just created a budget but could not see it in az monitor activity-log list

Question

just created a budget but could not see it in az monitor activity-log list

Martin26 25

Dear,

Are budget activities logged in in way we can list them over az monitor activity-log list ? to be precise, here's the full command I used and ran after 30 seconds the budget creation:

az monitor activity-log list \
   --max-events 50  \
   --offset 1h   \
   --query "[].{Time:eventTimestamp, Resource:resourceId, Operation:operationName.localizedValue, Status:status.localizedValue}" \
   --output table

If not, how can I ensure I can list ALL activities using an azure command as this account is my own experimental account with full control ?

Thank you,

Martin

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Stanislav Zhelyazkov 29,826 MVP Volunteer Moderator

Hi,

I am assuming you are creating budget that is not scoped to subscription but some other entity like billing profile and in that case budgets are logged at tenant/directory activity logs.

User's image

It is not possible to query those via az monitor activity-log command as it does it only on subscription scope. You need to use the rest command.

START_TIME=$(date -u -d '1 hour ago' +%Y-%m-%dT%H:%M:%SZ)

az rest --method get \
  --uri "https://management.azure.com/providers/Microsoft.Insights/eventtypes/management/values?api-version=2015-04-01&\$filter=eventTimestamp ge '$START_TIME'" \
  --query 'value[].{Time:eventTimestamp, Resource:resourceId, Operation:operationName.localizedValue, Status:status.localizedValue}' \
  --output table

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Martin26 25

Thanks, you saved my day! ended up with this version for my purposes:

az rest --method get --uri "https://management.azure.com/providers/Microsoft.Insights/eventtypes/management/values?api-version=2015-04-01&\$filter=eventTimestamp ge '$START_TIME'"   --query 'value[].{
    time:eventTimestamp,
    caller:caller,
    claims:claims,
    authorization:authorization,
    httpRequest:httpRequest,
    resourceId:resourceId,
    operationName:operationName,
    status:status,
    subStatus:subStatus,
    description:description,
    properties:properties,
    correlationId:correlationId,
    operationId:operationId
  }' --output json

Stanislav Zhelyazkov 29,826 Reputation points MVP Volunteer Moderator

2026-07-22T18:40:52.0666667+00:00

Glad to help and that you have solved it!