Edit

Monitor changes to resources and resource groups with Azure Monitor activity log insights

  • Article
  • 2 minutes to read

Activity log insights provide you with a set of dashboards that monitor the changes to resources and resource groups in a subscription. The dashboards also present data about which users or services performed activities in the subscription and the activities' status. This article explains how to onboard and view activity log insights in the Azure portal.

Before you use activity log insights, you must enable sending logs to your Log Analytics workspace.

How do activity log insights work?

Azure Monitor stores all activity logs you send to a Log Analytics workspace in a table called AzureActivity.

Activity log insights are a curated Log Analytics workbook with dashboards that visualize the data in the AzureActivity table. For example, data might include which administrators deleted, updated, or created resources and whether the activities failed or succeeded.

Screenshot that shows activity log insights dashboards.

View resource group or subscription-level activity log insights

To view activity log insights at the resource group or subscription level:

  1. In the Azure portal, select Monitor > Workbooks.

  2. In the Insights section, select Activity Logs Insights.

    Screenshot that shows how to locate and open the Activity Logs Insights workbook on a scale level.

  3. At the top of the Activity Logs Insights page, select:

    • One or more subscriptions from the Subscriptions dropdown.
    • Resources and resource groups from the CurrentResource dropdown.
    • A time range for which to view data from the TimeRange dropdown.

View resource-level activity log insights

Note

Activity log insights does not currently support Application Insights resources.

To view activity log insights at the resource level:

  1. In the Azure portal, go to your resource and select Workbooks.

  2. In the Activity Logs Insights section, select Activity Logs Insights.

    Screenshot that shows how to locate and open the Activity Logs Insights workbook on a resource level.

  3. At the top of the Activity Logs Insights page, select a time range for which to view data from the TimeRange dropdown:

    • Azure Activity Log Entries shows the count of activity log records in each activity log category.

      Screenshot that shows Azure activity logs by category value.

    • Activity Logs by Status shows the count of activity log records in each status.

      Screenshot that shows Azure activity logs by status.

    • At the subscription and resource group level, Activity Logs by Resource and Activity Logs by Resource Provider show the count of activity log records for each resource and resource provider.

      Screenshot that shows Azure activity logs by resource.

Next steps

Learn more about: