What this test does
This test connects to your Azure subscription via the ComplyJet integration and verifies whether subscription-level Activity Logs are being archived to a valid Azure Storage Account.
Specifically, the test checks:
If one or more Diagnostic Settings exist at the subscription scope.
If those diagnostic settings have logs configured (the monitor only checks that logs exist, not which categories).
If at least one setting includes a Storage Account destination.
If the referenced Storage Account still exists and is valid in Azure.
If a valid storage account is found, the test passes and reports the storage account name.
If no valid diagnostic setting is found, or the storage account is missing, the test fails.
If the Azure API cannot be queried, the test reports an exception.
How to fix this (Remediation)
Follow these steps in the Azure Portal:
Log in to the Azure Portal.
In the menu/search bar, select Subscriptions and choose the subscription you want to configure.
Go to Activity log. At the top of the page, click Export Activity Logs.
On the Diagnostic settings page:
If a setting already exists routing logs to a storage account in the same subscription, verify it points to a valid account.
If none exists, click Add diagnostic setting.
Provide a descriptive name (e.g.,
Subscription Activity Logs).Select the log categories you want (best practice: include Administrative, Security, ServiceHealth, Alert, Recommendation, Policy, Autoscale, ResourceHealth).
Under Destination details, select Archive to a storage account.
Choose an existing storage account in the same subscription, or create a new one.
Click Save.
Return to ComplyJet and re-run the test to confirm logs are being archived successfully.