====== Monitoring and Logging ======
* Azure Platform Logs include: Resource Logs (previously diagnostic logs), Activity log, and Azure AD (sign-in logs), [[https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/platform-logs-overview]]
* //Activity Logs// are control plane logs
* //Resource Logs// capture activity to the data access plane while the //Activity log// is a subscription-level log for the control plane
* Diagnostic Logs for the Subscription are control/management plane logs whereas Diagnostic Logs at the resource level are data plane logs.
* //Control Plane logs// are logs for things happening at a meta level for resources.
* //Data Plane logs// are logs for things happening within a resource.
* Azure Data Explorer
* Azure Monitor
* Application Insights
====== Recommended Logs for Security ======
* [[https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-nsg-manage-log]]