AzPolicyAdvertizer

last sync: 2025-Aug-20 17:22:59 UTC

Deploy Diagnostic Settings for Azure Storage to Log Analytics workspace

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy d579ce61-2a85-4f40-8843-721d8daff468 (1.0.0) to Azure
Display name Deploy Diagnostic Settings for Azure Storage to Log Analytics workspace
Id d579ce61-2a85-4f40-8843-721d8daff468
Version 1.0.0
Details on versioning
Category Monitoring
Microsoft Learn
Description Deploys the diagnostic settings for Azure Storage to stream to a regional Log Analytics workspace when any Azure Storage which is missing this diagnostic settings is created or updated.
Mode Indexed
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Monitoring Contributor 749f88d5-cbae-40b8-bcfc-e573ddc772fa
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Rule aliases THEN-ExistenceCondition (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled microsoft.insights diagnosticSettings properties.logs[*].enabled True False
Microsoft.Insights/diagnosticSettings/metrics.enabled microsoft.insights diagnosticSettings properties.metrics[*].enabled True False
Rule resource types IF (1)
Microsoft.Storage/storageAccounts
JSON
EPAC
Deploy policy d579ce61-2a85-4f40-8843-721d8daff468 (1.0.0) to Azure