ArcK8sAudit
24 columns from 1 Azure resource type.
PII
Contains all Kubernetes API Server audit logs including events with the get and list verbs. These events are useful for monitoring all of the interactions with the Kubernetes API. To limit the scope to modifying operations see the ArcK8sAuditAdmin table. Requires Diagnostic Settings to use the Resource Specific destination table.
Source: Microsoft Learn
Attributes
- Resource types
- microsoft.kubernetes/connectedclusters
- Categories
- Audit, Azure Resources, Containers
- Solutions
- LogManagement
- Basic log
- Yes
- Ingestion-time DCR support
- Yes
- Lake-only ingestion
- Yes
- Sample Queries
- -
Columns
24 columns in this table.
Routing resource types
-
microsoft.kubernetes/connectedClusters
- Categories
- kube-audit