Azure - Monitor Activity Log

Monitor -Activity Log

 The Activity log is a platform log in Azure that provides insight into subscription-level events. The activity log includes such information as when a resource is modified or when a virtual machine is started. You can view the Activity log in the Azure portal or retrieve entries with PowerShell and CLI. This article provides details on viewing the Activity log and sending it to different destinations.

For more functionality, you should create a diagnostic setting to send the Activity log to one or more of these locations for the following reasons:

• to Azure Monitor Logs for more complex querying and alerting, and longer retention (up to two years)
• to Azure Event Hubs to forward outside of Azure
• to Azure Storage for cheaper, long-term archiving

Steps to Check the Activity Log

1. Select Monitor service and click on Activity Log.

2. Once you select any Operation then it will show its Summary, Change History and JSON Template.

3. Click on Activity Logs and click on the link Add Diagnostic settings

4. You can select Log category which you want to monitor like Administrative tasks, Security etc.

5. On the Destination details you can select where you can save those log activities like storage account.