Audit Logs of Azure Monitor logs queries now available
Published date: August 05, 2020
Azure Monitor Logs allows you to collect data across their entire ecosystem including application and OS level telemetry, security logs, network logs, diagnostic logs from Azure resources, and custom logs. All this data can be queried with the powerful KQL query language to gain deep insights across patterns, correlations, and more.
The Azure Monitor Logs team is announcing a public preview for one of their most requested features, the ability to audit Azure Monitor Logs queries. When enabled through the Azure Diagnostics mechanism, you can collect telemetry about who ran a query, when the query was run, what tool was used to run the query, the query text, and performance stats around the query execution. This telemetry, as with any other Azure Diagnostics-based telemetry, can be sent to an Azure Storage Blob, Azure Event Hub, or into Azure Monitor Logs.