Supported logs for Microsoft.AAD/DomainServices

The following table lists the types of logs available for the Microsoft.AAD/DomainServices resource type.

Category	Category display name	Log table	Supports basic log plan	Supports ingestion-time transformation	Example queries	Costs to export
`AccountLogon`	AccountLogon	AADDomainServicesAccountLogon	No	Yes	Queries	No
`AccountManagement`	AccountManagement	AADDomainServicesAccountManagement	No	Yes	Queries	No
`DetailTracking`	DetailTracking		No	Yes		No
`DirectoryServiceAccess`	DirectoryServiceAccess	AADDomainServicesDirectoryServiceAccess	No	Yes	Queries	No
`DNSServerAuditsDynamicUpdates`	DNSServerAuditsDynamicUpdates - Preview	AADDomainServicesDNSAuditsDynamicUpdates DNS server audit events enable change tracking on the DNS server. This table contains operational audit events for dynamic updates.	Yes	No		Yes
`DNSServerAuditsGeneral`	DNSServerAuditsGeneral - Preview	AADDomainServicesDNSAuditsGeneral DNS server audit events enable change tracking on the DNS server. An audit event is logged each time server, zone, or resource record settings are changed. This includes operational events such as zone transfers, and DNSSEC zone signing and unsigning. This table captures audit events that are not from dynamic updates.	Yes	No		Yes
`LogonLogoff`	LogonLogoff	AADDomainServicesLogonLogoff	No	Yes	Queries	No
`ObjectAccess`	ObjectAccess		No	Yes		No
`PolicyChange`	PolicyChange	AADDomainServicesPolicyChange	No	Yes	Queries	No
`PrivilegeUse`	PrivilegeUse	AADDomainServicesPrivilegeUse	No	Yes	Queries	No
`SystemSecurity`	SystemSecurity		No	Yes		No

Feedback