Supported categories for Azure Resource Logs

Note

Resource logs were previously known as diagnostic logs. The name was changed in October 2019 as the types of logs gathered by Azure Monitor shifted to include more than just the Azure resource.

Azure Monitor resource logs are logs emitted by Azure services that describe the operation of those services or resources. All resource logs available through Azure Monitor share a common top-level schema, with flexibility for each service to emit unique properties for their own events.

A combination of the resource type (available in the resourceId property) and the category uniquely identify a schema. There is a common schema for all resource logs with service-specific fields then added for different log categories. For more information, see Common and service-specific schema for Azure Resource Logs

Costs

There are costs associated with sending and storing any data into into Log Analytics, Azure Storage and/or Event hub. You may pay for the cost to get the data into these locations and for keeping it there. Resource logs are one type of data you can send to these locations. There is an additional cost to export some categories of resource logs into these locations, while others are free of export costs. Export cost specifics are listed in the table below.

Supported log categories per resource type

Following is a list of the types of logs available for each resource type.

Some categories may only be supported for specific types of resources. See the resource-specific documentation if you feel you are missing a resource. For example, Microsoft.Sql/servers/databases categories aren't available for all types of databases. For more information, see information on SQL Database diagnostic logging.

If you still something is missing, you can open a GitHub comment at the bottom of this article.

Microsoft.AnalysisServices/servers

Cost to export: Free

Category Category Display Name
Engine Engine
Service Service

Microsoft.ApiManagement/service

Cost to export: Free

Category Category Display Name
GatewayLogs Logs related to ApiManagement Gateway

Microsoft.AppPlatform/Spring

Cost to export: Free

Category Category Display Name
ApplicationConsole Application Console
SystemLogs System Logs

Microsoft.Automation/automationAccounts

Cost to export: Free

Category Category Display Name
DscNodeStatus Dsc Node Status
JobLogs Job Logs
JobStreams Job Streams

Microsoft.Batch/batchAccounts

Cost to export: Free

Category Category Display Name
ServiceLog Service Logs

Microsoft.BatchAI/workspaces

Cost to export: Free

Category Category Display Name
BaiClusterEvent BaiClusterEvent
BaiClusterNodeEvent BaiClusterNodeEvent
BaiJobEvent BaiJobEvent

Microsoft.Blockchain/blockchainMembers

Cost to export: Free

Category Category Display Name
BlockchainApplication Blockchain Application
FabricOrderer Fabric Orderer
FabricPeer Fabric Peer
Proxy Proxy

Microsoft.Blockchain/cordaMembers

Cost to export: Free

Category Category Display Name
BlockchainApplication Blockchain Application

Microsoft.Cdn/cdnwebapplicationfirewallpolicies

Cost to export: Free

Category Category Display Name
WebApplicationFirewallLogs Web Application Firewall Logs

Microsoft.Cdn/profiles

Cost to export: Free

Category Category Display Name
AzureCdnAccessLog Azure Cdn Access Log

Microsoft.Cdn/profiles/endpoints

Cost to export: Free

Category Category Display Name
CoreAnalytics Gets the metrics of the endpoint, e.g., bandwidth, egress, etc.

Microsoft.ClassicNetwork/networksecuritygroups

Cost to export: Free

Category Category Display Name
Network Security Group Rule Flow Event Network Security Group Rule Flow Event

Microsoft.CognitiveServices/accounts

Cost to export: Free

Category Category Display Name
Audit Audit Logs
RequestResponse Request and Response Logs
Trace Trace Logs

Microsoft.ContainerRegistry/registries

Cost to export: Free

Category Category Display Name
ContainerRegistryLoginEvents Login Events
ContainerRegistryRepositoryEvents RepositoryEvent logs

Microsoft.ContainerService/managedClusters

Cost to export: Free

Category Category Display Name
cluster-autoscaler Kubernetes Cluster Autoscaler
kube-apiserver Kubernetes API Server
kube-audit Kubernetes Audit
kube-controller-manager Kubernetes Controller Manager
kube-scheduler Kubernetes Scheduler

Microsoft.CustomProviders/resourceproviders

Cost to export: Free

Category Category Display Name
AuditLogs Audit logs for MiniRP calls

Microsoft.Databricks/workspaces

Cost to export: Free

Category Category Display Name
accounts Databricks Accounts
clusters Databricks Clusters
dbfs Databricks File System
instancePools Instance Pools
jobs Databricks Jobs
notebook Databricks Notebook
secrets Databricks Secrets
sqlPermissions Databricks SQLPermissions
ssh Databricks SSH
workspace Databricks Workspace

Microsoft.DataFactory/factories

Cost to export: Free

Category Category Display Name
ActivityRuns Pipeline activity runs log
PipelineRuns Pipeline runs log
TriggerRuns Trigger runs log

Microsoft.DataLakeStore/accounts

Cost to export: Free

Category Category Display Name
Audit Audit Logs
Requests Request Logs

Microsoft.DataShare/accounts

Cost to export: Free

Category Category Display Name
ReceivedShareSnapshots Received Share Snapshots
SentShareSnapshots Sent Share Snapshots
Shares Shares
ShareSubscriptions Share Subscriptions

Microsoft.DBforMariaDB/servers

Cost to export: Free

Category Category Display Name
MySqlAuditLogs MariaDB Audit Logs
MySqlSlowLogs MariaDB Server Logs

Microsoft.DBforMySQL/flexibleServers

Cost to export: Free

Category Category Display Name
MySqlAuditLogs MySQL Audit Logs
MySqlSlowLogs MySQL Slow Logs

Microsoft.DBforMySQL/servers

Cost to export: Free

Category Category Display Name
MySqlAuditLogs MySQL Audit Logs
MySqlSlowLogs MySQL Server Logs

Microsoft.DBforPostgreSQL/flexibleServers

Cost to export: Free

Category Category Display Name
PostgreSQLLogs PostgreSQL Server Logs

Microsoft.DBforPostgreSQL/servers

Cost to export: Free

Category Category Display Name
PostgreSQLLogs PostgreSQL Server Logs
QueryStoreRuntimeStatistics PostgreSQL Query Store Runtime Statistics
QueryStoreWaitStatistics PostgreSQL Query Store Wait Statistics

Microsoft.DBforPostgreSQL/serversv2

Cost to export: Free

Category Category Display Name
PostgreSQLLogs PostgreSQL Server Logs

Microsoft.DesktopVirtualization/applicationgroups

Cost to export: Free

Category Category Display Name
Checkpoint Checkpoint
Error Error
Management Management

Microsoft.DesktopVirtualization/hostpools

Cost to export: Free

Category Category Display Name
Checkpoint Checkpoint
Connection Connection
Error Error
HostRegistration HostRegistration
Management Management

Microsoft.DesktopVirtualization/workspaces

Cost to export: Free

Category Category Display Name
Checkpoint Checkpoint
Error Error
Feed Feed
Management Management

Microsoft.Devices/IotHubs

Cost to export: Free

Category Category Display Name
C2DCommands C2D Commands
C2DTwinOperations C2D Twin Operations
Configurations Configurations
Connections Connections
D2CTwinOperations D2CTwinOperations
DeviceIdentityOperations Device Identity Operations
DeviceStreams Device Streams (Preview)
DeviceTelemetry Device Telemetry
DirectMethods Direct Methods
DistributedTracing Distributed Tracing (Preview)
FileUploadOperations File Upload Operations
JobsOperations Jobs Operations
Routes Routes
TwinQueries Twin Queries

Microsoft.Devices/provisioningServices

Cost to export: Free

Category Category Display Name
DeviceOperations Device Operations
ServiceOperations Service Operations

Microsoft.DocumentDB/databaseAccounts

Cost to export: Free

Category Category Display Name
CassandraRequests CassandraRequests
ControlPlaneRequests ControlPlaneRequests
DataPlaneRequests DataPlaneRequests
GremlinRequests GremlinRequests
MongoRequests MongoRequests
PartitionKeyRUConsumption PartitionKeyRUConsumption
PartitionKeyStatistics PartitionKeyStatistics
QueryRuntimeStatistics QueryRuntimeStatistics

Microsoft.EventGrid/domains

Cost to export: Free

Category Category Display Name
DeliveryFailures Delivery Failure Logs
PublishFailures Publish Failure Logs

Microsoft.EventGrid/systemTopics

Cost to export: Free

Category Category Display Name
DeliveryFailures Delivery Failure Logs

Microsoft.EventGrid/topics

Cost to export: Free

Category Category Display Name
DeliveryFailures Delivery Failure Logs
PublishFailures Publish Failure Logs

Microsoft.EventHub/namespaces

Cost to export: Free

Category Category Display Name
ArchiveLogs Archive Logs
AutoScaleLogs Auto Scale Logs
CustomerManagedKeyUserLogs Customer Managed Key Logs
EventHubVNetConnectionEvent VNet/IP Filtering Connection Logs
KafkaCoordinatorLogs Kafka Coordinator Logs
KafkaUserErrorLogs Kafka User Error Logs
OperationalLogs Operational Logs

Microsoft.HealthcareApis/services

Cost to export: Free

Category Category Display Name
AuditLogs Audit logs

Microsoft.Insights/AutoscaleSettings

Cost to export: Free

Category Category Display Name
AutoscaleEvaluations Autoscale Evaluations
AutoscaleScaleActions Autoscale Scale Actions

Microsoft.Insights/Components

Cost to export: Free

Category Category Display Name
AppAvailabilityResults Availability results
AppBrowserTimings Browser timings
AppDependencies Dependencies
AppEvents Events
AppExceptions Exceptions
AppMetrics Metrics
AppPageViews Page views
AppPerformanceCounters Performance counters
AppRequests Requests
AppSystemEvents System events
AppTraces Traces

Microsoft.KeyVault/vaults

Cost to export: Free

Category Category Display Name
AuditEvent Audit Logs

Microsoft.Kusto/Clusters

Cost to export: Free

Category Category Display Name
Command Command
FailedIngestion Failed ingest operations
IngestionBatching Ingestion batching
Query Query
SucceededIngestion Successful ingest operations
TableDetails Table details
TableUsageStatistics Table usage statistics

Microsoft.Logic/integrationAccounts

Cost to export: Free

Category Category Display Name
IntegrationAccountTrackingEvents Integration Account track events

Microsoft.Logic/workflows

Cost to export: Free

Category Category Display Name
WorkflowRuntime Workflow runtime diagnostic events

Microsoft.MachineLearningServices/workspaces

Cost to export: Free

Category Category Display Name
AmlComputeClusterEvent AmlComputeClusterEvent
AmlComputeClusterNodeEvent AmlComputeClusterNodeEvent
AmlComputeCpuGpuUtilization AmlComputeCpuGpuUtilization
AmlComputeJobEvent AmlComputeJobEvent
AmlRunStatusChangedEvent AmlRunStatusChangedEvent

Microsoft.Media/mediaservices

Cost to export: Free

Category Category Display Name
KeyDeliveryRequests Key Delivery Requests

Microsoft.Network/applicationGateways

Cost to export: Free

Category Category Display Name
ApplicationGatewayAccessLog Application Gateway Access Log
ApplicationGatewayFirewallLog Application Gateway Firewall Log
ApplicationGatewayPerformanceLog Application Gateway Performance Log

Microsoft.Network/azurefirewalls

Cost to export: Free

Category Category Display Name
AzureFirewallApplicationRule Azure Firewall Application Rule
AzureFirewallNetworkRule Azure Firewall Network Rule

Microsoft.Network/bastionHosts

Cost to export: Free

Category Category Display Name
BastionAuditLogs Bastion Audit Logs

Microsoft.Network/expressRouteCircuits

Cost to export: Free

Category Category Display Name
PeeringRouteLog Peering Route Table Logs

Microsoft.Network/frontdoors

Cost to export: Free

Category Category Display Name
FrontdoorAccessLog Frontdoor Access Log
FrontdoorWebApplicationFirewallLog Frontdoor Web Application Firewall Log

Microsoft.Network/loadBalancers

Cost to export: Free

Category Category Display Name
LoadBalancerAlertEvent Load Balancer Alert Events
LoadBalancerProbeHealthStatus Load Balancer Probe Health Status

Microsoft.Network/networksecuritygroups

Cost to export: Free

Category Category Display Name
NetworkSecurityGroupEvent Network Security Group Event
NetworkSecurityGroupFlowEvent Network Security Group Rule Flow Event
NetworkSecurityGroupRuleCounter Network Security Group Rule Counter

Microsoft.Network/publicIPAddresses

Cost to export: Free

Category Category Display Name
DDoSMitigationFlowLogs Flow logs of DDoS mitigation decisions
DDoSMitigationReports Reports of DDoS mitigations
DDoSProtectionNotifications DDoS protection notifications

Microsoft.Network/trafficManagerProfiles

Cost to export: Free

Category Category Display Name
ProbeHealthStatusEvents Traffic Manager Probe Health Results Event

Microsoft.Network/virtualNetworkGateways

Cost to export: Free

Category Category Display Name
GatewayDiagnosticLog Gateway Diagnostic Logs
IKEDiagnosticLog IKE Diagnostic Logs
P2SDiagnosticLog P2S Diagnostic Logs
RouteDiagnosticLog Route Diagnostic Logs
TunnelDiagnosticLog Tunnel Diagnostic Logs

Microsoft.Network/virtualNetworks

Cost to export: Free

Category Category Display Name
VMProtectionAlerts VM protection alerts

Microsoft.PowerBIDedicated/capacities

Cost to export: Free

Category Category Display Name
Engine Engine

Microsoft.RecoveryServices/Vaults

Cost to export: Free

Category Category Display Name
AddonAzureBackupAlerts Addon Azure Backup Alert Data
AddonAzureBackupJobs Addon Azure Backup Job Data
AddonAzureBackupPolicy Addon Azure Backup Policy Data
AddonAzureBackupProtectedInstance Addon Azure Backup Protected Instance Data
AddonAzureBackupStorage Addon Azure Backup Storage Data
AzureBackupReport Azure Backup Reporting Data
AzureSiteRecoveryEvents Azure Site Recovery Events
AzureSiteRecoveryJobs Azure Site Recovery Jobs
AzureSiteRecoveryProtectedDiskDataChurn Azure Site Recovery Protected Disk Data Churn
AzureSiteRecoveryRecoveryPoints Azure Site Recovery Recovery Points
AzureSiteRecoveryReplicatedItems Azure Site Recovery Replicated Items
AzureSiteRecoveryReplicationDataUploadRate Azure Site Recovery Replication Data Upload Rate
AzureSiteRecoveryReplicationStats Azure Site Recovery Replication Stats
CoreAzureBackup Core Azure Backup Data

Microsoft.Relay/namespaces

Cost to export: Free

Category Category Display Name
HybridConnectionsEvent HybridConnections Events

Microsoft.Search/searchServices

Cost to export: Free

Category Category Display Name
OperationLogs Operation Logs

Microsoft.ServiceBus/namespaces

Cost to export: Free

Category Category Display Name
OperationalLogs Operational Logs

Microsoft.SignalRService/SignalR

Cost to export: Free

Category Category Display Name
AllLogs Azure SignalR Service Logs.

Microsoft.Sql/managedInstances

Cost to export: Free

Category Category Display Name
DevOpsOperationsAudit Devops operations Audit Logs
ResourceUsageStats Resource Usage Statistics
SQLSecurityAuditEvents SQL Security Audit Event

Microsoft.Sql/managedInstances/databases

Cost to export: Free

Category Category Display Name
Errors Errors
QueryStoreRuntimeStatistics Query Store Runtime Statistics
QueryStoreWaitStatistics Query Store Wait Statistics
SQLInsights SQL Insights

Microsoft.Sql/servers/databases

Cost to export: Free

Category Category Display Name
AutomaticTuning Automatic tuning
Blocks Blocks
DatabaseWaitStatistics Database Wait Statistics
Deadlocks Deadlocks
DevOpsOperationsAudit Devops operations Audit Logs
DmsWorkers Dms Workers
Errors Errors
ExecRequests Exec Requests
QueryStoreRuntimeStatistics Query Store Runtime Statistics
QueryStoreWaitStatistics Query Store Wait Statistics
RequestSteps Request Steps
SQLInsights SQL Insights
SqlRequests Sql Requests
SQLSecurityAuditEvents SQL Security Audit Event
Timeouts Timeouts
Waits Waits

Microsoft.Storage/storageAccounts/blobServices

Cost to export: Paid as outlined in Platform Logs section of Azure Monitor Pricing page.

Category Category Display Name
StorageDelete StorageDelete
StorageRead StorageRead
StorageWrite StorageWrite

Microsoft.Storage/storageAccounts/fileServices

Cost to export: Paid as outlined in Platform Logs section of Azure Monitor Pricing page.

Category Category Display Name
StorageDelete StorageDelete
StorageRead StorageRead
StorageWrite StorageWrite

Microsoft.Storage/storageAccounts/queueServices

Cost to export: Paid as outlined in Platform Logs section of Azure Monitor Pricing page.

Category Category Display Name
StorageDelete StorageDelete
StorageRead StorageRead
StorageWrite StorageWrite

Microsoft.Storage/storageAccounts/tableServices

Cost to export: Paid as outlined in Platform Logs section of Azure Monitor Pricing page.

Category Category Display Name
StorageDelete StorageDelete
StorageRead StorageRead
StorageWrite StorageWrite

Microsoft.StreamAnalytics/streamingjobs

Cost to export: Free

Category Category Display Name
Authoring Authoring
Execution Execution

Microsoft.Synapse/workspaces

Cost to export: Free

Category Category Display Name
BuiltinSqlReqsEnded Built-in Sql Pool Requests Ended
GatewayApiRequests Synapse Gateway Api Requests
SQLSecurityAuditEvents SQL Security Audit Event
SynapseRbacOperations Synapse RBAC Operations

Microsoft.Synapse/workspaces/bigDataPools

Cost to export: Free

Category Category Display Name
BigDataPoolAppsEnded Big Data Pool Applications Ended

Microsoft.Synapse/workspaces/sqlPools

Cost to export: Free

Category Category Display Name
DmsWorkers Dms Workers
ExecRequests Exec Requests
RequestSteps Request Steps
SqlRequests Sql Requests
SQLSecurityAuditEvents Sql Security Audit Event
Waits Waits

microsoft.web/hostingenvironments

Cost to export: Free

Category Category Display Name
AppServiceEnvironmentPlatformLogs App Service Environment Platform Logs

microsoft.web/sites

Cost to export: Free

Category Category Display Name
AppServiceAppLogs App Service Application Logs
AppServiceAuditLogs Access Audit Logs
AppServiceConsoleLogs App Service Console Logs
AppServiceFileAuditLogs Site Content Change Audit Logs
AppServiceHTTPLogs HTTP logs
FunctionAppLogs Function Application Logs

microsoft.web/sites/slots

Cost to export: Free

Category Category Display Name
AppServiceAppLogs App Service Application Logs
AppServiceAuditLogs Access Audit Logs
AppServiceConsoleLogs App Service Console Logs
AppServiceFileAuditLogs Site Content Change Audit Logs
AppServiceHTTPLogs HTTP logs
FunctionAppLogs Function Application Logs

Next Steps