last sync: 2025-May-22 17:43:25 UTC

Audit enabling of diagnostic logs in Data Lake Analytics

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 98b61f2f-b6aa-47d3-81b1-eb4a0716bd75 (1.0.0) to Azure
Display name Audit enabling of diagnostic logs in Data Lake Analytics
Id 98b61f2f-b6aa-47d3-81b1-eb4a0716bd75
Version 1.0.0
Details on versioning
Category Data Lake
Microsoft Learn
Description Audit enabling of logs and retain them up to a year. This enables you to recreate activity trails for investigation purposes when a security incident occurs or your network is compromised
Mode Indexed
Type Custom Community
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days microsoft.insights diagnosticSettings properties.logs[*].retentionPolicy.days True False
Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled microsoft.insights diagnosticSettings properties.logs[*].retentionPolicy.enabled True False
Rule resource types IF (1)
Microsoft.DataLakeAnalytics/accounts
JSON
EPAC
Deploy policy 98b61f2f-b6aa-47d3-81b1-eb4a0716bd75 (1.0.0) to Azure