Is there a scan log?

Magnus Nilsson 21 Reputation points
2021-11-24T09:32:35.933+00:00

I haven't been able to find a scan log anywhere. I've connected the Purview instance to a Log Analytics Workspace but there are no logs showing what decisions are made during the scan.

I bet there is a log somewhere, either I missed it or it's not been made available to us.

Microsoft Security | Microsoft Purview
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. PRADEEPCHEEKATLA 91,656 Reputation points Moderator
    2021-11-25T07:37:48.163+00:00

    Hello @Magnus Nilsson ,

    Thanks for the question and using MS Q&A platform.

    Yes, ScanStatusLogEvent will be available in the Log Analytics workspace.

    Here are the steps to see the ScanStatusLogEvent in the Log Analytics Workspace:

    Step1: Configure the Diagnostic settings.

    Diagnostic settings are used to configure streaming export of platform logs and metrics for a resource to the destination of your choice. You may create up to five different diagnostic settings to send different logs and metrics to independent destinations.

    152535-purview-la.gif

    Step2: Once the diagnostic logs are configured, the events flow to the Log Analytics Workspace.

    Note: Allow up to 15 minutes to start receiving logs in the newly created Log Analytics Workspace.
    152497-image.png

    152528-purview-la-scanstatuslogs.gif

    For more details, refer to Azure Purview metrics in Azure Monitor.

    Hope this will help. Please let us know if any further queries.

    ------------------------------

    • Please don't forget to click on 130616-image.png or upvote 130671-image.png button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification
    • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.