CmdID / az / az monitor / az monitor activity-log
az monitor activity-log list
List and query activity log events. Azure CLI reference
11 options Its page in the Azure CLI reference
Options
--callerCaller to query for, such as an e-mail address or service principal ID.--correlation-idCorrelation ID to query.--filterReduces the set of data collected.<br>This argument is required and it also requires at least the start date/time.<br>The **$filter** argument is very restricted and allows only the following patterns.<br>- *List events for a resource group*: $filter=eventTimestamp ge '2014-07-16T04:36:37.6407898Z' and eventTimestamp le '2014-07-20T04:36:37.6407898Z' and resourceGroupName eq 'resourceGroupName'.<br>- *List events for resource*: $filter=eventTimestamp ge '2014-07-16T04:36:37.6407898Z' and eventTimestamp le '2014-07-20T04:36:37.6407898Z' and resourceUri eq 'resourceURI'.<br>- *List events for a subscription in a time range*: $filter=eventTimestamp ge '2014-07-16T04:36:37.6407898Z' and eventTimestamp le '2014-07-20T04:36:37.6407898Z'.<br>- *List events for a resource provider*: $filter=eventTimestamp ge '2014-07-16T04:36:37.6407898Z' and eventTimestamp le '2014-07-20T04:36:37.6407898Z' and resourceProvider eq 'resourceProviderName'.<br>- *List events for a correlation Id*: $filter=eventTimestamp ge '2014-07-16T04:36:37.6407898Z' and eventTimestamp le '2014-07-20T04:36:37.6407898Z' and correlationId eq 'correlationID'.<br><br>**NOTE**: No other syntax is allowed.--max-eventsMaximum number of records to return.--namespaceResource provider namespace.--offsetTime offset of the query range, in ##d##h format.--resource-group, -gName of resource group.--resource-idARM ID of a resource.--selectUsed to fetch events with only the given properties.<br>The **$select** argument is a comma separated list of property names to be returned.--start-time, --end-time--statusStatus to query for (ex: Failed)