turbot/azure

steampipe plugin install azuresteampipe plugin install azure
azure_ad_groupazure_ad_service_principalazure_ad_userazure_api_managementazure_app_service_environmentazure_app_service_function_appazure_app_service_planazure_app_service_web_appazure_application_security_groupazure_compute_availability_setazure_compute_diskazure_compute_disk_encryption_setazure_compute_disk_metric_read_opsazure_compute_disk_metric_read_ops_dailyazure_compute_disk_metric_read_ops_hourlyazure_compute_disk_metric_write_opsazure_compute_disk_metric_write_ops_dailyazure_compute_disk_metric_write_ops_hourlyazure_compute_imageazure_compute_resource_skuazure_compute_snapshotazure_compute_virtual_machineazure_compute_virtual_machine_metric_cpu_utilizationazure_compute_virtual_machine_metric_cpu_utilization_dailyazure_compute_virtual_machine_metric_cpu_utilization_hourlyazure_cosmosdb_accountazure_cosmosdb_mongo_databaseazure_cosmosdb_sql_databaseazure_data_factoryazure_data_factory_datasetazure_data_factory_pipelineazure_diagnostic_settingazure_express_route_circuitazure_firewallazure_key_vaultazure_key_vault_keyazure_key_vault_secretazure_kubernetes_clusterazure_locationazure_log_alertazure_log_profileazure_management_lockazure_mysql_serverazure_network_interfaceazure_network_security_groupazure_network_watcherazure_network_watcher_flow_logazure_policy_assignmentazure_policy_definitionazure_postgresql_serverazure_providerazure_public_ipazure_resource_groupazure_role_assignmentazure_role_definitionazure_route_tableazure_security_center_auto_provisioningazure_security_center_contactazure_security_center_settingazure_security_center_subscription_pricingazure_sql_databaseazure_sql_serverazure_storage_accountazure_storage_blobazure_storage_blob_serviceazure_storage_containerazure_storage_queueazure_storage_tableazure_storage_table_serviceazure_subnetazure_subscriptionazure_tenantazure_virtual_networkazure_virtual_network_gateway

Table: azure_diagnostic_setting

Azure diagnostic settings are used to send platform logs and metrics to different destinations.

Examples

Basic info

select
name,
id,
type
from
azure_diagnostic_setting;

List diagnostic settings that capture Alert category logs

select
name,
id,
type
from
azure_diagnostic_setting,
jsonb_array_elements(logs) as l
where
l ->> 'category' = 'Alert'
and l ->> 'enabled' = 'true';

List diagnostic settings that capture Security category logs

select
name,
id,
type
from
azure_diagnostic_setting,
jsonb_array_elements(logs) as l
where
l ->> 'category' = 'Security'
and l ->> 'enabled' = 'true';

List diagnostic settings that capture Policy category logs

select
name,
id,
type
from
azure_diagnostic_setting,
jsonb_array_elements(logs) as l
where
l ->> 'category' = 'Policy'
and l ->> 'enabled' = 'true';

List diagnostic settings that capture Administrative category logs

select
name,
id,
type
from
azure_diagnostic_setting,
jsonb_array_elements(logs) as l
where
l ->> 'category' = 'Administrative'
and l ->> 'enabled' = 'true';

.inspect azure_diagnostic_setting

Azure Diagnostic Setting

NameTypeDescription
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
event_hub_authorization_rule_idtextThe resource Id for the event hub authorization rule.
event_hub_nametextThe name of the event hub.
idtextThe resource Id.
log_analytics_destination_typetextA string indicating whether the export to Log Analytics should use the default destinatio type.
logsjsonbThe list of logs settings.
metricsjsonbThe list of metric settings.
nametextThe name of the resource.
resource_grouptextThe resource group which holds this resource.
service_bus_rule_idtextThe service bus rule Id of the diagnostic setting.
storage_account_idtextThe resource ID of the storage account to which you would like to send Diagnostic Logs.
subscription_idtextThe Azure Subscription ID in which the resource is located.
titletextTitle of the resource.
typetextType of the resource.
workspace_idtextThe full ARM resource ID of the Log Analytics workspace to which you would like to send Diagnostic Logs.