Configure diagnostic settings for Table Services to Log Analytics workspace

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Insights/diagnosticSettings/logs.enabled

microsoft.insights

diagnosticSettings

properties.logs[*].enabled

True

False

Microsoft.Insights/diagnosticSettings/metrics.enabled

microsoft.insights

diagnosticSettings

properties.metrics[*].enabled

True

False

Microsoft.Insights/diagnosticSettings/workspaceId

microsoft.insights

diagnosticSettings

properties.workspaceId

True

False

Rows: 1-2 / 2

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

Type

polSet in AzUSGov

[Deprecated]: Deploy Diagnostic Settings to Azure Services

Deploy-Diagnostics-LogAnalytics

Monitoring

Deprecated

ALZ

[Preview]: Control the use of diagnostic settings for specific resources in a Virtual Enclave

0a9ea1cb-7925-47fc-b0fe-8bb0a8190423

VirtualEnclaves

Preview

BuiltIn

true

Date/Time (UTC ymd) (i)

Change type

Change detail

2022-12-21 17:43:51

change

Patch (4.0.0 > 4.0.1)

2022-10-21 16:42:13

change

Major (3.0.0 > 4.0.0)

2022-09-23 16:35:49

change

Major (2.0.0 > 3.0.0)

2022-09-19 17:41:40

change

Major (1.0.0 > 2.0.0)

2022-08-26 16:33:38

add

2fb86bf3-d221-43d1-96d1-2434af34eaa0

{

displayName: "Configure diagnostic settings for Table Services to Log Analytics workspace",
policyType: "BuiltIn",
mode: "All",
description: "Deploys the diagnostic settings for Table Services to stream resource logs to a Log Analytics workspace when any table Service which is missing this diagnostic settings is created or updated. Note: This policy is not triggered upon Storage Account creation and requires creation of a remediation task in order to update for the account.",
metadata: {2 items
- category: "Storage",
- version: "4.0.1"
},
parameters: {5 items
- effect: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of the policy"
    },
  - allowedValues: [3 items
    - "DeployIfNotExists",
    - "AuditIfNotExists",
    - "Disabled"
    ],
  - defaultValue: "DeployIfNotExists"
  },
- profileName: {3 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Profile name",
    - description: "The diagnostic settings profile name"
    },
  - defaultValue: "tableServicesDiagnosticsLogsToWorkspace"
  },
- logAnalytics: {2 items
  - type: "String",
  - metadata: {4 items
    - displayName: "Log Analytics workspace",
    - description: "Select Log Analytics workspace from the dropdown list. If this workspace is outside of the scope of the assignment you must manually grant 'Log Analytics Contributor' permissions (or similar) to the policy assignment's principal ID.",
    - strongType: "omsWorkspace",
    - assignPermissions: true
    }
  },
- metricsEnabled: {4 items
  - type: "Boolean",
  - metadata: {2 items
    - displayName: "Enable metrics",
    - description: "Whether to enable metrics stream to the Log Analytics workspace - True or False"
    },
  - allowedValues: [2 items
    - true,
    - false
    ],
  - defaultValue: false
  },
- logsEnabled: {4 items
  - type: "Boolean",
  - metadata: {2 items
    - displayName: "Enable logs",
    - description: "Whether to enable logs stream to the Log Analytics workspace - True or False"
    },
  - allowedValues: [2 items
    - true,
    - false
    ],
  - defaultValue: true
  }
},
policyRule: {2 items
- if: {2 items
  - field: "type",
  - equals: "Microsoft.Storage/storageAccounts/tableServices"
  },
- then: {2 items
  - effect: "[parameters('effect')]",
  - details: {5 items
    - type: "Microsoft.Insights/diagnosticSettings",
    - name: "[parameters('profileName')]",
    - existenceCondition: {1 item
      - allOf: [3 items
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/logs.enabled",
        equals: "[parameters('logsEnabled')]"
        },
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/metrics.enabled",
        equals: "[parameters('metricsEnabled')]"
        },
        {2 items
        field: "Microsoft.Insights/diagnosticSettings/workspaceId",
        equals: "[parameters('logAnalytics')]"
        }
        ]
      },
    - roleDefinitionIds: [2 items
      - "/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa" Monitoring Contributor ,
      - "/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293" Log Analytics Contributor
      ],
    - deployment: {1 item
      - properties: {3 items
        mode: "incremental",
        template: {6 items
        $schema: "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
        contentVersion: "1.0.0.0",
        parameters: {6 items
        resourceName: {1 item
        type: "string"
        },
        location: {1 item
        type: "string"
        },
        logAnalytics: {1 item
        type: "string"
        },
        metricsEnabled: {1 item
        type: "bool"
        },
        logsEnabled: {1 item
        type: "bool"
        },
        profileName: {1 item
        type: "string"
        }
        },
        variables: {},
        resources: [1 item
        {6 items
        type: "Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings",
        apiVersion: "2021-05-01-preview",
        name: 🔍"[ concat( parameters('resourceName'), '/', 'Microsoft.Insights/', parameters('profileName') ) ]",
        location: "[parameters('location')]",
        dependsOn: [],
        properties: {3 items
        workspaceId: "[parameters('logAnalytics')]",
        metrics: [1 item
        {2 items
        category: "AllMetrics",
        enabled: "[parameters('metricsEnabled')]"
        }
        ],
        logs: [3 items
        {2 items
        category: "StorageRead",
        enabled: "[parameters('logsEnabled')]"
        },
        {2 items
        category: "StorageWrite",
        enabled: "[parameters('logsEnabled')]"
        },
        {2 items
        category: "StorageDelete",
        enabled: "[parameters('logsEnabled')]"
        }
        ]
        }
        }
        ],
        outputs: {}
        },
        parameters: {6 items
        location: {1 item
        value: "[field('location')]"
        },
        resourceName: {1 item
        value: "[field('fullName')]"
        },
        logAnalytics: {1 item
        value: "[parameters('logAnalytics')]"
        },
        metricsEnabled: {1 item
        value: "[parameters('metricsEnabled')]"
        },
        logsEnabled: {1 item
        value: "[parameters('logsEnabled')]"
        },
        profileName: {1 item
        value: "[parameters('profileName')]"
        }
        }
        }
      }
    }
  }
}

}