Audit Logs of Azure Monitor logs queries now available

Azure Updates

Discussionpowered by zap.ms

Published

Aug 5, 2020

Status

In preview

Timeline

  • August 2020
    Preview

Product

Azure Monitor

Tag

Features

Category

DevOps
Management and governance

Description

Azure Monitor Logs allows you to collect data across their entire ecosystem including application and OS level telemetry, security logs, network logs, diagnostic logs from Azure resources, and custom logs. All this data can be queried with the powerful KQL query language to gain deep insights across patterns, correlations, and more.

The Azure Monitor Logs team is announcing a public preview for one of their most requested features, the ability to audit Azure Monitor Logs queries. When enabled through the Azure Diagnostics mechanism, you can collect telemetry about who ran a query, when the query was run, what tool was used to run the query, the query text, and performance stats around the query execution. This telemetry, as with any other Azure Diagnostics-based telemetry, can be sent to an Azure Storage Blob, Azure Event Hub, or into Azure Monitor Logs.

Documentation

Blog Post