I am trying to monitoring Azure activity log regarding the following actions
- Change of logging level, such as disabiling logging
- Change of authentication setting, such as user creation, user loggin, high privilege granted
- Change of network setting, such as change of the routing table, change of network access control
- Change of service, such as provision a new service,
I know the common filed use to identify these event is operationName field, but what is the actual value of these events are? just like each windows event have a event name, and I want to have a list of all the event name
for example I know if operationName="Add member to role" that means an role assign to a user, so I can set the alert condition to operationName="Add member to role" to trigger,
Does anyone know where I can find this kind of informaiton?
Thank you for the assistance