how to find creator of virtual machine

Question

I have tried to see who created specific virtual machines. I could not see it in activity log and I could not see either where to change the saving period to more than 90 days. Please advise.

Runnin the powershell script won´t work I guess inf not set to longer than 90 days? I need however this confirmed and also the first above wehre I can see exatly the saveperiod.

I looked at below but need advise on the above.

https://techcommunity.microsoft.com/t5/azure-compute/how-to-know-who-have-created-specific-vm-other-resource-in-azure/m-p/45605?lightbox-message-images-45637=10787iCED3859992CB46CD

https://stackoverflow.com/questions/55596588/azure-powershell-find-the-creator-of-a-virtual-machine#:~:text=You%20can%20use%20the%20Get-AzLog%20command%20to%20look,or%20text%20message%20everytime%20a%20VM%20is%20created.

Answer 1

Hi @Fredrik Johansson ,

as you already stated: The Activity Log details are deleted after 90 days. There is no option to extend/change the retention period.

The only option is to copy the Action Log details for long term archiving for instance in a Storage Account.

If the VM is created before the last 90 days there is no chance to get the detail of the creator of the VM. Sorry.

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten