How to get a list of actual operation name of activity log

Linsong Guo 0 Reputation points
2024-02-27T08:25:03.68+00:00

I am trying to monitoring Azure activity log regarding the following actions

  • Change of logging level, such as disabiling logging
  • Change of authentication setting, such as user creation, user loggin, high privilege granted
  • Change of network setting, such as change of the routing table, change of network access control
  • Change of service, such as provision a new service,

I know the common filed use to identify these event is operationName field, but what is the actual value of these events are? just like each windows event have a event name, and I want to have a list of all the event name

for example I know if operationName="Add member to role" that means an role assign to a user, so I can set the alert condition to operationName="Add member to role" to trigger,

Does anyone know where I can find this kind of informaiton?

Thank you for the assistance

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,190 questions
Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,084 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Clive Watson 6,351 Reputation points MVP
    2024-02-27T11:50:29.85+00:00

    This column has been replaced, please see https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log?tabs=powershell#data-structure-changes

    I dont think there is a list of all values, you'll probably have to look at your own data and summarize them.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.