AZURE / Monitor / Key Vault Log Analytics Enabled

Quick Info


Plugin Title	Key Vault Log Analytics Enabled
Cloud	AZURE
Category	Monitor
Description	Ensures Key Vault Log Analytics logs are being properly delivered to Azure Monitor
More Info	Enabling Send to Log Analytics ensures that all Key Vault logs are being properly monitored and managed.
AZURE Link	https://docs.microsoft.com/en-us/azure/azure-monitor/platform/collect-activity-logs
Recommended Action	Send all diagnostic logs for Key Vault from the Azure Monitor service to Log Analytics.

Log into the Microsoft Azure Management Console.
Select the "Search resources, services, and docs" option at the top and search for Monitor.
On the "Monitor - Overview" page scroll down the left navigation panel and click on "Diagnostics" under Settings.
On the "Monitor - Diagnostics settings" page select the resource you want to verify for "Key Vault Log Analystics."
Check the "Diagnostics Status" and if it's set to "Disabled" then the "Key Vault Log Analytics" logs are not being properly delivered to Azure Monitor.
Repeat steps number 2 - 5 to verify other resources in the account.
Navigate to "Monitor" and click on the "Diagnostics" under "Settings" and select the resource on which "Key Vault Log Anaytics" needs to be enabled.
On the "Diagnostics Settings" page click on the "Add diagnostic setting" option.
On the "Diagnostics Settings" page enter the Name, click the checkbox for "Send to Log Analytics", select an existing Log Analytics workspace, or create a workspace and to enable "Metric" click the checkbox under "Metric". Click on the "Save" button at the top to make the changes.
Repeat steps number 7 - 9 to send all diagnostic logs for Key Vault from the Azure Monitor service to Log Analytics.