Supported Resource log categories for Azure Monitor

Azure Monitor resource logs are logs emitted by Azure services that describe the operation of those services or resources. All resource logs available through Azure Monitor share a common top-level schema. Each service has the flexibility to emit unique properties for its own events.

Resource logs were previously known as diagnostic logs. The name was changed in October 2019 as the types of logs gathered by Azure Monitor shifted to include more than just the Azure resource.

A combination of the resource type (available in the resourceId property) and the category uniquely identifies a schema. There's a common schema for all resource logs with service-specific fields then added for different log categories. For more information, see Common and service-specific schema for Azure resource logs.

Costs

Azure Monitor Log Analytics, Azure Storage, Azure Event Hubs, and partners who integrate directly with Azure Monitor (for example, Datadog) have costs associated with ingesting data and storing data. Check the pricing pages linked in the previous sentence to understand the costs for those services. Resource logs are just one type of data that you can send to those locations.

In addition, there might be costs to export some categories of resource logs to those locations. Logs with possible export costs are listed in the next section. Select the links below to see which log categories have export costs associated with them. For more information on export pricing, see the Platform Logs section on the Azure Monitor pricing page.

Supported metrics and log categories by resource type

Following table lists metrics and log categories available for each resource type.

Resource Provider	Metrics	Log Categories
Microsoft.AAD	DomainServices	DomainServices
Microsoft.AgFoodPlatform	N/A	farmBeats
Microsoft.AnalysisServices	servers	servers
Microsoft.ApiManagement	service	service service/workspaces
Microsoft.App	containerapps jobs managedEnvironments	managedEnvironments
Microsoft.AppConfiguration	configurationStores	configurationStores
Microsoft.AppPlatform	spring	spring
Microsoft.Attestation	N/A	attestationProviders
Microsoft.Automation	automationAccounts	automationAccounts
Microsoft. AutonomousDevelopmentPlatform	N/A	accounts workspaces
microsoft.avs	privateClouds	privateClouds
Microsoft.AzureDataTransfer	N/A	connections/flows
microsoft. azureplaywrightservice	N/A	accounts
microsoft.azuresphere	catalogs	catalogs
Microsoft.Batch	batchaccounts	batchaccounts
microsoft.botservice	botservices	botservices
Microsoft.Cache	redis redisEnterprise	redis redisEnterprise/databases
Microsoft.Cdn	cdnwebapplicationfirewallpolicies profiles	cdnwebapplicationfirewallpolicies profiles profiles/endpoints
Microsoft.Chaos	N/A	experiments
Microsoft.ClassicNetwork	N/A	networksecuritygroups
Microsoft.CodeSigning	codesigningaccounts	codesigningaccounts
Microsoft.CognitiveServices	accounts	accounts
Microsoft.Communication	CommunicationServices	CommunicationServices
microsoft.community	N/A	communityTrainings
Microsoft.Compute	cloudservices cloudServices/roles virtualMachines virtualmachineScaleSets virtualMachineScaleSets/virtualMachines	virtualMachines
Microsoft.ConfidentialLedger	N/A	ManagedCCF ManagedCCFs
Microsoft.ConnectedCache	CacheNodes enterpriseMccCustomers ispCustomers	CacheNodes enterpriseMccCustomers ispCustomers
Microsoft.ConnectedVehicle	platformAccounts	platformAccounts
Microsoft.ContainerInstance	containerGroups containerScaleSets	containerGroups
Microsoft.ContainerRegistry	registries	registries
Microsoft.ContainerService	managedClusters	fleets managedClusters
Microsoft.CustomProviders	resourceproviders	resourceproviders
Microsoft.D365CustomerInsights	N/A	instances
Microsoft.Dashboard	grafana	grafana
Microsoft.Databricks	N/A	workspaces
Microsoft.DataFactory	datafactories factories	factories
Microsoft.DataLakeAnalytics	accounts	accounts
Microsoft.DataLakeStore	accounts	accounts
Microsoft.DataProtection	BackupVaults	BackupVaults
Microsoft.DataShare	accounts	accounts
Microsoft.DBforMariaDB	servers	servers
Microsoft.DBforMySQL	flexibleServers servers	flexibleServers servers
Microsoft.DBforPostgreSQL	flexibleServers servers serversv2	flexibleServers servers serversv2
Microsoft.DBForPostgreSQL	serverGroupsv2	serverGroupsv2
Microsoft. DesktopVirtualization	N/A	appAttachPackages applicationgroups hostpools scalingplans workspaces
Microsoft.DevCenter	devcenters	devcenters
Microsoft.Devices	IotHubs provisioningServices	IotHubs provisioningServices
Microsoft.DevOpsInfrastructure	pools	pools
Microsoft.DigitalTwins	digitalTwinsInstances	digitalTwinsInstances
Microsoft.DocumentDB	cassandraClusters DatabaseAccounts garnetClusters mongoClusters	cassandraClusters DatabaseAccounts mongoClusters
Microsoft.EventGrid	domains eventSubscriptions extensionTopics namespaces partnerNamespaces partnerTopics systemTopics topics	domains namespaces partnerNamespaces partnerTopics systemTopics topics
Microsoft.EventHub	clusters Namespaces	Namespaces
Microsoft. HardwareSecurityModules	N/A	cloudHsmClusters
Microsoft.HealthcareApis	services workspaces/dicomservices workspaces/fhirservices workspaces/iotconnectors	services workspaces/dicomservices workspaces/fhirservices workspaces/iotconnectors
Microsoft.HealthDataAIServices	N/A	deidServices
microsoft.insights	autoscalesettings components	autoscalesettings components
Microsoft.Insights	datacollectionrules	datacollectionrules
microsoft.keyvault	managedhsms	managedhsms
Microsoft.KeyVault	vaults	vaults
microsoft.kubernetes	connectedClusters	connectedClusters
Microsoft.Kusto	clusters	clusters
microsoft.loadtestservice	N/A	loadtests
Microsoft.Logic	IntegrationServiceEnvironments Workflows	IntegrationAccounts Workflows
Microsoft. MachineLearningServices	workspaces workspaces/onlineEndpoints workspaces/onlineEndpoints/deployments	registries workspaces workspaces/onlineEndpoints
Microsoft.ManagedNetworkFabric	internetGateways l3IsolationDomains networkDevices	networkDevices
Microsoft.Media	mediaservices mediaservices/liveEvents mediaservices/streamingEndpoints videoanalyzers	mediaservices mediaservices/liveEvents mediaservices/streamingEndpoints videoanalyzers
Microsoft.Monitor	accounts	accounts
Microsoft.Network	applicationgateways azureFirewalls connections dnsForwardingRulesets dnsResolverDomainLists dnsResolverPolicies dnsResolvers dnszones expressRouteCircuits expressRouteCircuits/peerings expressRoutePorts frontdoors loadBalancers natgateways networkinterfaces networkManagers/ipamPools networkWatchers/connectionMonitors privateDnsZones privateEndpoints privateLinkServices publicIPAddresses publicIPPrefixes trafficManagerProfiles virtualHubs virtualNetworks virtualRouters	applicationgateways azureFirewalls dnsResolverPolicies expressRouteCircuits frontdoors loadBalancers networkManagers networkManagers/ipamPools networksecuritygroups networkSecurityPerimeters networkSecurityPerimeters/profiles publicIPAddresses publicIPPrefixes trafficManagerProfiles virtualNetworks
microsoft.network	bastionHosts expressroutegateways p2svpngateways virtualnetworkgateways vpngateways	bastionHosts p2svpngateways virtualnetworkgateways vpngateways
Microsoft.NetworkAnalytics	N/A	DataProducts
Microsoft.NetworkCloud	bareMetalMachines clusterManagers clusters storageAppliances	bareMetalMachines clusterManagers clusters kubernetesClusters storageAppliances
Microsoft.NetworkFunction	azureTrafficCollectors	azureTrafficCollectors
Microsoft.NotificationHubs	namespaces/notificationHubs	namespaces namespaces/notificationHubs
MICROSOFT.OPENENERGYPLATFORM	N/A	ENERGYSERVICES
Microsoft. OpenLogisticsPlatform	N/A	Workspaces
Microsoft.OperationalInsights	workspaces	workspaces
Microsoft.PlayFab	titles	titles
Microsoft.PowerBI	N/A	tenants tenants/workspaces
Microsoft.PowerBIDedicated	capacities	capacities
Microsoft.ProviderHub	N/A	providerMonitorSettings
microsoft.purview	accounts	accounts
Microsoft.RecoveryServices	Vaults	Vaults
Microsoft.Relay	namespaces	namespaces
Microsoft.Search	searchServices	searchServices
Microsoft.Security	N/A	antiMalwareSettings defenderForStorageSettings
microsoft.securityinsights	N/A	settings
Microsoft.ServiceBus	Namespaces	Namespaces
Microsoft.ServiceNetworking	trafficControllers	trafficControllers
Microsoft.SignalRService	SignalR SignalR/replicas WebPubSub WebPubSub/replicas	SignalR SignalR/replicas WebPubSub WebPubSub/replicas
microsoft.singularity	accounts	accounts
Microsoft.Sql	managedInstances servers/databases servers/elasticpools servers/jobAgents	managedInstances managedInstances/databases servers/databases
Microsoft.StandbyPool	N/A	standbycontainergrouppools standbyvirtualmachinepools
Microsoft.Storage	storageAccounts storageAccounts/blobServices storageAccounts/fileServices storageAccounts/objectReplicationPolicies storageAccounts/queueServices storageAccounts/storageTasks storageAccounts/tableServices storageTasks	storageAccounts/blobServices storageAccounts/fileServices storageAccounts/queueServices storageAccounts/tableServices
Microsoft.StorageCache	amlFilesystems caches	amlFilesystems caches
Microsoft.StorageMover	storageMovers	storageMovers
Microsoft.StreamAnalytics	streamingjobs	streamingjobs
Microsoft.Synapse	workspaces workspaces/bigDataPools workspaces/kustoPools workspaces/scopePools workspaces/sqlPools	workspaces workspaces/bigDataPools workspaces/kustoPools workspaces/scopePools workspaces/sqlPools
Microsoft. ToolchainOrchestrator	N/A	diagnostics
microsoft.videoindexer	N/A	accounts
Microsoft.Web	containerapps hostingEnvironments hostingenvironments/multirolepools hostingenvironments/workerpools serverfarms sites sites/slots staticsites	hostingEnvironments sites sites/slots staticsites
microsoft.workloads	N/A	sapvirtualinstances
NGINX.NGINXPLUS	NGINX.NGINXPLUS/nginxDeployments	NGINX.NGINXPLUS/nginxDeployments
Microsoft.azurestackhci	clusters	N/A
microsoft.bing	accounts	N/A
Microsoft.BotService	botServices/channels botServices/connections checknameavailability hostsettings listauthserviceproviders listqnamakerendpointkeys	N/A
Microsoft.ClassicCompute	domainNames/slots/roles virtualMachines	N/A
Microsoft.ClassicStorage	storageAccounts storageAccounts/blobServices storageAccounts/fileServices storageAccounts/queueServices storageAccounts/tableServices	N/A
Microsoft.ClusterStor	nodes	N/A
microsoft.compute	disks	N/A
Microsoft.DataBoxEdge	dataBoxEdgeDevices	N/A
microsoft.edgezones	edgezones	N/A
Microsoft.ElasticSan	elasticSans	N/A
Microsoft.HDInsight	clusters	N/A
Microsoft.HealthModel	healthmodels	N/A
Microsoft. HybridContainerService	provisionedClusters	N/A
microsoft.hybridnetwork	networkfunctions virtualnetworkfunctions	N/A
Microsoft.IoTCentral	IoTApps	N/A
microsoft. kubernetesconfiguration	extensions	N/A
Microsoft.Maps	accounts	N/A
Microsoft.MessagingConnectors	connectors	N/A
Microsoft.MixedReality	remoteRenderingAccounts spatialAnchorsAccounts	N/A
Microsoft.MobileNetwork	mobilenetworks/sites packetcorecontrolplanes packetcorecontrolplanes/packetcoredataplanes radioAccessNetworks	N/A
Microsoft.Orbital	contactProfiles l2Connections spacecrafts terminals	N/A
Microsoft.Peering	peerings peeringServices	N/A
microsoft.resources	subscriptions	N/A
microsoft.securitydetonation	chambers	N/A
Microsoft.SecurityDetonation	SecurityDetonationChambers	N/A
Microsoft.StorageActions	storageTasks	N/A
Microsoft.StorageSync	storageSyncServices	N/A
Microsoft.StorageTasks	storageTasks	N/A
Microsoft.VoiceServices	CommunicationsGateways	N/A
Oracle.Database	Oracle.Database/autonomousDatabases Oracle.Database/cloudVmClusters	N/A
Private.MessagingConnectors	Private.MessagingConnectors/connectors	N/A
Wandisco.Fusion	Wandisco.Fusion/migrators Wandisco.Fusion/migrators/dataTransferAgents Wandisco.Fusion/migrators/liveDataMigrations Wandisco.Fusion/migrators/metadataMigrations	N/A

Next Steps

• Learn more about resource logs
• Stream resource logs to Event Hubs
• Change resource log diagnostic settings using the Azure Monitor REST API
• Analyze logs from Azure storage with Log Analytics
• Optimize log queries in Azure Monitor
• Aggregate data in a Log Analytics workspace by using summary rules (Preview)