How could I know who created the resource over 90 days in azure cloud

Question

We have some resources created over 90 days, there is no available activity logs could get the deployment log to know who created this resource, and there is no tag, how could we know the creator information?

Answer 1

Hello Xiaoguang Li,

Thanks for your question

Activity log events are retained in Azure for 90 days and then deleted.. To get the creator information without available activity logs you have limited options.

You can try by using RBAC to elimate those who have access and whittle down a bit further. Cost management can further show the date and service where the resource was provisioned.

I will recommend creating a support request, however rentention periods are still the same as 90 days. https://azure.microsoft.com/en-us/support/create-ticket

For future resource management, consider implementing:

• Consistent tagging policies
• Longer retention periods for activity logs
• Regular audits of resources

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola

Answer 2

@Xiaoguang Li Greetings from Microsoft!

If it is over 90 days then Azure wont store. However, if you have logging enabled in their Log Analytics workspace then you can query it there. 

Similar question answered earlier https://learn.microsoft.com/en-us/answers/questions/971455/how-can-i-find-out-who-created-a-particular-resour

Hope this helps!

---

If the response helped, do "Accept Answer" and up-vote it