none
How to find the author/creator of Application Insights? RRS feed

Answers

  • Hello Sathish,

    Thanks for reaching out!

    There are multiple ways of finding this information in Azure:

    • View the Azure Activity Log for the resource: Adding the relevant filters and looking at the "Event Initiated by" can give you that detail. But beware that activity logs are stored for a period of 90 days. However, for longer retention, you could collect those in a Log Analytics workspace, export it to Azure Storage, or stream it to an Event Hub for ingestion by a third-party service or custom analytics solution. Also note that you could create Activity Log alerts to get notified on specific events.

      Here is a screenshot for your reference:
    • Analyze logs from the Log Analytics workspace: When you connect an Activity Log to a Log Analytics workspace, entries will be written to the workspace into a table called AzureActivity that you can retrieve with a log query.
    • You could also explore auto-tagging the creator of the resource for easy discovery.

    Please note that the Smart Detection feature needs no configuration. It automatically warns you of potential performance problems and failure anomalies in your web application. However, changes to Smart Detection settings are also recorded in the Activity log as shown below:

    Hope this helps!

    Monday, July 29, 2019 6:32 AM
    Moderator

All replies

  • Hello Sathish,

    Thanks for reaching out!

    There are multiple ways of finding this information in Azure:

    • View the Azure Activity Log for the resource: Adding the relevant filters and looking at the "Event Initiated by" can give you that detail. But beware that activity logs are stored for a period of 90 days. However, for longer retention, you could collect those in a Log Analytics workspace, export it to Azure Storage, or stream it to an Event Hub for ingestion by a third-party service or custom analytics solution. Also note that you could create Activity Log alerts to get notified on specific events.

      Here is a screenshot for your reference:
    • Analyze logs from the Log Analytics workspace: When you connect an Activity Log to a Log Analytics workspace, entries will be written to the workspace into a table called AzureActivity that you can retrieve with a log query.
    • You could also explore auto-tagging the creator of the resource for easy discovery.

    Please note that the Smart Detection feature needs no configuration. It automatically warns you of potential performance problems and failure anomalies in your web application. However, changes to Smart Detection settings are also recorded in the Activity log as shown below:

    Hope this helps!

    Monday, July 29, 2019 6:32 AM
    Moderator
  • Thanks!

    I am using below query to figure out the author of the resource.

    AzureActivity
    | where ResourceGroup == "Resource_Group_Name" and Resource == "Resource_Name" 
    | where ActivityStatus == "Succeeded"
    | top 1 by EventSubmissionTimestamp asc

    This is working for CosmosDB resources and other few resources. But this is not working for Application Insights.

    Also, is it possible to find the author (or activity) of the resource if the Activity Log (or Log Analytics Work space) was not enabled for the resource?

    Please advise.


    Monday, July 29, 2019 3:53 PM
  • Hello Sathish,

    Thanks for reverting. The Azure Activity Log is primarily for activities that occur in Azure Resource Manager, and it provides insight into subscription-level events that have occurred in Azure. Therefore, no explicit enablement is required to start tracking activity, unlike how it is with Log Analytics workspaces.

    If the resource was created in the last 90 days, you can go to the AI resource in the Azure Portal and check its Activity log for events like "Update insights component". The "Event Initiated By" would give you the caller's email.
    Wednesday, July 31, 2019 2:18 AM
    Moderator
  • Thanks!
    Wednesday, July 31, 2019 3:22 PM
  • Happy to help! :)
    Wednesday, July 31, 2019 4:02 PM
    Moderator