Skip to main content

🔌 Azure Diagnostic Setting - object.extracts.yaml

  • Contextual name: 🔌 object.extracts.yaml
  • ID: /types/CA10__CaAzureDiagnosticSetting__c/object.extracts.yaml

Used In

LogicPolicyFlags
🧠 prod.logic.yaml🟢🛡️ Azure Databricks Diagnostic Log Delivery is not configured🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ Azure Diagnostic Setting captures Administrative, Alert, Policy, and Security categories🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ Azure Diagnostic Setting exists for Subscription Activity Logs🟢🟢 x3
🧠 prod.logic.yaml🟢🛡️ Azure Diagnostic Setting for Azure Key Vault is not enabled🟢🟢 x3

Content

Open File

---
extracts:
# Not Nullable. Can't have no access, retrieved via Microsoft.Insights/diagnosticSettings/read
- name: "CA10__logsJson__c"
value:
FIELD:
path: "CA10__logsJson__c"
returnType: BYTES
undeterminedIf:
isEmpty: "Corrupted Data. Diagnostic Setting Logs JSON cannot be empty."
- name: "caJsonFrom__logsJson__c"
value:
JSON_FROM:
arg:
EXTRACT: "CA10__logsJson__c"
undeterminedIf:
isInvalid: "Logs JSON is invalid."
# Nullable. Azure Log Analytics workspace
- name: "CA10__workspaceId__c"
value:
FIELD:
path: "CA10__workspaceId__c"
# Nullable. Azure Storage Account
- name: "CA10__storageAccountId__c"
value:
FIELD:
path: "CA10__storageAccountId__c"
# Nullable. Azure Event Hubs
- name: "CA10__eventHubAuthorizationRuleId__c"
value:
FIELD:
path: "CA10__eventHubAuthorizationRuleId__c"