Supported Resource log categories for Azure Monitor

Azure Monitor resource logs are logs emitted by Azure services that describe the operation of those services or resources. All resource logs available through Azure Monitor share a common top-level schema. Each service has the flexibility to emit unique properties for its own events.

Resource logs were previously known as diagnostic logs.

A combination of the resource type (available in the resourceId property) and the category uniquely identifies a schema. There's a common schema for all resource logs with service-specific fields then added for different log categories. For more information, see Common and service-specific schema for Azure resource logs.

Costs

Azure Monitor Log Analytics, Azure Storage, Azure Event Hubs, and partners who integrate directly with Azure Monitor (for example, Datadog) have costs associated with ingesting data and storing data. Check the pricing pages linked in the previous sentence to understand the costs for those services. Resource logs are just one type of data that you can send to those locations.

In addition, there might be costs to export some categories of resource logs to those locations. Logs with possible export costs are listed in the next section. Select the links below to see which log categories have export costs associated with them. For more information on export pricing, see the Platform Logs section on the Azure Monitor pricing page.

Supported metrics and log categories by resource type

Following table lists metrics and log categories available for each resource type.

Resource Provider	Metrics	Log Categories
`Microsoft.AAD`	`DomainServices`	`DomainServices`
`Microsoft.AgFoodPlatform`	`N/A`	`farmBeats`
`Microsoft.AnalysisServices`	`servers`	`servers`
`Microsoft.ApiManagement`	`gateways` `service`	`service` `service/workspaces`
`Microsoft.App`	`containerapps` `jobs` `managedEnvironments` `sessionpools`	`managedEnvironments`
`Microsoft.AppConfiguration`	`configurationStores`	`configurationStores`
`Microsoft.AppLink`	`N/A`	`applinks/applinkmembers`
`Microsoft.AppPlatform`	`spring`	`spring`
`Microsoft.Attestation`	`N/A`	`attestationProviders`
`Microsoft.Automation`	`automationAccounts`	`automationAccounts`
`Microsoft. <br>AutonomousDevelopmentPlatform`	`N/A`	`accounts` `workspaces`
`microsoft.avs`	`privateClouds`	`privateClouds`
`Microsoft.AzureDataTransfer`	`N/A`	`connections/flows`
`microsoft. <br>azureplaywrightservice`	`N/A`	`accounts`
`microsoft.azuresphere`	`catalogs`	`catalogs`
`Microsoft.Batch`	`batchaccounts`	`batchaccounts`
`microsoft.botservice`	`botservices`	`botservices`
`Microsoft.Cache`	`redis` `redisEnterprise`	`redis` `redisEnterprise/databases`
`Microsoft.Cdn`	`cdnwebapplicationfirewallpolicies` `edgeactions` `profiles`	`cdnwebapplicationfirewallpolicies` `edgeactions` `profiles` `profiles/endpoints`
`Microsoft.Chaos`	`N/A`	`experiments`
`Microsoft.CloudHealth`	`healthmodels`	`healthmodels`
`Microsoft.CodeSigning`	`codesigningaccounts`	`codesigningaccounts`
`Microsoft.CognitiveServices`	`accounts` `accounts/projects`	`accounts` `accounts/projects`
`microsoft.community`	`N/A`	`communityTrainings`
`Microsoft.Compute`	`cloudservices` `cloudServices/roles` `virtualMachines` `virtualmachineScaleSets` `virtualMachineScaleSets/virtualMachines`	`virtualMachines`
`Microsoft.ConfidentialLedger`	`N/A`	`Ledgers` `ManagedCCF` `ManagedCCFs`
`Microsoft.ConnectedCache`	`CacheNodes` `enterpriseMccCustomers` `ispCustomers`	`CacheNodes` `enterpriseMccCustomers` `ispCustomers`
`Microsoft.ConnectedVehicle`	`platformAccounts`	`platformAccounts`
`Microsoft.ContainerInstance`	`containerGroups` `containerScaleSets`	`containerGroups`
`Microsoft.ContainerRegistry`	`registries`	`registries`
`Microsoft.ContainerService`	`managedClusters`	`fleets` `managedClusters`
`Microsoft.CustomProviders`	`resourceproviders`	`resourceproviders`
`Microsoft.D365CustomerInsights`	`N/A`	`instances`
`Microsoft.Dashboard`	`grafana`	`dashboards` `grafana`
`Microsoft.Databricks`	`N/A`	`workspaces`
`Microsoft.DataFactory`	`datafactories` `factories`	`factories`
`Microsoft.DataLakeAnalytics`	`accounts`	`accounts`
`Microsoft.DataLakeStore`	`accounts`	`accounts`
`Microsoft.DataProtection`	`BackupVaults`	`BackupVaults`
`Microsoft.DataReplication`	`N/A`	`replicationVaults`
`Microsoft.DataShare`	`accounts`	`accounts`
`Microsoft.DBforMariaDB`	`servers`	`servers`
`Microsoft.DBforMySQL`	`flexibleServers` `servers`	`flexibleServers` `servers`
`Microsoft.DBforPostgreSQL`	`flexibleServers`	`flexibleServers`
`Microsoft.DBForPostgreSQL`	`serverGroupsv2`	`serverGroupsv2`
`Microsoft. <br>DesktopVirtualization`	`N/A`	`appAttachPackages` `applicationgroups` `hostpools` `repositoryfolders` `scalingplans` `workspaces`
`Microsoft.DevCenter`	`devcenters`	`devcenters`
`Microsoft.Devices`	`IotHubs` `provisioningServices`	`IotHubs` `provisioningServices`
`Microsoft.DevOpsInfrastructure`	`pools`	`pools`
`Microsoft.DigitalTwins`	`digitalTwinsInstances`	`digitalTwinsInstances`
`Microsoft.Discovery`	`N/A`	`bookshelves` `supercomputers` `workspaces`
`Microsoft.DocumentDB`	`cassandraClusters` `DatabaseAccounts` `fleets` `garnetClusters` `mongoClusters`	`cassandraClusters` `DatabaseAccounts` `mongoClusters`
`Microsoft.DurableTask`	`schedulers`	`schedulers`
`Microsoft.Edge`	`N/A`	`diagnostics`
`Microsoft.EventGrid`	`domains` `eventSubscriptions` `extensionTopics` `namespaces` `partnerNamespaces` `partnerTopics` `systemTopics` `topics`	`domains` `namespaces` `partnerNamespaces` `partnerTopics` `systemTopics` `topics`
`Microsoft.EventHub`	`clusters` `Namespaces`	`Namespaces`
`Microsoft. <br>HardwareSecurityModules`	`N/A`	`cloudHsmClusters`
`Microsoft.HealthcareApis`	`services` `workspaces/dicomservices` `workspaces/fhirservices` `workspaces/iotconnectors`	`services` `workspaces/dicomservices` `workspaces/fhirservices` `workspaces/iotconnectors`
`Microsoft.HealthcareInterop`	`fhirQueryEventBatchChannels` `fhirQueryFlatFileBatchChannels`	`fhirQueryEventBatchChannels` `fhirQueryFlatFileBatchChannels`
`Microsoft.HealthDataAIServices`	`N/A`	`deidServices`
`microsoft.insights`	`autoscalesettings` `components`	`autoscalesettings` `components`
`Microsoft.Insights`	`datacollectionrules`	`datacollectionrules`
`microsoft.keyvault`	`managedhsms`	`managedhsms`
`Microsoft.KeyVault`	`vaults`	`vaults`
`microsoft.kubernetes`	`connectedClusters`	`connectedClusters`
`Microsoft.Kusto`	`clusters`	`clusters`
`microsoft.loadtestservice`	`N/A`	`loadtests`
`Microsoft.Logic`	`IntegrationServiceEnvironments` `Workflows`	`IntegrationAccounts` `Workflows`
`Microsoft. <br>MachineLearningServices`	`workspaces` `workspaces/onlineEndpoints` `workspaces/onlineEndpoints/deployments`	`registries` `workspaces` `workspaces/onlineEndpoints`
`Microsoft.ManagedNetworkFabric`	`internetGateways` `l3IsolationDomains` `networkDevices` `networkFabricControllers` `networkFabrics`	`networkDevices`
`Microsoft.Monitor`	`accounts` `pipelineGroups`	`accounts` `pipelineGroups`
`Microsoft.NetApp`	`elasticAccounts/elasticCapacityPools` `elasticAccounts/elasticCapacityPools/elasticVolumes` `netAppAccounts` `netAppAccounts/capacityPools` `netAppAccounts/capacityPools/caches` `netAppAccounts/capacityPools/volumes` `scaleAccounts/scaleCapacityPools` `scaleAccounts/scaleCapacityPools/scaleVolumes`	`netAppAccounts/capacityPools` `netAppAccounts/capacityPools/caches`
`Microsoft.Network`	`applicationgateways` `azureFirewalls` `connections` `dnsForwardingRulesets` `dnsResolverDomainLists` `dnsResolverPolicies` `dnsResolvers` `dnszones` `expressRouteCircuits` `expressRouteCircuits/peerings` `expressRoutePorts` `frontdoors` `loadBalancers` `natgateways` `networkinterfaces` `networkManagers/ipamPools` `networkSecurityPerimeters` `NetworkVirtualAppliances` `networkWatchers/connectionMonitors` `privateDnsZones` `privateEndpoints` `privateLinkServices` `publicIPAddresses` `publicIPPrefixes` `trafficManagerProfiles` `virtualHubs` `virtualnetworkappliances` `virtualNetworks` `virtualRouters`	`applicationgateways` `azureFirewalls` `dnsResolverPolicies` `expressRouteCircuits` `frontdoors` `loadBalancers` `natgateways` `networkManagers` `networkManagers/ipamPools` `networksecuritygroups` `networkSecurityPerimeters` `networkSecurityPerimeters/profiles` `NetworkVirtualAppliances` `publicIPAddresses` `publicIPPrefixes` `trafficManagerProfiles` `virtualNetworks`
`microsoft.network`	`bastionHosts` `expressroutegateways` `p2svpngateways` `virtualnetworkgateways` `vpngateways`	`bastionHosts` `p2svpngateways` `virtualnetworkgateways` `vpngateways`
`Microsoft.NetworkAnalytics`	`N/A`	`DataProducts`
`Microsoft.NetworkCloud`	`bareMetalMachines` `clusterManagers` `clusters` `storageAppliances`	`bareMetalMachines` `clusterManagers` `clusters` `kubernetesClusters` `storageAppliances`
`Microsoft.NetworkFunction`	`azureTrafficCollectors`	`azureTrafficCollectors`
`Microsoft.NotificationHubs`	`namespaces/notificationHubs`	`namespaces` `namespaces/notificationHubs`
`microsoft. <br>onlineexperimentation`	`N/A`	`workspaces`
`MICROSOFT.OPENENERGYPLATFORM`	`N/A`	`ENERGYSERVICES`
`Microsoft. <br>OpenLogisticsPlatform`	`N/A`	`Workspaces`
`Microsoft.OperationalInsights`	`workspaces`	`workspaces`
`Microsoft.Orbital`	`contactProfiles` `geocatalogs` `l2Connections` `spacecrafts` `terminals`	`geocatalogs`
`Microsoft.PlayFab`	`titles`	`titles`
`Microsoft.PowerBI`	`N/A`	`tenants` `tenants/workspaces`
`Microsoft.PowerBIDedicated`	`capacities`	`capacities`
`Microsoft.ProviderHub`	`N/A`	`providerMonitorSettings` `providerRegistrations`
`microsoft.purview`	`accounts`	`accounts`
`Microsoft.Quantum`	`providerAccounts`	`providerAccounts` `workspaces`
`Microsoft.RecoveryServices`	`Vaults`	`Vaults`
`Microsoft.RedHatOpenShift`	`N/A`	`hcpOpenShiftClusters`
`Microsoft.Relay`	`namespaces`	`namespaces`
`Microsoft.ResourceBuilder`	`workspaces/pipelines/jobs`	`workspaces` `workspaces/pipelines/jobs`
`Microsoft.Search`	`searchServices`	`searchServices`
`Microsoft.Security`	`N/A`	`antiMalwareSettings` `defenderForStorageSettings`
`microsoft.securityinsights`	`N/A`	`settings`
`Microsoft.ServiceBus`	`Namespaces`	`Namespaces`
`Microsoft.ServiceNetworking`	`trafficControllers`	`trafficControllers`
`Microsoft.SignalRService`	`SignalR` `SignalR/replicas` `WebPubSub` `WebPubSub/replicas`	`SignalR` `SignalR/replicas` `WebPubSub` `WebPubSub/replicas`
`microsoft.singularity`	`accounts`	`accounts`
`Microsoft.Sql`	`managedInstances` `servers/databases` `servers/elasticpools` `servers/jobAgents`	`managedInstances` `managedInstances/databases` `servers/databases`
`Microsoft.StandbyPool`	`N/A`	`standbycontainergrouppools` `standbyvirtualmachinepools`
`Microsoft.Storage`	`storageAccounts` `storageAccounts/blobServices` `storageAccounts/fileServices` `storageAccounts/objectReplicationPolicies` `storageAccounts/queueServices` `storageAccounts/storageTasks` `storageAccounts/tableServices` `storageTasks`	`storageAccounts/blobServices` `storageAccounts/fileServices` `storageAccounts/queueServices` `storageAccounts/tableServices`
`Microsoft.StorageCache`	`amlFilesystems` `caches`	`amlFilesystems` `caches`
`Microsoft.StorageMover`	`storageMovers`	`storageMovers`
`Microsoft.StreamAnalytics`	`streamingjobs`	`streamingjobs`
`Microsoft.Synapse`	`workspaces` `workspaces/bigDataPools` `workspaces/kustoPools` `workspaces/scopePools` `workspaces/sqlPools`	`workspaces` `workspaces/bigDataPools` `workspaces/kustoPools` `workspaces/scopePools` `workspaces/sqlPools`
`Microsoft. <br>ToolchainOrchestrator`	`N/A`	`diagnostics`
`microsoft.videoindexer`	`N/A`	`accounts`
`Microsoft.Web`	`containerapps` `hostingEnvironments` `hostingenvironments/multirolepools` `hostingenvironments/workerpools` `serverfarms` `sites` `sites/slots` `staticsites`	`hostingEnvironments` `serverfarms` `sites` `sites/slots` `staticsites`
`microsoft.workloads`	`N/A`	`sapvirtualinstances`
`Microsoft. <br>ZeroTrustSegmentation`	`N/A`	`segmentationManagers`
`NGINX.NGINXPLUS`	`NGINX.NGINXPLUS/nginxDeployments`	`NGINX.NGINXPLUS/nginxDeployments`
`Oracle.Database`	`Oracle.Database/autonomousDatabases` `Oracle.Database/cloudVmClusters` `Oracle.Database/dbSystems`	`Oracle.Database/autonomousDatabases` `Oracle.Database/cloudExadataInfrastructures` `Oracle.Database/cloudVmClusters` `Oracle.Database/dbSystems`
`Microsoft.azurestackhci`	`clusters`	N/A
`microsoft.bing`	`accounts`	N/A
`Microsoft.BotService`	`botServices/channels` `botServices/connections` `checknameavailability` `hostsettings` `listauthserviceproviders` `listqnamakerendpointkeys`	N/A
`Microsoft.ClusterStor`	`nodes`	N/A
`microsoft.compute`	`disks`	N/A
`Microsoft.DataBoxEdge`	`dataBoxEdgeDevices`	N/A
`microsoft.deviceregistry`	`namespaces`	N/A
`microsoft.edgezones`	`edgezones`	N/A
`Microsoft.ElasticSan`	`elasticSans`	N/A
`Microsoft.FileShares`	`fileShares`	N/A
`Microsoft.HDInsight`	`clusters`	N/A
`Microsoft.HealthModel`	`healthmodels`	N/A
`Microsoft.HorizonDB`	`clusters`	N/A
`Microsoft. <br>HybridContainerService`	`provisionedClusters`	N/A
`microsoft.hybridnetwork`	`networkfunctions` `virtualnetworkfunctions`	N/A
`Microsoft.IoTCentral`	`IoTApps`	N/A
`Microsoft.IoTFirmwareDefense`	`workspaces`	N/A
`microsoft. <br>kubernetesconfiguration`	`extensions`	N/A
`Microsoft.Maps`	`accounts`	N/A
`Microsoft.MessagingConnectors`	`connectors`	N/A
`Microsoft.MobileNetwork`	`mobilenetworks/sites` `packetcorecontrolplanes` `packetcorecontrolplanes/packetcoredataplanes` `radioAccessNetworks`	N/A
`Microsoft.OrionDB`	`clusters`	N/A
`Microsoft. <br>PowerPlatformMonitoringHub`	`copilotstudio` `microsoftapp` `powerapps` `powerautomate`	N/A
`microsoft.resources`	`subscriptions`	N/A
`microsoft.securitydetonation`	`chambers`	N/A
`Microsoft.SecurityDetonation`	`SecurityDetonationChambers`	N/A
`Microsoft.StorageActions`	`storageTasks`	N/A
`Microsoft.StorageSync`	`storageSyncServices`	N/A
`Microsoft.StorageTasks`	`storageTasks`	N/A
`Microsoft.VoiceServices`	`CommunicationsGateways`	N/A
`Private.MessagingConnectors`	`Private.MessagingConnectors/connectors`	N/A
`Wandisco.Fusion`	`Wandisco.Fusion/migrators` `Wandisco.Fusion/migrators/dataTransferAgents` `Wandisco.Fusion/migrators/liveDataMigrations` `Wandisco.Fusion/migrators/metadataMigrations`	N/A

Next Steps

Feedback

Was this page helpful?

Last updated on 2026-05-29