Configure Diagnostic Settings for Azure Resources

Azure Monitor diagnostic settings control how platform logs and metrics are collected from Azure resources. Every Azure resource generates operational data - access attempts, configuration changes, performance metrics - but none of this telemetry is captured unless diagnostic settings are explicitly configured. Without them, critical signals are silently discarded.

In this lab, you will enable diagnostic settings on a pre-provisioned Storage Account and Key Vault, configure them to send logs and metrics to an existing Log Analytics workspace, write KQL queries to explore the ingested diagnostic data, and verify that the expected log categories are flowing correctly.

Objectives

Upon completing this beginner level lab, you will be able to:

• Enable diagnostic settings on an Azure Storage Account to send blob and queue logs to a Log Analytics workspace
• Configure diagnostic settings on an Azure Key Vault to route audit events and metrics
• Identify and select appropriate log categories for each resource type
• Write KQL queries in Log Analytics to explore ingested diagnostic data
• Verify that log categories are actively flowing

Who is this lab for?

This lab is designed for:

• Azure administrators preparing for the AZ-104 certification who need hands-on experience with monitoring and diagnostics
• Cloud engineers building foundational observability skills for Azure environments