Configuration sending a resource's metrics and logs to a storage account, Event Hubs, Log Analytics or a partner solution; a resource can have five at most.
Read more: Microsoft Learn
In the Ultra Transcenders books
AZ-305AZ-104AZ-700SC-500AI-300DP-750SC-200SC-300MD-102DP-800ALZ
Each book explains Diagnostic setting in context, with comparison tables and the common traps.
Terms in this definition
- Storage account
The top-level resource in Azure Storage, giving a unique namespace for table, queue, file and blob data. Location, performance and kind are set when it is created and cannot change.
- Azure Event Hubs
Azure service for ingesting telemetry at high volume over HTTPS or AMQP; diagnostic settings can send data to it.
- Dedicated cluster
To encrypt Azure Monitor Logs with your own keys, the Log Analytics workspace must be linked to this cluster tier. Setting a CMK on a storage account gives Log Analytics no such protection.
Related terms
- AllMetrics
Category in a diagnostic setting that sends out a resource's platform metrics. If only log categories are chosen, metrics are not exported.
- AzureMetrics
When a diagnostic setting exports platform metrics with AllMetrics ticked, they arrive in this Log Analytics table.
- LASummaryLogs
A Log Analytics table that, after you turn on the SummaryLogs diagnostic setting, captures each summary rule execution along with how long it took and whether it failed.
- Microsoft Graph activity logs
With Entra ID P1 or P2, a diagnostic setting can stream a record of each HTTP request your tenant makes to the Microsoft Graph API into the MicrosoftGraphActivityLogs table.
- NSG diagnostic logging
Turned on via a diagnostic setting attached to the NSG, it emits two categories, NetworkSecurityGroupRuleCounter and NetworkSecurityGroupEvent. NSG flow logs are a different feature.
- Partner solutions
Lets a diagnostic setting stream logs via Azure Native Integrations to external monitoring tools such as Elastic or Datadog.
- Resource logs
Platform logs, specific to each resource, describing operations within it. Nothing is gathered or kept until a diagnostic setting sends them to a destination.
- Resource-specific tables
Mode for a diagnostic setting's destination in which every log category gets a dedicated table, such as AZFWNetworkRule for Azure Firewall, rather than everything landing in AzureDiagnostics.