"Enable allLogs category group resource logging for supported resources to Log Analytics" creates duplicate logs for Application Insights already using a Log Analytics Workspace

[djbark]

"Enable allLogs category group resource logging for supported resources to Log Analytics" creates duplicate logs for Application Insights already using a Log Analytics Workspace

[diegosrp]

Hi djbark, I looked at the documentation for the azurerm_application_insights resource and the workspace_id is optional (I didn't do any testing, but I believe you can comment on this parameter and see how the plan behaves).

Or if you want to control it through the resource, I believe another option is to add an exemption to this policy/resource and remove the setbypolicy that it will not create again.

[djbark]

@diegosrp It is optional, but once added it cannot be removed (at least not without deleting and re-creating the resource). Furthermore my understanding is that the recommendation is to migrate to workspace-based Application Insights resources so would seem a backwards step.

I would rather not do exemptions to individual policies that are part of an initiative provided as part of the CAF, but maybe that is the only option.

[diegosrp]

I understood.

In my view, I see CAF as the best practices/recommendations, however it is not suitable for all businesses, sometimes we have a compliance requirement or something that will not meet our needs and we need to adjust.

Regarding exemption, you can put it in the specific resource_id, meaning it will not only apply to the specific resource.

[diegosrp]