azure - 需要 powershell 脚本来启用存储帐户和 key 保管库的诊断日志记录

Question

我正在使用以下脚本创建存储帐户、Key Vault 和 ADF。我还想在存储帐户和 Key Vault 上启用诊断日志记录。脚本运行良好并创建资源，但它不启用 KV 和存储帐户的诊断日志。如果您能提供帮助，我将不胜感激。

$subscription="Azure subscription 1"
$rgName = "Test"
$location = "eastus"
$storageaccountName = "tempaccountlogs"
$adfName = "tempdpadf"
$department = "Testtemp"
$kvname = "kvnamAkbt"

$sa = New-AzStorageAccount -ResourceGroupName $rgName -AccountName $storageaccountName -Location $location -SkuName Standard_LRS -Kind BlobStorage -AccessTier Hot -Tag @{department=$department}
$DataFactory = Set-AzDataFactoryV2 -Name $adfName -ResourceGroupName $rgName -Location $location -Tag @{chargecode=$chargeCode;department=$department;environment=$environment;project=$project}
$kv = New-AzKeyVault -VaultName $kvname -ResourceGroupName $rgName -Location $location


set-AzDiagnosticSetting -ResourceId $kv.ResourceId -StorageAccountId $sa.Id -Enabled $true -Categories AuditEvent
set-AzDiagnosticSetting -ResourceId $kv.ResourceId -StorageAccountId $sa.Id -RetentionEnabled $true -RetentionInDays 90

Answer 1

您的脚本的问题是它给出了错误:

A parameter cannot be found that matches parameter name 'Categories'.

您正在使用“类别”参数而不是“类别”。如果你检查这个documentation正确的参数是-Category，使用如下所示:

set-AzDiagnosticSetting -ResourceId $kv.ResourceId -StorageAccountId $sa.Id -Enabled $true -Category AuditEvent
set-AzDiagnosticSetting -ResourceId $kv.ResourceId -StorageAccountId $sa.Id -RetentionEnabled $true -RetentionInDays 90

要启用存储帐户的日志记录，请查看此 documentation .