Monitoring and Logging

  • Azure Platform Logs include: Resource Logs (previously diagnostic logs), Activity log, and Azure AD (sign-in logs), https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/platform-logs-overview
    • Resource Logs capture activity to the data access plane while the Activity log is a subscription-level log for the control plane
    • Diagnostic Logs for the Subscription are control/management plane logs whereas Diagnostic Logs at the resource level are data plane logs.
    • Control Plane logs are logs for things happening at a meta level for resources.
    • Data Plane logs are logs for things happening within a resource.
  • Azure Data Explorer
  • Azure Monitor
  • Application Insights

Recommended Logs for Security

  • azure/monitoring_and_logging.txt
  • Last modified: 2025/06/17 17:56
  • by mmuze