Azure / Azure/azure-policy

Deploy Diagnostic Settings for Service Bus to Log Analytics workspace: missing Log Categories

Open
#997 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Open Policy Agent
Stars
1.7k
Forks
1.2k
Avg merge
2d 54m
Merged PRs (30d)
3

Description

#### Details of the scenario you tried and the problem that is occurring
Built-in policy definition "Deploy Diagnostic Settings for Service Bus to Log Analytics workspace" (04d53d87-841c-4f23-8a5b-21564380b55e) is missing two Log Categories:

- Runtime Audit Logs
- Application Metrics Logs

So this policy never gets compliant.

**Steps to reproduce**

- Assign policy "Deploy Diagnostic Settings for Service Bus to Log Analytics workspace"
- Deploy a Azure Service Bus

#### Verbose logs showing the problem
![Screenshot 2022-08-17 135326](https://user-images.githubusercontent.com/2323352/185142096-32d996ad-8e04-4c3d-b10c-3ef19459e813.png)

#### Suggested solution to the issue

```
{
"logs":[
{
"category":"OperationalLogs",
"enabled":"[parameters('logsEnabled')]"
},
{
"category":"VNetAndIPFilteringLogs",
"enabled":"[parameters('logsEnabled')]"
},
{
"category":"RuntimeAuditLogs",
"enabled":"[parameters('logsEnabled')]"
},
{
"category":"ApplicationMetricsLogs",
"enabled":"[parameters('logsEnabled')]"
}
]
}
```

#### If policy is Guest Configuration - details about target node

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the built-in policy definition named "Deploy Diagnostic Settings for Service Bus to Log Analytics workspace" using policy ID 04d53d87-841c-4f23-8a5b-21564380b55e. Compare its Service Bus log categories with the suggested RuntimeAuditLogs and ApplicationMetricsLogs entries, then verify compliance after assigning the policy and deploying an Azure Service Bus.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.