Microsoft.ContainerService/managedClusters

15 diagnostic categories routing into 2 Log Analytics tables.

Source: Microsoft Learn

Diagnostic categories

Destination tables

  • AKSAuditAdmin

    PII

    Contains Kubernetes API Server audit logs excluding events with the get and list verbs. These events are useful for monitoring resource modification requests made to the Kubernetes API. To see all modifying and non-modifying operations see the AKSAudit table. Requires Diagnostic Settings to use the Resource Specific destination table.

    24 columns in this table.

  • AzureDiagnostics

    PII

    Stores resource logs for Azure services that use Azure Diagnostics mode. Resource logs describe the internal operation of Azure resources.

    174 columns in this table.