Monitoring related azcli commands:¶
List categories in the azure monitor:¶
$ az monitor activity-log list-categories --query '[].value' -o tsv
Administrative
Security
ServiceHealth
Alert
Recommendation
Policy
Autoscale
ResourceHealth
Querying activity log:¶
az monitor activity-log list --query '[].{
Event:eventName.value,
ID:correlationId,
Status:status.value,
Channel:channels,
Category:category.value,
Operation:operationName.localizedValue
}' -o table
Event ID Status Channel Category Operation
------------ ------------------------------------ --------- --------- -------------- -------------------------------------------------------------
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Administrative Create/Update Storage Account
BeginRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Started Operation Policy 'auditIfNotExists' Policy action.
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'audit' Policy action.
BeginRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Started Operation Administrative Create/Update Storage Account
EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Administrative Create/Update Storage Account
BeginRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Started Operation Policy 'auditIfNotExists' Policy action.
EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Policy 'audit' Policy action.
BeginRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Started Operation Administrative Create/Update Storage Account
EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Succeeded Operation Administrative Create/Update Storage Account
EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Accepted Operation Administrative Create/Update Storage Account
BeginRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Started Operation Policy 'auditIfNotExists' Policy action.
EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Succeeded Operation Policy 'audit' Policy action.
[[snip]]
Activity log filtered on end requests only:¶
az monitor activity-log list --query "[?eventName.value == 'EndRequest'].{
Event:eventName.value,
ID:correlationId,
Status:status.value,
Channel:channels,
Category:category.value,
Operation:operationName.localizedValue
}" -o table
Event ID Status Channel Category Operation
---------- ------------------------------------ --------- --------- -------------- -------------------------------------------------------------
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'auditIfNotExists' Policy action.
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'audit' Policy action.
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Administrative Create/Update Storage Account
EndRequest a8318ee9-9137-4a82-bc4e-8c2b8d055bc4 Succeeded Operation Administrative Create/Update Storage Account
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Administrative Create/Update Storage Account
EndRequest a47e7542-19d9-44f3-b3ce-57ee77348d7b Succeeded Operation Policy 'audit' Policy action.
EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Administrative Create/Update Storage Account
EndRequest 9861c089-864f-40c3-ba51-3dfb1415a7cf Succeeded Operation Policy 'audit' Policy action.