Azure_ActivityLogs_4

Ensure the log profile captures activity logs for all regions including global

Description

Configure the log profile to export activities from all Azure supported regions/locations including global.

Remediation

Perform the following in the Azure Console:

  1. Go to Activity log
  2. Select Export
  3. Select Subscription
  4. In Regions dropdown list, check Select all
  5. Select Save

Perform the following in Azure Command Line Interface 2.0:

az monitor log-profiles update –name default

References:

  1. https://docs.microsoft.com/en-us/cli/azure/monitor/log-profiles?view=azure-cli-latest#az-monitor-log-profiles-update

Service

Logging and Monitoring

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!