How to get events from different resource groups?

Question

In my company, we have alot of resource groups belongs to different owners, i want to implement a solution, where i can listen to these resource groups events, like virtual network created, public ips created, etc. From what i searched, it seems that Azure Event Grid able to help, problem is, how can i get all the events pushed by all these resource group?

Answer 1

Hi,

You can do this via Diagnostic settings on Resource Groups, and Subscriptions which route to an event hub, storage account, or log analytics workspace. Individually this can be done by going to Activity Log > Export Activity Logs.

However, as this seems to be an on going and highly active issue for you it is possible to set the diagnostic settings up automatically via Azure Policy. More info here: https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/diagnostic-settings-policy

Hope this helps.

Answer 2

Hi
Q J Thanks for reaching out. As Thomas mentioned you can also use Azure Diagnostic Settings to collect events from multiple resource groups.

Azure Event Grid is also good solution for listening to events from multiple resource groups. You can use Event Grid to subscribe to events from multiple resource groups and receive notifications when events occur at your endpoint.

In order to get all the events pushed by all these resource group you need to create an Event Grid subscription for each resource group that you want to monitor.

Reference: https://learn.microsoft.com/en-us/azure/event-grid/event-schema-resource-groups?tabs=event-grid-event-schema

Let me know if you have any further questions.

Please "Upvote" and "Accept as Answer" if the answer is helpful so that it can help others in the community.

Answer 3

You can find answer to similar question here.

Thanks

Roman