Update Azure Monitor Log Retention Period

This CLI command requires 'Microsoft.Insights/LogProfiles/[Read, Write, Delete]' permission. Successful execution will update the Azure monitor log profile retention policy days to 365 days.

Cloud Security Posture Management Playbooks

Details

IDa2cd59d579b10efd55ef70bacb21e989
Suggestion ReasonRecommended for remediating misconfigurations with Azure Activity Log retention period set to less than 365 days

Source

Trigger_-_Update_Azure_Monitor_Log_Retention_Period.json
Download History Raw 
{
  "trigger_id": "a2cd59d579b10efd55ef70bacb21e989",
  "playbook_id": "",
  "suggestion_reason": "Recommended for remediating misconfigurations with Azure Activity Log retention period set to less than 365 days",
  "description": "This CLI command requires 'Microsoft.Insights/LogProfiles/[Read, Write, Delete]' permission. Successful execution will update the Azure monitor log profile retention policy days to 365 days.",
  "trigger_name": "Update Azure Monitor Log Retention Period",
  "automation_type": "command",
  "automation_id": "azure-monitor-log-retention-period-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "700e9da9-b460-41f7-a4c6-b38cc9fcf588"
        }
      ]
    }
  }
}