplicationGatewayPerformanceLogApplication Gateway Performance LogNo

Microsoft.Network/azureFirewalls

CategoryCategory Display NameCosts To Export
AZFWApplicationRuleAzure Firewall Application RuleYes
AZFWApplicationRuleAggregationAzure Firewall Network Rule Aggregation (Policy Analytics)Yes
AZFWDnsQueryAzure Firewall DNS queryYes
AZFWFatFlowAzure Firewall Fat Flow LogYes
AZFWFlowTraceAzure Firewall Flow Trace LogYes
AZFWFqdnResolveFailureAzure Firewall FQDN Resolution FailureYes
AZFWIdpsSignatureAzure Firewall IDPS SignatureYes
AZFWNatRuleAzure Firewall Nat RuleYes
AZFWNatRuleAggregationAzure Firewall Nat Rule Aggregation (Policy Analytics)Yes
AZFWNetworkRuleAzure Firewall Network RuleYes
AZFWNetworkRuleAggregationAzure Firewall Application Rule Aggregation (Policy Analytics)Yes
AZFWThreatIntelAzure Firewall Threat IntelligenceYes
AzureFirewallApplicationRuleAzure Firewall Application Rule (Legacy Azure Diagnostics)No
AzureFirewallDnsProxyAzure Firewall DNS Proxy (Legacy Azure Diagnostics)No
AzureFirewallNetworkRuleAzure Firewall Network Rule (Legacy Azure Diagnostics)No

microsoft.network/bastionHosts

CategoryCategory Display NameCosts To Export
BastionAuditLogsBastion Audit LogsNo

Microsoft.Network/expressRouteCircuits

CategoryCategory Display NameCosts To Export
PeeringRouteLogPeering Route Table LogsNo

Microsoft.Network/frontdoors

CategoryCategory Display NameCosts To Export
FrontdoorAccessLogFrontdoor Access LogNo
FrontdoorWebApplicationFirewallLogFrontdoor Web Application Firewall LogNo

Microsoft.Network/loadBalancers

CategoryCategory Display NameCosts To Export
LoadBalancerAlertEventLoad Balancer Alert EventsNo
LoadBalancerProbeHealthStatusLoad Balancer Probe Health StatusNo

Microsoft.Network/networksecuritygroups

CategoryCategory Display NameCosts To Export
NetworkSecurityGroupEventNetwork Security Group EventNo
NetworkSecurityGroupFlowEventNetwork Security Group Rule Flow EventNo
NetworkSecurityGroupRuleCounterNetwork Security Group Rule CounterNo

Microsoft.Network/networkSecurityPerimeters

CategoryCategory Display NameCosts To Export
NspIntraPerimeterInboundAllowedInbound access allowed within same perimeter.Yes
NspIntraPerimeterOutboundAllowedOutbound attempted to same perimeter.Yes
NspPrivateInboundAllowedPrivate endpoint traffic allowed.Yes
NspPublicInboundPerimeterRulesAllowedPublic inbound access allowed by NSP access rules.Yes
NspPublicInboundPerimeterRulesDeniedPublic inbound access denied by NSP access rules.Yes
NspPublicInboundResourceRulesAllowedPublic inbound access allowed by PaaS resource rules.Yes
NspPublicInboundResourceRulesDeniedPublic inbound access denied by PaaS resource rules.Yes
NspPublicOutboundPerimeterRulesAllowedPublic outbound access allowed by NSP access rules.Yes
NspPublicOutboundPerimeterRulesDeniedPublic outbound access denied by NSP access rules.Yes
NspPublicOutboundResourceRulesAllowedPublic outbound access allowed by PaaS resource rules.Yes
NspPublicOutboundResourceRulesDeniedPublic outbound access denied by PaaS resource rulesYes

Microsoft.Network/networkSecurityPerimeters/profiles

CategoryCategory Display NameCosts To Export
NSPInboundAccessAllowedNSP Inbound Access Allowed.Yes
NSPInboundAccessDeniedNSP Inbound Access Denied.Yes
NSPOutboundAccessAllowedNSP Outbound Access Allowed.Yes
NSPOutboundAccessDeniedNSP Outbound Access Denied.Yes

microsoft.network/p2svpngateways

CategoryCategory Display NameCosts To Export
GatewayDiagnosticLogGateway Diagnostic LogsNo
IKEDiagnosticLogIKE Diagnostic LogsNo
P2SDiagnosticLogP2S Diagnostic LogsNo

Microsoft.Network/publicIPAddresses

CategoryCategory Display NameCosts To Export
DDoSMitigationFlowLogsFlow logs of DDoS mitigation decisionsNo
DDoSMitigationReportsReports of DDoS mitigationsNo
DDoSProtectionNotificationsDDoS protection notificationsNo

Microsoft.Network/trafficManagerProfiles

CategoryCategory Display NameCosts To Export
ProbeHealthStatusEventsTraffic Manager Probe Health Results EventNo

microsoft.network/virtualnetworkgateways

CategoryCategory Display NameCosts To Export
GatewayDiagnosticLogGateway Diagnostic LogsNo
IKEDiagnosticLogIKE Diagnostic LogsNo
P2SDiagnosticLogP2S Diagnostic LogsNo
RouteDiagnosticLogRoute Diagnostic LogsNo
TunnelDiagnosticLogTunnel Diagnostic LogsNo

Microsoft.Network/virtualNetworks

CategoryCategory Display NameCosts To Export
VMProtectionAlertsVM protection alertsNo

microsoft.network/vpngateways

CategoryCategory Display NameCosts To Export
GatewayDiagnosticLogGateway Diagnostic LogsNo
IKEDiagnosticLogIKE Diagnostic LogsNo
RouteDiagnosticLogRoute Diagnostic LogsNo
TunnelDiagnosticLogTunnel Diagnostic LogsNo

Microsoft.NetworkFunction/azureTrafficCollectors

CategoryCategory Display NameCosts To Export
ExpressRouteCircuitIpfixExpress Route Circuit IPFIX Flow RecordsYes

Microsoft.NotificationHubs/namespaces

CategoryCategory Display NameCosts To Export
OperationalLogsOperational LogsNo

MICROSOFT.OPENENERGYPLATFORM/ENERGYSERVICES

CategoryCategory Display NameCosts To Export
AirFlowTaskLogsAir Flow Task LogsYes
ElasticOperatorLogsElastic Operator LogsYes
ElasticsearchLogsElasticsearch LogsYes

Microsoft.OpenLogisticsPlatform/Workspaces

CategoryCategory Display NameCosts To Export
SupplyChainEntityOperationsSupply Chain Entity OperationsYes
SupplyChainEventLogsSupply Chain Event logsYes

Microsoft.OperationalInsights/workspaces

CategoryCategory Display NameCosts To Export
AuditAuditNo

Microsoft.PlayFab/titles

CategoryCategory Display NameCosts To Export
AuditLogsAuditLogsYes

Microsoft.PowerBI/tenants

CategoryCategory Display NameCosts To Export
EngineEngineNo

Microsoft.PowerBI/tenants/workspaces

CategoryCategory Display NameCosts To Export
EngineEngineNo

Microsoft.PowerBIDedicated/capacities

CategoryCategory Display NameCosts To Export
EngineEngineNo

microsoft.purview/accounts

CategoryCategory Display NameCosts To Export
DataSensitivityLogEventDataSensitivityYes
ScanStatusLogEventScanStatusNo
SecurityPurviewAccountAuditEventsYes

Microsoft.RecoveryServices/Vaults

CategoryCategory Display NameCosts To Export
AddonAzureBackupAlertsAddon Azure Backup Alert DataNo
AddonAzureBackupJobsAddon Azure Backup Job DataNo
AddonAzureBackupPolicyAddon Azure Backup Policy DataNo
AddonAzureBackupProtectedInstanceAddon Azure Backup Protected Instance DataNo
AddonAzureBackupStorageAddon Azure Backup Storage DataNo
AzureBackupReportAzure Backup Reporting DataNo
AzureSiteRecoveryEventsAzure Site Recovery EventsNo
AzureSiteRecoveryJobsAzure Site Recovery JobsNo
AzureSiteRecoveryProtectedDiskDataChurnAzure Site Recovery Protected Disk Data ChurnNo
AzureSiteRecoveryRecoveryPointsAzure Site Recovery Recovery PointsNo
AzureSiteRecoveryReplicatedItemsAzure Site Recovery Replicated ItemsNo
AzureSiteRecoveryReplicationDataUploadRateAzure Site Recovery Replication Data Upload RateNo
AzureSiteRecoveryReplicationStatsAzure Site Recovery Replication StatsNo
CoreAzureBackupCore Azure Backup DataNo

Microsoft.Relay/namespaces

CategoryCategory Display NameCosts To Export
HybridConnectionsEventHybridConnections EventsNo
HybridConnectionsLogsHybridConnectionsLogsYes

Microsoft.Search/searchServices

CategoryCategory Display NameCosts To Export
OperationLogsOperation LogsNo

Microsoft.Security/antiMalwareSettings

CategoryCategory Display NameCosts To Export
ScanResultsAntimalwareScanResultsYes

Microsoft.Security/defenderForStorageSettings

CategoryCategory Display NameCosts To Export
ScanResultsAntimalwareScanResultsYes

microsoft.securityinsights/settings

CategoryCategory Display NameCosts To Export
AutomationAutomationYes
DataConnectorsData Collection - ConnectorsYes

Microsoft.ServiceBus/Namespaces

CategoryCategory Display NameCosts To Export
ApplicationMetricsLogsApplication Metrics Logs(Unused)Yes
OperationalLogsOperational LogsNo
RuntimeAuditLogsRuntime Audit LogsYes
VNetAndIPFilteringLogsVNet/IP Filtering Connection LogsNo

Microsoft.SignalRService/SignalR

CategoryCategory Display NameCosts To Export
AllLogsAzure SignalR Service Logs.No

Microsoft.SignalRService/WebPubSub

CategoryCategory Display NameCosts To Export
ConnectivityLogsConnectivity logs for Azure Web PubSub Service.Yes
HttpRequestLogsHttp Request logs for Azure Web PubSub Service.Yes
MessagingLogsMessaging logs for Azure Web PubSub Service.Yes

microsoft.singularity/accounts

CategoryCategory Display NameCosts To Export
ActivityActivity LogsYes
ExecutionExecution LogsYes

Microsoft.Sql/managedInstances

CategoryCategory Display NameCosts To Export
DevOpsOperationsAuditDevops operations Audit LogsNo
ResourceUsageStatsResource Usage StatisticsNo
SQLSecurityAuditEventsSQL Security Audit EventNo

Microsoft.Sql/managedInstances/databases

CategoryCategory Display NameCosts To Export
ErrorsErrorsNo
QueryStoreRuntimeStatisticsQuery Store Runtime StatisticsNo
QueryStoreWaitStatisticsQuery Store Wait StatisticsNo
SQLInsightsSQL InsightsNo

Microsoft.Sql/servers/databases

CategoryCategory Display NameCosts To Export
AutomaticTuningAutomatic tuningNo
BlocksBlocksNo
DatabaseWaitStatisticsDatabase Wait StatisticsNo
DeadlocksDeadlocksNo
DevOpsOperationsAuditDevops operations Audit LogsNo
DmsWorkersDms WorkersNo
ErrorsErrorsNo
ExecRequestsExec RequestsNo
QueryStoreRuntimeStatisticsQuery Store Runtime StatisticsNo
QueryStoreWaitStatisticsQuery Store Wait StatisticsNo
RequestStepsRequest StepsNo
SQLInsightsSQL InsightsNo
SqlRequestsSql RequestsNo
SQLSecurityAuditEventsSQL Security Audit EventNo
TimeoutsTimeoutsNo
WaitsWaitsNo

Microsoft.Storage/storageAccounts/blobServices

CategoryCategory Display NameCosts To Export
StorageDeleteStorageDeleteYes
StorageReadStorageReadYes
StorageWriteStorageWriteYes

Microsoft.Storage/storageAccounts/fileServices

CategoryCategory Display NameCosts To Export
StorageDeleteStorageDeleteYes
StorageReadStorageReadYes
StorageWriteStorageWriteYes

Microsoft.Storage/storageAccounts/queueServices

CategoryCategory Display NameCosts To Export
StorageDeleteStorageDeleteYes
StorageReadStorageReadYes
StorageWriteStorageWriteYes

Microsoft.Storage/storageAccounts/tableServices

CategoryCategory Display NameCosts To Export
StorageDeleteStorageDeleteYes
StorageReadStorageReadYes
StorageWriteStorageWriteYes

Microsoft.StorageCache/caches

CategoryCategory Display NameCosts To Export
AscCacheOperationEventHPC Cache operation eventYes
AscUpgradeEventHPC Cache upgrade eventYes
AscWarningEventHPC Cache warningYes

Microsoft.StreamAnalytics/streamingjobs

CategoryCategory Display NameCosts To Export
AuthoringAuthoringNo
ExecutionExecutionNo

Microsoft.Synapse/workspaces

CategoryCategory Display NameCosts To Export
BuiltinSqlReqsEndedBuilt-in Sql Pool Requests EndedNo
GatewayApiRequestsSynapse Gateway Api RequestsNo
IntegrationActivityRunsIntegration Activity RunsYes
IntegrationPipelineRunsIntegration Pipeline RunsYes
IntegrationTriggerRunsIntegration Trigger RunsYes
SQLSecurityAuditEventsSQL Security Audit EventNo
SynapseLinkEventSynapse Link EventYes
SynapseRbacOperationsSynapse RBAC OperationsNo

Microsoft.Synapse/workspaces/bigDataPools

CategoryCategory Display NameCosts To Export
BigDataPoolAppEventsBig Data Pool Applications Execution MetricsYes
BigDataPoolAppsEndedBig Data Pool Applications EndedNo
BigDataPoolBlockManagerEventsBig Data Pool Block Manager EventsYes
BigDataPoolDriverLogsBig Data Pool Driver LogsYes
BigDataPoolEnvironmentEventsBig Data Pool Environment EventsYes
BigDataPoolExecutorEventsBig Data Pool Executor EventsYes
BigDataPoolExecutorLogsBig Data Pool Executor LogsYes
BigDataPoolJobEventsBig Data Pool Job EventsYes
BigDataPoolSqlExecutionEventsBig Data Pool Sql Execution EventsYes
BigDataPoolStageEventsBig Data Pool Stage EventsYes
BigDataPoolTaskEventsBig Data Pool Task EventsYes

Microsoft.Synapse/workspaces/kustoPools

CategoryCategory Display NameCosts To Export
CommandSynapse Data Explorer CommandYes
FailedIngestionSynapse Data Explorer Failed IngestionYes
IngestionBatchingSynapse Data Explorer Ingestion BatchingYes
QuerySynapse Data Explorer QueryYes
SucceededIngestionSynapse Data Explorer Succeeded IngestionYes
TableDetailsSynapse Data Explorer Table DetailsYes
TableUsageStatisticsSynapse Data Explorer Table Usage StatisticsYes

Microsoft.Synapse/workspaces/scopePools

CategoryCategory Display NameCosts To Export
ScopePoolScopeJobsEndedScope Pool Scope Jobs EndedYes
ScopePoolScopeJobsStateChangeScope Pool Scope Jobs State ChangeYes

Microsoft.Synapse/workspaces/sqlPools

CategoryCategory Display NameCosts To Export
DmsWorkersDms WorkersNo
ExecRequestsExec RequestsNo
RequestStepsRequest StepsNo
SqlRequestsSql RequestsNo
SQLSecurityAuditEventsSql Security Audit EventNo
WaitsWaitsNo

Microsoft.TimeSeriesInsights/environments

CategoryCategory Display NameCosts To Export
IngressIngressNo
ManagementManagementNo

Microsoft.TimeSeriesInsights/environments/eventsources

CategoryCategory Display NameCosts To Export
IngressIngressNo
ManagementManagementNo

microsoft.videoindexer/accounts

CategoryCategory Display NameCosts To Export
AuditAuditYes
IndexingLogsIndexing LogsYes

Microsoft.Web/hostingEnvironments

CategoryCategory Display NameCosts To Export
AppServiceEnvironmentPlatformLogsApp Service Environment Platform LogsNo

Microsoft.Web/sites

CategoryCategory Display NameCosts To Export
AppServiceAntivirusScanAuditLogsReport Antivirus Audit LogsNo
AppServiceAppLogsApp Service Application LogsNo
AppServiceAuditLogsAccess Audit LogsNo
AppServiceConsoleLogsApp Service Console LogsNo
AppServiceFileAuditLogsSite Content Change Audit LogsNo
AppServiceHTTPLogsHTTP logsNo
AppServiceIPSecAuditLogsIPSecurity Audit logsNo
AppServicePlatformLogsApp Service Platform logsNo
FunctionAppLogsFunction Application LogsNo
WorkflowRuntimeWorkflow Runtime LogsYes

Microsoft.Web/sites/slots

CategoryCategory Display NameCosts To Export
AppServiceAntivirusScanAuditLogsReport Antivirus Audit LogsNo
AppServiceAppLogsApp Service Application LogsNo
AppServiceAuditLogsAccess Audit LogsNo
AppServiceConsoleLogsApp Service Console LogsNo
AppServiceFileAuditLogsSite Content Change Audit LogsNo
AppServiceHTTPLogsHTTP logsNo
AppServiceIPSecAuditLogsIPSecurity Audit logsNo
AppServicePlatformLogsApp Service Platform logsNo
FunctionAppLogsFunction Application LogsNo

microsoft.workloads/sapvirtualinstances

CategoryCategory Display NameCosts To Export
ChangeDetectionChange DetectionYes

Next Steps

  • Learn more about resource logs
  • Stream resource resource logs to Event Hubs
  • Change resource log diagnostic settings using the Azure Monitor REST API
  • Analyze logs from Azure storage with Log Analytics

FAQs

What can be monitored using Azure Monitor? ›

Collect, analyze, and act on telemetry data from your cloud and hybrid environments. Azure Monitor supports your operations at scale by helping you maximize the performance and availability of your resources and proactively identify problems.

What are different types of logs in Azure? ›

Types of logs in Azure
Log categoryLog type
Virtual machines and cloud servicesWindows Event Log service and Linux Syslog
Azure Storage AnalyticsStorage logging, provides metrics data for a storage account
Network security group (NSG) flow logsJSON format, shows outbound and inbound flows on a per-rule basis
5 more rows
Jan 19, 2023

What are Azure resource logs? ›

Azure resource logs are platform logs that provide insight into operations that were performed within an Azure resource. The content of resource logs varies by the Azure service and resource type. Resource logs aren't collected by default.

Which kind of data is collected by Azure Monitor? ›

The data is all stored together as Logs and Metrics, supporting Azure Monitor features such as log queries, alerts, and workbooks.

What are the 7 things Azure security Monitor can do? ›

Use Azure Monitor to monitor these types resources in Azure, other clouds, or on-premises:
  • Applications.
  • Virtual machines.
  • Guest operating systems.
  • Containers.
  • Databases.
  • Security events in combination with Azure Sentinel.
  • Networking events and health in combination with Network Watcher.
6 days ago

What is Azure Monitor logs? ›

The Azure Monitor activity log is a platform log in Azure that provides insight into subscription-level events. The activity log includes information like when a resource is modified or a virtual machine is started. You can view the activity log in the Azure portal or retrieve entries with PowerShell and the Azure CLI.

What are 4 types of logging? ›

Types of logging
  • Circular logging. Use circular logging if all you want is restart recovery, using the log to roll back transactions that were in progress when the system stopped. ...
  • Linear logging. ...
  • Active log. ...
  • Inactive log. ...
  • Secondary log files.

How many categories of logs are there? ›

There are three types of log files: 1. Request log files that document the execution of a concurrent program running as the result of a concurrent request. Every concurrent request generates a log file.

Can Azure Monitor collect data from any source? ›

The Azure Monitor agent allows you to collect logs from data sources that you configure using data collection rules or from monitoring solutions that provide additional insights into applications running on the machine. These can be sent to one or more Log Analytics workspaces.

Can Azure monitor detect threats? ›

Detect and respond to the latest threats

Kroll Responder monitors Azure infrastructure for excessive server spin-ups, CPU spikes, and other abnormal events. Kroll Responder identifies login attempts from suspicious locations, unauthorised resource sharing and other events that could indicate a compromise.

Can Azure monitor trigger alerts? ›

Alerts help you detect and address issues before users notice them by proactively notifying you when Azure Monitor data indicates there might be a problem with your infrastructure or application. You can alert on any metric or log data source in the Azure Monitor data platform. This diagram shows you how alerts work.

What are some of the key features and use cases of Azure monitor? ›

Microsoft's Azure Monitor is designed to analyze and optimize the performance of web applications and infrastructure, including virtual machines (VMs), Azure Kubernetes Service (AKS), Azure Storage, and databases. Monitor Linux and Windows VMs and their health and dependencies—all on a single map.

Videos

1. Complete Azure Monitor explained with overview in 20 Minutes
(Paddy Maddy)
2. Azure Monitor | What is Azure Monitor | Azure Monitor Tutorial | Azure Monitoring Tutorial
(Intellipaat)
3. Azure | Monitor Azure activity log events using Azure Monitor and Action Groups
(Manjunath Rao)
4. Azure Monitoring Data Types Activity logs DEMO
(Paddy Maddy)
5. Understand and Implement Azure Monitor to Analyze Azure Infrastructure using Azure Monitor Logs
(Azure Training Series)
6. What is Azure Monitor?
(Microsoft Azure)

References

Top Articles
Latest Posts
Article information

Author: Greg Kuvalis

Last Updated: 10/13/2023

Views: 6117

Rating: 4.4 / 5 (75 voted)

Reviews: 90% of readers found this page helpful

Author information

Name: Greg Kuvalis

Birthday: 1996-12-20

Address: 53157 Trantow Inlet, Townemouth, FL 92564-0267

Phone: +68218650356656

Job: IT Representative

Hobby: Knitting, Amateur radio, Skiing, Running, Mountain biking, Slacklining, Electronics

Introduction: My name is Greg Kuvalis, I am a witty, spotless, beautiful, charming, delightful, thankful, beautiful person who loves writing and wants to share my knowledge and understanding with you.