Enable logging by category group for Application Insights (Microsoft.Insights/components) to Log Analytics (Virtual Enclaves)

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Insights/diagnosticSettings/logs[*]

microsoft.insights

diagnosticSettings

properties.logs[*]

True

False

microsoft.insights/diagnosticSettings/logs[*].categoryGroup

microsoft.insights

diagnosticSettings

properties.logs[*].categoryGroup

True

False

Microsoft.Insights/diagnosticSettings/logs[*].enabled

microsoft.insights

diagnosticSettings

properties.logs[*].enabled

True

False

Microsoft.Insights/diagnosticSettings/workspaceId

microsoft.insights

diagnosticSettings

properties.workspaceId

True

False

Rows: 1-1 / 1

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

Type

polSet in AzUSGov

[Preview]: Control the use of diagnostic settings for specific resources in a Virtual Enclave

0a9ea1cb-7925-47fc-b0fe-8bb0a8190423

VirtualEnclaves

Preview

BuiltIn

true

Date/Time (UTC ymd) (i)

Change type

Change detail

2024-04-29 17:47:10

change

Patch (1.0.0 > 1.0.1)

2024-02-13 19:27:15

add

244bcb20-b194-41f3-afcc-63aef382b64c

{

displayName: "Enable logging by category group for Application Insights (Microsoft.Insights/components) to Log Analytics (Virtual Enclaves)",
policyType: "BuiltIn",
mode: "Indexed",
description: "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This policy deploys a diagnostic setting using a category group to route logs to a Log Analytics workspace for Application Insights (Microsoft.Insights/components).",
metadata: {2 items
- version: "1.0.1",
- category: "Monitoring"
},
parameters: {4 items
- effect: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of the policy"
    },
  - allowedValues: [3 items
    - "DeployIfNotExists",
    - "AuditIfNotExists",
    - "Disabled"
    ],
  - defaultValue: "DeployIfNotExists"
  },
- diagnosticSettingName: {3 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Diagnostic Setting Name",
    - description: "Diagnostic Setting Name"
    },
  - defaultValue: "setByPolicy-LogAnalytics"
  },
- resourceLocationList: {3 items
  - type: "Array",
  - metadata: {2 items
    - displayName: "Resource Location List",
    - description: "Resource Location List to send logs to nearby Log Analytics. A single entry "*" selects all locations (default)."
    },
  - defaultValue: [1 item
    - "*"
    ]
  },
- logAnalytics: {2 items
  - type: "String",
  - metadata: {4 items
    - displayName: "Log Analytics Workspace",
    - description: "Log Analytics Workspace",
    - strongType: "omsWorkspace",
    - assignPermissions: true
    }
  }
},
policyRule: {2 items
- if: {1 item
  - allOf: [2 items
    - {2 items
      - field: "type",
      - equals: "microsoft.insights/components"
      },
    - {1 item
      - anyOf: [2 items
        {2 items
        value: 🔍"[ first( parameters('resourceLocationList') ) ]",
        equals: "*"
        },
        {2 items
        field: "location",
        in: "[parameters('resourceLocationList')]"
        }
        ]
      }
    ]
  },
- then: {2 items
  - effect: "[parameters('effect')]",
  - details: {4 items
    - type: "Microsoft.Insights/diagnosticSettings",
    - existenceCondition: {1 item
      - allOf: [2 items
        {2 items
        count: {2 items
        field: "Microsoft.Insights/diagnosticSettings/logs[*]",
        where: {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/logs[*].enabled",
        equals: true
        },
        {2 items
        field: "microsoft.insights/diagnosticSettings/logs[*].categoryGroup",
        equals: "allLogs"
        }
        ]
        }
        },
        equals: 1
        },
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/workspaceId",
        equals: "[parameters('logAnalytics')]"
        }
        ]
      },
    - roleDefinitionIds: [1 item
      - "/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293" Log Analytics Contributor
      ],
    - deployment: {1 item
      - properties: {3 items
        mode: "incremental",
        template: {6 items
        $schema: "https://schema.management.azure.com/schemas/2019-08-01/deploymentTemplate.json#",
        contentVersion: "1.0.0.0",
        parameters: {3 items
        diagnosticSettingName: {1 item
        type: "string"
        },
        logAnalytics: {1 item
        type: "string"
        },
        resourceName: {1 item
        type: "string"
        }
        },
        variables: {},
        resources: [1 item
        {4 items
        type: "microsoft.insights/components/providers/diagnosticSettings",
        apiVersion: "2021-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/', 'Microsoft.Insights/', parameters('diagnosticSettingName') ) ]",
        properties: {3 items
        workspaceId: "[parameters('logAnalytics')]",
        logs: [1 item
        {2 items
        categoryGroup: "allLogs",
        enabled: true
        }
        ],
        metrics: []
        }
        }
        ],
        outputs: {1 item
        policy: {2 items
        type: "string",
        value: 🔍"[ concat( 'Diagnostic setting', parameters('diagnosticSettingName'), 'for type Application Insights ( microsoft.insights/components ), resourceName', parameters('resourceName'), 'to Log Analytics', parameters('logAnalytics'), 'configured' ) ]"
        }
        }
        },
        parameters: {3 items
        diagnosticSettingName: {1 item
        value: "[parameters('diagnosticSettingName')]"
        },
        logAnalytics: {1 item
        value: "[parameters('logAnalytics')]"
        },
        resourceName: {1 item
        value: "[field('name')]"
        }
        }
        }
      }
    }
  }
}

}