azure-monitor-activity-log-event
Activity Log records contain caller claims, resource identifiers, operation details, and user-controlled status properties.
Where it sits
| location | Azure Monitor Activity Log event.{caller,claims,authorization,properties,httpRequest,resourceId,status} |
|---|
| location kind | log_field |
|---|
| data kinds | credential oauth_token sensitive_data pii |
|---|
| emits edge | CanReadData |
|---|
| service | Azure Monitor / Activity Log (azure:monitor) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | Activity Logs - List |
|---|
| response path | value[] |
|---|
| encoding | json |
|---|
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
|---|
Required permissions
Microsoft.Insights/eventtypes/values/read
References