Redis Cache logs should be sent to Log Analytics

Medium Azure General redis-redis-cache-logs-sent

Applies to

Microsoft.Cache/redis

What CGPulse checks

A resource passes this rule when diagnosticSettings.hasLogAnalytics must equal true. Anything else is reported as a finding with the evaluated property value attached as evidence.

How to fix it

Configure diagnostic logs to Log Analytics for centralized security monitoring. In Azure Portal: Redis Cache > Diagnostic settings > Add diagnostic setting. See: https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-monitor-diagnostic-settings

CLI

az monitor diagnostic-settings create --resource "{id}" --name "{name}-diag" --workspace var.workspace_id --logs "[{categoryGroup:allLogs,enabled:true}]" --metrics "[{category:AllMetrics,enabled:true}]"

Terraform

resource "azurerm_monitor_diagnostic_setting" "redis" {
  name                       = "{name}-diag"
  target_resource_id         = "{id}"
  log_analytics_workspace_id = var.workspace_id
  enabled_log {
    category_group = "allLogs"
  }
}

Compliance frameworks

Cloud Security BaselineLT-5

Vendor documentation

Is your environment compliant with this rule?

CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.

Run a free scan