This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
We have 2 Azure SQL Managed Instances that we have configured the Diagnostic Settings to write allLogs and Audit information into an Event Hub, using an Event Hub policy name (SendPermissions). However, there are no entries from the SQL Error Log that i can see when viewing it via SSMS.
We are only seeing the Resource Usage Statistics in the Event Hub. Why are the other two categories (Devops operations Audit logs, SQL Security Audit Event) not appearing?
An Azure relational database service.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 4%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPC%3C/text%3E%3C/svg%3E)
It looks like you've set up diagnostic settings for your Azure SQL Managed Instances, but you're not seeing the expected logs in your Event Hub. Here are a few steps to troubleshoot and resolve this issue:
Below are the steps to troubleshoot and resolve the issue
Verify Diagnostic Settings Configuration:
Ensure that the diagnostic settings are correctly configured to send all logs, including DevOps operations audit logs and SQL security audit events, to the Event Hub. Double-check the categories selected in the diagnostic settings.
Check Event Hub Permissions:
Confirm that the Event Hub policy (SendPermissions) has the necessary permissions to receive logs. The policy should have Send permissions enabled.
Review Diagnostic Logs:
Sometimes, high activity or network load can cause some logs to not be recorded1. Ensure that your diagnostic settings are optimized for availability and performance.
Enable Additional Logs:
Make sure that the specific logs you want to capture (DevOps operations audit logs and SQL security audit events) are enabled in the diagnostic settings. You can do this via the Azure portal, PowerShell, or Azure CLI.
There might be known issues or limitations with the diagnostic settings.
Refer to this Document: https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/auditing-configure?view=azuresql for any updates or known issues
I hope this information helps. Please do let us know if you have any further queries.
Thanks for the reply. Setting up SQL Auditing was what we were missing.
I had no idea that is required within an Azure SQL Managed Instance for security & Devops items to appear in the logs. I'm still not seeing the errors the error's i see in the error log, so we will look for another method to get those. You can close this