Alias Request: Microsoft.Security/logCollection

[klawrie]

Scenario - Audit that Data Collection is enabled in Security Center at a subscription level Definition - If Security Center data collection is off, audit as non-compliant Example;

{ "if": { "field": "type", "equals": "Microsoft.Security" }, "then": { "effect": "AuditIfNotExists", "details": { "type": "Microsoft.Security/logCollection", "name": "default", "existenceCondition": { "allOf": [{ "field": "Microsoft.Security/logCollection", "equals": "On" } ] } } } }

[eladperets]

There's no 'logCollection' resource, I assume you mean the logCollection property within Microsoft.Security/policies resource type

[eladperets]

Done