You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/essentials/activity-log.md
+6-60Lines changed: 6 additions & 60 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,7 +24,7 @@ For details on how to create a diagnostic setting, see [Create diagnostic settin
24
24
25
25
> [!NOTE]
26
26
> * Entries in the Activity Log are system generated and can't be changed or deleted.
27
-
> * Entries in the Activity Log are representing control plane changes like a virtual machine restart, any non related entries should be written into [Azure Resource Logs](https://learn.microsoft.com/azure/azure-monitor/essentials/resource-logs)
27
+
> * Entries in the Activity Log are representing control plane changes like a virtual machine restart, any non related entries should be written into [Azure Resource Logs](resource-logs.md)
28
28
29
29
## Retention period
30
30
@@ -288,7 +288,6 @@ The columns in the following table have been deprecated in the updated schema. T
> In some cases, the values in these columns might be all uppercase. If you have a query that includes these columns, use the [=~ operator](/azure/kusto/query/datatypes-string-operators) to do a case-insensitive comparison.
293
292
294
293
The following columns have been added to `AzureActivity` in the updated schema:
@@ -297,63 +296,10 @@ The following columns have been added to `AzureActivity` in the updated schema:
297
296
- Claims_d
298
297
- Properties_d
299
298
300
-
## Activity log insights
301
-
302
-
Activity log insights let you view information about changes to resources and resource groups in a subscription. The dashboards also present data about which users or services performed activities in the subscription and the activities' status. This article explains how to view activity log insights in the Azure portal.
303
-
304
-
Before you use activity log insights, you must [enable sending logs to your Log Analytics workspace](./diagnostic-settings.md).
305
-
306
-
### How do activity log insights work?
307
-
308
-
Activity logs you send to a [Log Analytics workspace](../logs/log-analytics-workspace-overview.md) are stored in a table called `AzureActivity`.
309
-
310
-
Activity log insights are a curated [Log Analytics workbook](../visualize/workbooks-overview.md) with dashboards that visualize the data in the `AzureActivity` table. For example, data might include which administrators deleted, updated, or created resources and whether the activities failed or succeeded.
### View activity log insights: Resource group or subscription level
315
-
316
-
To view activity log insights on a resource group or a subscription level:
317
-
318
-
1. In the Azure portal, select **Monitor** > **Workbooks**.
319
-
1. In the **Insights** section, select **Activity Logs Insights**.
320
-
321
-
:::image type="content" source="media/activity-log/open-activity-log-insights-workbook.png" lightbox= "media/activity-log/open-activity-log-insights-workbook.png" alt-text="Screenshot that shows how to locate and open the Activity Logs Insights workbook on a scale level.":::
322
-
323
-
1. At the top of the **Activity Logs Insights** page, select:
324
-
325
-
1. One or more subscriptions from the **Subscriptions** dropdown.
326
-
1. Resources and resource groups from the **CurrentResource** dropdown.
327
-
1. A time range for which to view data from the **TimeRange** dropdown.
328
-
329
-
### View activity log insights on any Azure resource
330
-
331
-
>[!Note]
332
-
> Currently, Application Insights resources aren't supported for this workbook.
333
-
334
-
To view activity log insights on a resource level:
335
-
336
-
1. In the Azure portal, go to your resource and select **Workbooks**.
337
-
1. In the **Activity Logs Insights** section, select **Activity Logs Insights**.
338
-
339
-
:::image type="content" source="media/activity-log/activity-log-resource-level.png" lightbox= "media/activity-log/activity-log-resource-level.png" alt-text="Screenshot that shows how to locate and open the Activity Logs Insights workbook on a resource level.":::
340
-
341
-
1. At the top of the **Activity Logs Insights** page, select a time range for which to view data from the **TimeRange** dropdown:
342
-
343
-
***Azure Activity Log Entries** shows the count of activity log records in each activity log category.
344
-
345
-
:::image type="content" source="media/activity-log/activity-logs-insights-category-value.png" lightbox= "media/activity-log/activity-logs-insights-category-value.png" alt-text="Screenshot that shows Azure activity logs by category value.":::
346
-
347
-
***Activity Logs by Status** shows the count of activity log records in each status.
348
-
349
-
:::image type="content" source="media/activity-log/activity-logs-insights-status.png" lightbox= "media/activity-log/activity-logs-insights-status.png" alt-text="Screenshot that shows Azure activity logs by status.":::
350
-
351
-
* At the subscription and resource group level, **Activity Logs by Resource** and **Activity Logs by Resource Provider** show the count of activity log records for each resource and resource provider.
352
-
353
-
:::image type="content" source="media/activity-log/activity-logs-insights-resource.png" lightbox= "media/activity-log/activity-logs-insights-resource.png" alt-text="Screenshot that shows Azure activity logs by resource.":::
354
-
355
299
## Next steps
356
300
357
-
*[Read an overview of platform logs](./platform-logs-overview.md)
0 commit comments