Can anyone help advise on how we monitor the security logs in Azure log analytics specifically for event 4689?

I only seem to have objects for SecurityEvent and CommonSecurityLog, but these both return 0 results.

When I go to advanced settings, data and Windows Event Logs, there doesn't seem to be a security log in the search, but there is "Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic" and "operational".

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.