Monitoring related azcli commands: ================================== List categories in the azure monitor: ------------------------------------- :: $ az monitor activity-log list-categories --query '[].value' -o tsv Administrative Security ServiceHealth Alert Recommendation Policy Autoscale ResourceHealth Querying activity log: ---------------------- :: az monitor activity-log list --query '[].{ Event:eventName.value, ID:correlationId, Status:status.value, Channel:channels, Category:category.value, Operation:operationName.localizedValue }' -o table Event ID Status Channel Category Operation ------------ ------------------------------------ --------- --------- -------------- ------------------------------------------------------------- EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Administrative Create/Update Storage Account BeginRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Started Operation Policy 'auditIfNotExists' Policy action. EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'audit' Policy action. BeginRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Started Operation Administrative Create/Update Storage Account EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Administrative Create/Update Storage Account BeginRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Started Operation Policy 'auditIfNotExists' Policy action. EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Policy 'audit' Policy action. BeginRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Started Operation Administrative Create/Update Storage Account EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Succeeded Operation Administrative Create/Update Storage Account EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Accepted Operation Administrative Create/Update Storage Account BeginRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Started Operation Policy 'auditIfNotExists' Policy action. EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Succeeded Operation Policy 'audit' Policy action. [[snip]] Activity log filtered on end requests only: ------------------------------------------- :: az monitor activity-log list --query "[?eventName.value == 'EndRequest'].{ Event:eventName.value, ID:correlationId, Status:status.value, Channel:channels, Category:category.value, Operation:operationName.localizedValue }" -o table Event ID Status Channel Category Operation ---------- ------------------------------------ --------- --------- -------------- ------------------------------------------------------------- EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'auditIfNotExists' Policy action. EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'audit' Policy action. EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Administrative Create/Update Storage Account EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Succeeded Operation Administrative Create/Update Storage Account EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Administrative Create/Update Storage Account EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'audit' Policy action. EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Administrative Create/Update Storage Account EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Policy 'audit' Policy action.