Azure Monitoring and Logging

Azure Platform Logs includes Resource Logs, Activity Logs, and AAD logs.

• Activity Logs are subscription-level control plane logs, for example, creating a key vault resource
• Resource Logs (previously known as Diagnostic Logs) are resource-level data access plane logs, for example, getting a key from a key vault

• Activity Logs are automatically generated and available. There is a hard limit of 90 day retention, unless they logs are forward somewhere else.
• Resource Logs are automatically generated, but they must be explicitly configured to be sent somewhere, using Diagnostic settings, before they are available for access