Ensure that a 'Diagnostic Setting' exists for Subscription Activity Logs
Why This Matters
Azure Activity Logs provide a record of control plane events for your subscription, including resource modifications, service health incidents, and security alerts. Without diagnostic settings configured for proper log export, these logs are retained for only 90 days, limiting your ability to investigate historical security incidents or meet compliance requirements for longer term log retention.
What Aether365 Checks
Aether365 verifies whether at least one diagnostic setting exists for your subscription's Activity Logs. This check appears in the Aether365 dashboard under the azure-diagnostic-settings category and flags subscriptions missing a diagnostic setting for log export.
How to Fix
To enable diagnostic settings for your subscription Activity Logs using the Azure Portal: