Deploy Diagnostic Settings for Service Bus to Log Analytics workspace: missing Log Categories
- Dominant language
- Open Policy Agent
- Stars
- 1.7k
- Forks
- 1.2k
- Avg merge
- 2d 54m
- Merged PRs (30d)
- 3
Description
#### Details of the scenario you tried and the problem that is occurring
Built-in policy definition "Deploy Diagnostic Settings for Service Bus to Log Analytics workspace" (04d53d87-841c-4f23-8a5b-21564380b55e) is missing two Log Categories:
- Runtime Audit Logs
- Application Metrics Logs
So this policy never gets compliant.
**Steps to reproduce**
- Assign policy "Deploy Diagnostic Settings for Service Bus to Log Analytics workspace"
- Deploy a Azure Service Bus
#### Verbose logs showing the problem

#### Suggested solution to the issue
```
{
"logs":[
{
"category":"OperationalLogs",
"enabled":"[parameters('logsEnabled')]"
},
{
"category":"VNetAndIPFilteringLogs",
"enabled":"[parameters('logsEnabled')]"
},
{
"category":"RuntimeAuditLogs",
"enabled":"[parameters('logsEnabled')]"
},
{
"category":"ApplicationMetricsLogs",
"enabled":"[parameters('logsEnabled')]"
}
]
}
```
#### If policy is Guest Configuration - details about target node
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the built-in policy definition named "Deploy Diagnostic Settings for Service Bus to Log Analytics workspace" using policy ID 04d53d87-841c-4f23-8a5b-21564380b55e. Compare its Service Bus log categories with the suggested RuntimeAuditLogs and ApplicationMetricsLogs entries, then verify compliance after assigning the policy and deploying an Azure Service Bus.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100