Showing posts from September, 2018

Monitoring Azure Activity Log using OMS

Although Azure OMS is a great tool to collect and analyse logs and counters from various kinds of systems, it's functionality is not limited to these. Recently, the ability to log the activity of your Azure subscription, such as resource creation and removal and delegation actions was added to OMS.

To get such information logged in OMS, you have to connect your subscription to the workspace. Navigate the the workspace blade and select "Azure Activity Log" under "Workspace Data Sources".

The subscription is connected, so let's take the creation of a virtual machine for example.

The below query for activity log regarding the resource group "BlogVirtualMachines" brings back a lot of results related to the deployment, the storage account, the networking components, the virtual machine and many others within that resource group.

Let's expand a few to see the information inside. The "Create Deployment" record shows that a deployment has st…