[Deprecated]: Configure diagnostic settings for storage accounts to Log Analytics workspace

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Insights/diagnosticSettings/logs.enabled

microsoft.insights

diagnosticSettings

properties.logs[*].enabled

True

False

Microsoft.Insights/diagnosticSettings/metrics.enabled

microsoft.insights

diagnosticSettings

properties.metrics[*].enabled

True

False

Microsoft.Insights/diagnosticSettings/workspaceId

microsoft.insights

diagnosticSettings

properties.workspaceId

True

False

Date/Time (UTC ymd) (i)

Change type

Change detail

2022-08-26 16:33:38

change

Version remains equal, new suffix: deprecated (1.3.0 > 1.3.0-deprecated)

2021-03-24 14:32:48

change

Minor (1.1.0 > 1.3.0)

2021-03-09 14:37:41

change

Minor (1.0.0 > 1.1.0)

2021-02-23 16:24:42

add

6f8f98a4-f108-47cb-8e98-91a0d85cd474

{

displayName: "[Deprecated]: Configure diagnostic settings for storage accounts to Log Analytics workspace",
policyType: "BuiltIn",
mode: "Indexed",
description: "Deprecated: This policy did not evaluate correctly and has been separated into policies for each of the nested resources. Please see new policies for storage accounts (id: /providers/Microsoft.Authorization/policyDefinitions/59759c62-9a22-4cdf-ae64-074495983fef), blob services (b4fe1a3b-0715-4c6c-a5ea-ffc33cf823cb), file (25a70cc8-2bd4-47f1-90b6-1478e4662c96), queue (7bd000e3-37c7-4928-9f31-86c4b77c5c45), and table (2fb86bf3-d221-43d1-96d1-2434af34eaa0).",
metadata: {3 items
- category: "Storage",
- version: "1.3.0-deprecated",
- deprecated: true
},
parameters: {8 items
- logAnalytics: {2 items
  - type: "String",
  - metadata: {4 items
    - displayName: "Log Analytics workspace",
    - description: "Specify the Log Analytics workspace the storage account should be connected to.",
    - strongType: "omsWorkspace",
    - assignPermissions: true
    }
  },
- servicesToDeploy: {4 items
  - type: "Array",
  - metadata: {2 items
    - displayName: "Storage services to deploy",
    - description: "List of Storage services to deploy"
    },
  - allowedValues: [5 items
    - "storageAccounts",
    - "blobServices",
    - "fileServices",
    - "tableServices",
    - "queueServices"
    ],
  - defaultValue: [5 items
    - "storageAccounts",
    - "blobServices",
    - "fileServices",
    - "tableServices",
    - "queueServices"
    ]
  },
- diagnosticsSettingNameToUse: {3 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Setting name",
    - description: "Name of the diagnostic settings."
    },
  - defaultValue: "storageAccountsDiagnosticsLogsToWorkspace"
  },
- effect: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of the policy"
    },
  - allowedValues: [2 items
    - "DeployIfNotExists",
    - "Disabled"
    ],
  - defaultValue: "DeployIfNotExists"
  },
- StorageDelete: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "StorageDelete - Enabled",
    - description: "Whether to stream StorageDelete logs to the Log Analytics workspace - True or False"
    },
  - allowedValues: [2 items
    - "True",
    - "False"
    ],
  - defaultValue: "True"
  },
- StorageWrite: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "StorageWrite - Enabled",
    - description: "Whether to stream StorageWrite logs to the Log Analytics workspace - True or False"
    },
  - allowedValues: [2 items
    - "True",
    - "False"
    ],
  - defaultValue: "True"
  },
- StorageRead: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "StorageRead - Enabled",
    - description: "Whether to stream StorageRead logs to the Log Analytics workspace - True or False"
    },
  - allowedValues: [2 items
    - "True",
    - "False"
    ],
  - defaultValue: "True"
  },
- Transaction: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Transaction - Enabled",
    - description: "Whether to stream Transaction logs to the Log Analytics workspace - True or False"
    },
  - allowedValues: [2 items
    - "True",
    - "False"
    ],
  - defaultValue: "True"
  }
},
policyRule: {2 items
- if: {2 items
  - field: "type",
  - equals: "Microsoft.Storage/storageAccounts"
  },
- then: {2 items
  - effect: "[parameters('effect')]",
  - details: {4 items
    - type: "Microsoft.Insights/diagnosticSettings",
    - roleDefinitionIds: [2 items
      - "/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa" Monitoring Contributor ,
      - "/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293" Log Analytics Contributor
      ],
    - existenceCondition: {1 item
      - allOf: [2 items
        {1 item
        anyof: [2 items
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/metrics.enabled",
        equals: "True"
        },
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/logs.enabled",
        equals: "True"
        }
        ]
        },
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/workspaceId",
        equals: "[parameters('logAnalytics')]"
        }
        ]
      },
    - deployment: {1 item
      - properties: {3 items
        mode: "incremental",
        template: {6 items
        $schema: "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
        contentVersion: "1.0.0.0",
        parameters: {9 items
        servicesToDeploy: {1 item
        type: "array"
        },
        diagnosticsSettingNameToUse: {1 item
        type: "string"
        },
        resourceName: {1 item
        type: "string"
        },
        logAnalytics: {1 item
        type: "string"
        },
        location: {1 item
        type: "string"
        },
        Transaction: {1 item
        type: "string"
        },
        StorageRead: {1 item
        type: "string"
        },
        StorageWrite: {1 item
        type: "string"
        },
        StorageDelete: {1 item
        type: "string"
        }
        },
        variables: {},
        resources: [5 items
        {7 items
        condition: 🔍"[ contains( parameters('servicesToDeploy'), 'blobServices' ) ]",
        type: "Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings",
        apiVersion: "2017-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse') ) ]",
        location: "[parameters('location')]",
        dependsOn: [],
        properties: {3 items
        workspaceId: "[parameters('logAnalytics')]",
        metrics: [1 item
        {4 items
        category: "Transaction",
        enabled: "[parameters('Transaction')]",
        retentionPolicy: {2 items
        days: 0,
        enabled: false
        },
        timeGrain: null
        }
        ],
        logs: [3 items
        {2 items
        category: "StorageRead",
        enabled: "[parameters('StorageRead')]"
        },
        {2 items
        category: "StorageWrite",
        enabled: "[parameters('StorageWrite')]"
        },
        {2 items
        category: "StorageDelete",
        enabled: "[parameters('StorageDelete')]"
        }
        ]
        }
        },
        {7 items
        condition: 🔍"[ contains( parameters('servicesToDeploy'), 'fileServices' ) ]",
        type: "Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings",
        apiVersion: "2017-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse') ) ]",
        location: "[parameters('location')]",
        dependsOn: [],
        properties: {3 items
        workspaceId: "[parameters('logAnalytics')]",
        metrics: [1 item
        {4 items
        category: "Transaction",
        enabled: "[parameters('Transaction')]",
        retentionPolicy: {2 items
        days: 0,
        enabled: false
        },
        timeGrain: null
        }
        ],
        logs: [3 items
        {2 items
        category: "StorageRead",
        enabled: "[parameters('StorageRead')]"
        },
        {2 items
        category: "StorageWrite",
        enabled: "[parameters('StorageWrite')]"
        },
        {2 items
        category: "StorageDelete",
        enabled: "[parameters('StorageDelete')]"
        }
        ]
        }
        },
        {7 items
        condition: 🔍"[ contains( parameters('servicesToDeploy'), 'tableServices' ) ]",
        type: "Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings",
        apiVersion: "2017-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse') ) ]",
        location: "[parameters('location')]",
        dependsOn: [],
        properties: {3 items
        workspaceId: "[parameters('logAnalytics')]",
        metrics: [1 item
        {4 items
        category: "Transaction",
        enabled: "[parameters('Transaction')]",
        retentionPolicy: {2 items
        days: 0,
        enabled: false
        },
        timeGrain: null
        }
        ],
        logs: [3 items
        {2 items
        category: "StorageRead",
        enabled: "[parameters('StorageRead')]"
        },
        {2 items
        category: "StorageWrite",
        enabled: "[parameters('StorageWrite')]"
        },
        {2 items
        category: "StorageDelete",
        enabled: "[parameters('StorageDelete')]"
        }
        ]
        }
        },
        {7 items
        condition: 🔍"[ contains( parameters('servicesToDeploy'), 'queueServices' ) ]",
        type: "Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings",
        apiVersion: "2017-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse') ) ]",
        location: "[parameters('location')]",
        dependsOn: [],
        properties: {3 items
        workspaceId: "[parameters('logAnalytics')]",
        metrics: [1 item
        {4 items
        category: "Transaction",
        enabled: "[parameters('Transaction')]",
        retentionPolicy: {2 items
        days: 0,
        enabled: false
        },
        timeGrain: null
        }
        ],
        logs: [3 items
        {2 items
        category: "StorageRead",
        enabled: "[parameters('StorageRead')]"
        },
        {2 items
        category: "StorageWrite",
        enabled: "[parameters('StorageWrite')]"
        },
        {2 items
        category: "StorageDelete",
        enabled: "[parameters('StorageDelete')]"
        }
        ]
        }
        },
        {7 items
        condition: 🔍"[ contains( parameters('servicesToDeploy'), 'storageAccounts' ) ]",
        type: "Microsoft.Storage/storageAccounts/providers/diagnosticSettings",
        apiVersion: "2017-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse') ) ]",
        location: "[parameters('location')]",
        dependsOn: [],
        properties: {2 items
        workspaceId: "[parameters('logAnalytics')]",
        metrics: [1 item
        {4 items
        category: "Transaction",
        enabled: "[parameters('Transaction')]",
        retentionPolicy: {2 items
        days: 0,
        enabled: false
        },
        timeGrain: null
        }
        ]
        }
        }
        ],
        outputs: {}
        },
        parameters: {9 items
        diagnosticsSettingNameToUse: {1 item
        value: "[parameters('diagnosticsSettingNameToUse')]"
        },
        logAnalytics: {1 item
        value: "[parameters('logAnalytics')]"
        },
        location: {1 item
        value: "[field('location')]"
        },
        resourceName: {1 item
        value: "[field('name')]"
        },
        Transaction: {1 item
        value: "[parameters('Transaction')]"
        },
        StorageDelete: {1 item
        value: "[parameters('StorageDelete')]"
        },
        StorageWrite: {1 item
        value: "[parameters('StorageWrite')]"
        },
        StorageRead: {1 item
        value: "[parameters('StorageRead')]"
        },
        servicesToDeploy: {1 item
        value: "[parameters('servicesToDeploy')]"
        }
        }
        }
      }
    }
  }
}

}