Azure Monitor Audit

Audit Azure activity with Monitor, Activity Logs, and Log Analytics for compliance, security, and operational visibility.

When to Use

• Enabling centralized audit logging across Azure subscriptions
• Meeting compliance requirements for SOC 2, HIPAA, PCI DSS, or ISO 27001
• Investigating security incidents or unauthorized activity in Azure
• Setting up alerting on administrative and security events
• Building compliance dashboards and automated evidence collection

These are paid provisioning/configuration examples requiring authorized Azure access, not privilege-free checks. Confirm tenant/subscription, data residency, cost/retention and alert recipients before writes. Inspect supported categories for each resource and verify actual ingestion after setup; Entra SigninLogs/AuditLogs require their own connector/licensing, and SQL diagnostics do not enable SQL auditing by themselves. Never place real PagerDuty integration keys in committed command URLs.

Create Log Analytics Workspace