Supported logs for Microsoft.AAD/DomainServices
The following table lists the types of logs available for the Microsoft.AAD/DomainServices resource type.
For a list of supported metrics, see Supported metrics - Microsoft.AAD/DomainServices
| Category | Category display name | Log table | Supports basic log plan | Supports ingestion-time transformation | Example queries | Costs to export |
|---|---|---|---|---|---|---|
AccountLogon |
AccountLogon | AADDomainServicesAccountLogon | No | Yes | Queries | No |
AccountManagement |
AccountManagement | AADDomainServicesAccountManagement | No | Yes | Queries | No |
DetailTracking |
DetailTracking | No | No | No | ||
DirectoryServiceAccess |
DirectoryServiceAccess | AADDomainServicesDirectoryServiceAccess | No | Yes | Queries | No |
DNSServerAuditsDynamicUpdates |
DNSServerAuditsDynamicUpdates - Preview | AADDomainServicesDNSAuditsDynamicUpdates DNS server audit events enable change tracking on the DNS server. This table contains operational audit events for dynamic updates. |
Yes | No | Yes | |
DNSServerAuditsGeneral |
DNSServerAuditsGeneral - Preview | AADDomainServicesDNSAuditsGeneral DNS server audit events enable change tracking on the DNS server. An audit event is logged each time server, zone, or resource record settings are changed. This includes operational events such as zone transfers, and DNSSEC zone signing and unsigning. This table captures audit events that are not from dynamic updates. |
Yes | No | Yes | |
LogonLogoff |
LogonLogoff | AADDomainServicesLogonLogoff | No | Yes | Queries | No |
ObjectAccess |
ObjectAccess | No | No | No | ||
PolicyChange |
PolicyChange | AADDomainServicesPolicyChange | No | Yes | Queries | No |
PrivilegeUse |
PrivilegeUse | AADDomainServicesPrivilegeUse | No | Yes | Queries | No |
SystemSecurity |
SystemSecurity | No | No | No |