CODEWITHSUNDEEP
azureazure-diagnosticsazure-monitorazure-log-analytics-workspace
Usman Khawar
Usman Khawar

Reputation: 31

Difference between Activity log and Audit Log in azure?

We are devising diagnostic settings for our azure resources, I am confused between both the terms. As per Documentation:

activity log The Azure Monitor activity log is a platform log in Azure that provides insight into subscription-level events. The activity log includes information like when a resource is modified or a virtual machine is started.

Audit Logs - All resource logs that record customer interactions with data or the settings of the service.

Upvotes: 3

Views: 5697

Answers (1)

Peter Bons
Peter Bons

Reputation: 29770

The Azure Platform provides different types of logging. You have the Activity Log:

Provides insight into the operations on each Azure resource in the subscription from the outside (the management plane) in addition to updates on Service Health events. Use the Activity log to determine the what, who, and when for any write operations (PUT, POST, DELETE) taken on the resources in your subscription. There's a single activity log for each Azure subscription.

and also the Resource Log:

Provides insight into the operations on each Azure resource in the subscription from the outside (the management plane) in addition to updates on Service Health events. Use the Activity log to determine the what, who, and when for any write operations (PUT, POST, DELETE) taken on the resources in your subscription. There's a single activity log for each Azure subscription.

Also, there is the Azure AD Log

Contain the history of sign-in activity and audit trail of changes made in Azure AD for a particular tenant.

Parts of the activity log, the resource log and the azure AD log kind are audit logs. Some resources have dedicated log categories for the resource log that indicates entries that are interesting from an auditing perspective. For a complete list see the docs. For example, an Azure Data Lake Analytics resource has a specific "Audit" log category.

Summarized you can say that the Activity Log and Resource Log contain many logs and a subset of those are audit logs. They can be used to audit who did what given a specific resource.

Upvotes: 0

Related Questions