Microsoft.DocumentDB/DatabaseAccounts

11 diagnostic categories routing into 11 Log Analytics tables.

allLogs audit

Source: Microsoft Learn

Diagnostic categories

Destination tables

  • CDBCassandraRequests

    PII

    This table details data plane operations, specifically for Cassandra API accounts.

    26 columns in this table.

  • CDBControlPlaneRequests

    This table details all control plane operations executed on the account, which include modifications to the regional failover policy, indexing policy, IAM role assignments, backup/restore policies, VNet and firewall rules, private links as well as updates and deletes of the account.

    63 columns in this table.

  • CDBDataPlaneRequests

    PII

    The DataPlaneRequests table captures every data plane operation for the Cosmos DB account. Data Plane requests are operations executed to create, update, delete or retrieve data within the account.

    32 columns in this table.

  • CDBDataPlaneRequests15M

    PII

    The CDBDataPlaneRequests5M table consolidates logs for data-plane requests every fifteen minutes. These logs are aggregated based on the columns in the CDBDataPlaneRequests table. For detailed information about the log context, please refer to the CDBDataPlaneRequests table.

    40 columns in this table.

  • CDBDataPlaneRequests5M

    PII

    The CDBDataPlaneRequests5M table consolidates logs for data-plane requests every five minutes. These logs are aggregated based on the columns in the CDBDataPlaneRequests table. For detailed information about the log context, please refer to the CDBDataPlaneRequests table.

    40 columns in this table.

  • CDBGremlinRequests

    PII

    This table details data plane operations, specifically for Graph API accounts.

    26 columns in this table.

  • CDBMongoRequests

    PII

    This table details data plane operations, specifically for Mongo API accounts.

    28 columns in this table.

  • CDBPartitionKeyRUConsumption

    This table details the RU (Request Unit) consumption for logical partition keys in each region, within each of their physical partitions. This data can be used to identify hot partitions from a request volume perspective.

    17 columns in this table.

  • CDBPartitionKeyStatistics

    This table provides outlier logical partition keys that have consumed more storage space than others. Statistics are based on a sub-sampling of partition keys within the collection and hence these are approximate. Partition keys that are below 1GB of storage may not show up in the reported statistics.

    14 columns in this table.

  • CDBQueryRuntimeStatistics

    This table details query operations executed against a SQL API account. By default, the query text and its parameters are obfuscated to avoid logging PII data with full text query logging available by request.

    15 columns in this table.

  • CDBTableApiRequests

    PII

    This table details data plane operations, specifically for Table API accounts.

    23 columns in this table.