Monitoring related azcli commands:¶

List categories in the azure monitor:¶

$ az monitor activity-log list-categories --query '[].value' -o tsv
Administrative
Security
ServiceHealth
Alert
Recommendation
Policy
Autoscale
ResourceHealth

Querying activity log:¶

az monitor activity-log list --query '[].{
  Event:eventName.value,
  ID:correlationId,
  Status:status.value,
  Channel:channels,
  Category:category.value,
  Operation:operationName.localizedValue
}' -o table
Event         ID                                    Status     Channel    Category        Operation
------------  ------------------------------------  ---------  ---------  --------------  -------------------------------------------------------------
EndRequest    a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Administrative  Create/Update Storage Account
BeginRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Started    Operation  Policy          'auditIfNotExists' Policy action.
EndRequest    a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Policy          'audit' Policy action.
BeginRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Started    Operation  Administrative  Create/Update Storage Account
EndRequest    9861c089-864f-40c3-ba51-3dfb1415a7cf  Succeeded  Operation  Administrative  Create/Update Storage Account
BeginRequest  9861c089-864f-40c3-ba51-3dfb1415a7cf  Started    Operation  Policy          'auditIfNotExists' Policy action.
EndRequest    9861c089-864f-40c3-ba51-3dfb1415a7cf  Succeeded  Operation  Policy          'audit' Policy action.
BeginRequest  9861c089-864f-40c3-ba51-3dfb1415a7cf  Started    Operation  Administrative  Create/Update Storage Account
EndRequest    a8318ee9-9137-4a82-bc4e-8c2b8d055bc4  Succeeded  Operation  Administrative  Create/Update Storage Account
EndRequest    a8318ee9-9137-4a82-bc4e-8c2b8d055bc4  Accepted   Operation  Administrative  Create/Update Storage Account
BeginRequest  a8318ee9-9137-4a82-bc4e-8c2b8d055bc4  Started    Operation  Policy          'auditIfNotExists' Policy action.
EndRequest    a8318ee9-9137-4a82-bc4e-8c2b8d055bc4  Succeeded  Operation  Policy          'audit' Policy action.
[[snip]]

Activity log filtered on end requests only:¶

az monitor activity-log list --query "[?eventName.value == 'EndRequest'].{
  Event:eventName.value,
  ID:correlationId,
  Status:status.value,
  Channel:channels,
  Category:category.value,
  Operation:operationName.localizedValue
}" -o table
Event       ID                                    Status     Channel    Category        Operation
----------  ------------------------------------  ---------  ---------  --------------  -------------------------------------------------------------
EndRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Policy          'auditIfNotExists' Policy action.
EndRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Policy          'audit' Policy action.
EndRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Administrative  Create/Update Storage Account
EndRequest  a8318ee9-9137-4a82-bc4e-8c2b8d055bc4  Succeeded  Operation  Administrative  Create/Update Storage Account
EndRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Administrative  Create/Update Storage Account
EndRequest  a47e7542-19d9-44f3-b3ce-57ee77348d7b  Succeeded  Operation  Policy          'audit' Policy action.
EndRequest  9861c089-864f-40c3-ba51-3dfb1415a7cf  Succeeded  Operation  Administrative  Create/Update Storage Account
EndRequest  9861c089-864f-40c3-ba51-3dfb1415a7cf  Succeeded  Operation  Policy          'audit' Policy action.

OCI

Navigation

  • Cloud related lessons learned
    • AWS:
    • Azure:
  • (Reasonably) current lessons learned:
  • Legacy/archived lessons learned:

Related Topics

  • Documentation overview
    • Cloud related lessons learned
      • Azure lessons learned:
        • Previous: URLs for learning more keyvaut:
        • Next: Resource specific azcli commands:

Quick search

©2023, dkoleary. | Powered by Sphinx 7.2.6 & Alabaster 0.7.16 | Page source