Log Analytics tables for microsoft.aad/domainservices

Table Categories Solutions Supports basic log plan Queries
AADDomainServicesAccountLogon

resources, security LogManagement No Yes
AADDomainServicesAccountManagement

resources, security LogManagement No Yes
AADDomainServicesDNSAuditsDynamicUpdates

DNS server audit events enable change tracking on the DNS server. This table contains operational audit events for dynamic updates.

LogManagement Yes -
AADDomainServicesDNSAuditsGeneral

DNS server audit events enable change tracking on the DNS server. An audit event is logged each time server, zone, or resource record settings are changed. This includes operational events such as zone transfers, and DNSSEC zone signing and unsigning. This table captures audit events that are not from dynamic updates.

LogManagement Yes -
AADDomainServicesDirectoryServiceAccess

resources, security LogManagement No Yes
AADDomainServicesLogonLogoff

resources, security LogManagement No Yes
AADDomainServicesPolicyChange

resources, security LogManagement No Yes
AADDomainServicesPrivilegeUse

resources, security LogManagement No Yes
AADDomainServicesSystemSecurity

resources, security LogManagement No Yes
AzureActivity

Entries from the Azure Activity log that provides insight into any subscription-level or management group level events that have occurred in Azure.

resources, audit, security LogManagement No Yes
AzureMetrics

Metric data emitted by Azure services that measure their health and performance.

resources, monitor LogManagement Yes Yes