Skip to content

Commit 001c297

Browse files
authored
Merge pull request #219066 from guywi-ms/patch-26
Update activity-log.md
2 parents a1c39b3 + 0c5201c commit 001c297

File tree

1 file changed

+6
-60
lines changed

1 file changed

+6
-60
lines changed

articles/azure-monitor/essentials/activity-log.md

Lines changed: 6 additions & 60 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ For details on how to create a diagnostic setting, see [Create diagnostic settin
2424

2525
> [!NOTE]
2626
> * Entries in the Activity Log are system generated and can't be changed or deleted.
27-
> * Entries in the Activity Log are representing control plane changes like a virtual machine restart, any non related entries should be written into [Azure Resource Logs](https://learn.microsoft.com/azure/azure-monitor/essentials/resource-logs)
27+
> * Entries in the Activity Log are representing control plane changes like a virtual machine restart, any non related entries should be written into [Azure Resource Logs](resource-logs.md)
2828
2929
## Retention period
3030

@@ -288,7 +288,6 @@ The columns in the following table have been deprecated in the updated schema. T
288288
|resourceProviderName | ResourceProvider | ResourceProviderValue ||
289289

290290
> [!Important]
291-
292291
> In some cases, the values in these columns might be all uppercase. If you have a query that includes these columns, use the [=~ operator](/azure/kusto/query/datatypes-string-operators) to do a case-insensitive comparison.
293292
294293
The following columns have been added to `AzureActivity` in the updated schema:
@@ -297,63 +296,10 @@ The following columns have been added to `AzureActivity` in the updated schema:
297296
- Claims_d
298297
- Properties_d
299298

300-
## Activity log insights
301-
302-
Activity log insights let you view information about changes to resources and resource groups in a subscription. The dashboards also present data about which users or services performed activities in the subscription and the activities' status. This article explains how to view activity log insights in the Azure portal.
303-
304-
Before you use activity log insights, you must [enable sending logs to your Log Analytics workspace](./diagnostic-settings.md).
305-
306-
### How do activity log insights work?
307-
308-
Activity logs you send to a [Log Analytics workspace](../logs/log-analytics-workspace-overview.md) are stored in a table called `AzureActivity`.
309-
310-
Activity log insights are a curated [Log Analytics workbook](../visualize/workbooks-overview.md) with dashboards that visualize the data in the `AzureActivity` table. For example, data might include which administrators deleted, updated, or created resources and whether the activities failed or succeeded.
311-
312-
:::image type="content" source="media/activity-log/activity-logs-insights-main-screen.png" lightbox= "media/activity-log/activity-logs-insights-main-screen.png" alt-text="Screenshot that shows activity log insights dashboards.":::
313-
314-
### View activity log insights: Resource group or subscription level
315-
316-
To view activity log insights on a resource group or a subscription level:
317-
318-
1. In the Azure portal, select **Monitor** > **Workbooks**.
319-
1. In the **Insights** section, select **Activity Logs Insights**.
320-
321-
:::image type="content" source="media/activity-log/open-activity-log-insights-workbook.png" lightbox= "media/activity-log/open-activity-log-insights-workbook.png" alt-text="Screenshot that shows how to locate and open the Activity Logs Insights workbook on a scale level.":::
322-
323-
1. At the top of the **Activity Logs Insights** page, select:
324-
325-
1. One or more subscriptions from the **Subscriptions** dropdown.
326-
1. Resources and resource groups from the **CurrentResource** dropdown.
327-
1. A time range for which to view data from the **TimeRange** dropdown.
328-
329-
### View activity log insights on any Azure resource
330-
331-
>[!Note]
332-
> Currently, Application Insights resources aren't supported for this workbook.
333-
334-
To view activity log insights on a resource level:
335-
336-
1. In the Azure portal, go to your resource and select **Workbooks**.
337-
1. In the **Activity Logs Insights** section, select **Activity Logs Insights**.
338-
339-
:::image type="content" source="media/activity-log/activity-log-resource-level.png" lightbox= "media/activity-log/activity-log-resource-level.png" alt-text="Screenshot that shows how to locate and open the Activity Logs Insights workbook on a resource level.":::
340-
341-
1. At the top of the **Activity Logs Insights** page, select a time range for which to view data from the **TimeRange** dropdown:
342-
343-
* **Azure Activity Log Entries** shows the count of activity log records in each activity log category.
344-
345-
:::image type="content" source="media/activity-log/activity-logs-insights-category-value.png" lightbox= "media/activity-log/activity-logs-insights-category-value.png" alt-text="Screenshot that shows Azure activity logs by category value.":::
346-
347-
* **Activity Logs by Status** shows the count of activity log records in each status.
348-
349-
:::image type="content" source="media/activity-log/activity-logs-insights-status.png" lightbox= "media/activity-log/activity-logs-insights-status.png" alt-text="Screenshot that shows Azure activity logs by status.":::
350-
351-
* At the subscription and resource group level, **Activity Logs by Resource** and **Activity Logs by Resource Provider** show the count of activity log records for each resource and resource provider.
352-
353-
:::image type="content" source="media/activity-log/activity-logs-insights-resource.png" lightbox= "media/activity-log/activity-logs-insights-resource.png" alt-text="Screenshot that shows Azure activity logs by resource.":::
354-
355299
## Next steps
356300

357-
* [Read an overview of platform logs](./platform-logs-overview.md)
358-
* [Review activity log event schema](activity-log-schema.md)
359-
* [Create a diagnostic setting to send activity logs to other destinations](./diagnostic-settings.md)
301+
Learn more about:
302+
303+
* [Platform logs](./platform-logs-overview.md)
304+
* [Activity log event schema](activity-log-schema.md)
305+
* [Activity log insights](activity-log-insights.md)

0 commit comments

Comments
 (0)