search

Azure / azure-policy

Repository for Azure Resource Policy built-in definitions and samples
MIT License
1.49k stars 1.08k forks source link

Log categories "Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories." #1017

Open neok-g opened 2 years ago

neok-g commented 2 years ago

The built-in policy Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories only checks the logcategories: "CoreAzureBackup", "AddonAzureBackupJobs", "AddonAzureBackupAlerts", "AddonAzureBackupPolicy", "AddonAzureBackupStorage", "AddonAzureBackupProtectedInstance"

However a recovery services vault has the following log categories available: AzureBackupReport CoreAzureBackup AddonAzureBackupJobs AddonAzureBackupAlerts AddonAzureBackupPolicy AddonAzureBackupStorage AddonAzureBackupProtectedInstance AzureSiteRecoveryJobs AzureSiteRecoveryEvents AzureSiteRecoveryReplicatedItems AzureSiteRecoveryReplicationStats AzureSiteRecoveryRecoveryPoints AzureSiteRecoveryReplicationDataUploadRate AzureSiteRecoveryProtectedDiskDataChurn Health

So this conflicts with the builtin policy Audit Diagnostic Settings which checks for all log categories. Please modify the policy "Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories." so that it inspects all log categories available for recovery services vault.

neok-g commented 2 years ago

See related issue on Enterprise Scale Repo