Edit

Monitoring Key Vault data reference

  • Article

See Monitoring Key Vault for details on collecting and analyzing monitoring data for Key Vault.

Metrics

This section lists all the automatically collected platform metrics collected for Key Vault.

Metric Type Resource Provider / Type Namespace
and link to individual metrics
Key Vault Microsoft.KeyVault/vaults
Managed HSM Microsoft.KeyVault/managedhsms

Key Vault metrics

Resource Provider and Type: Microsoft.KeyVault/vaults

Name Metric Unit Type Description
Overall Vault Availability Availability Percent Average Vault requests availability
Overall Vault Saturation SaturationShoebox Percent Average Vault capacity used
Total Service Api Hits ServiceApiHit Count Count Number of total service API hits
Overall Service Api Latency ServiceApiLatency MilliSeconds Average Overall latency of service API requests
Total Service Api Results ServiceApiResult Count Count Number of total service API results

For more information, see a list of all platform metrics supported in Azure Monitor.

Metric dimensions

For more information on what metric dimensions are, see Multi-dimensional metrics.

Key Vault has the following dimensions associated with its metrics:

  • ActivityType
  • ActivityName
  • TransactionType
  • StatusCode
  • StatusCodeClass

Resource logs

This section lists the types of resource logs you can collect for Key Vault.

For reference, see a list of Microsoft.KeyVault/vaults. For full details, see Azure Key Vault logging.

Resource Log Type Resource Provider / Type Namespace
and link to individual metrics
Key Vault Microsoft.KeyVault/vaults
Managed HSM Microsoft.KeyVault/managedhsms

Azure Monitor Logs tables

This section refers to all of the Azure Monitor Logs Kusto tables relevant to Key Vault and available for query by Log Analytics.

Resource Type Notes
Key Vault

For a reference of all Azure Monitor Logs / Log Analytics tables, see the Azure Monitor Log Table Reference.

Diagnostics tables

Key Vault uses the Azure Diagnostics, Azure Activity table, and Azure Metrics tables to store resource log information. The following columns are relevant.

Azure Diagnostics

Property Description
_ResourceId A unique identifier for the resource that the record is associated with
CallerIPAddress IP address of the user who has performed the operation UPN claim or SPN claim based on availability.
DurationMs The duration of the operation in milliseconds.
httpStatusCode_d HTTP status code returned by the request (for example, 200)
Level Level of the event. One of the following values: Critical, Error, Warning, Informational and Verbose.
OperationName Name of the operation, for example, Alert
properties_s
Region_s
requestUri_s The URI of the client request.
Resource
ResourceProvider Resource provider of the Azure resource reporting the metric.
ResultSignature
TimeGenerated Date and time the record was created

See also