{
  "info": {
    "_postman_id": "dd3e86d1-2b0e-46ce-8933-3e0beb5cf32d",
    "name": "Azure Monitor Activity Log API",
    "description": "Access Azure Activity Log events for subscription-level operations including resource creation, updates, deletions, and administrative actions.\n\nContact Support:\n Name: Microsoft Azure Support",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-06-05T15:11:41.000Z",
    "updatedAt": "2026-06-05T15:11:41.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-dd3e86d1-2b0e-46ce-8933-3e0beb5cf32d"
  },
  "item": [
    {
      "name": "subscriptions",
      "item": [
        {
          "name": "{subscriptionId}",
          "item": [
            {
              "name": "providers",
              "item": [
                {
                  "name": "Microsoft.Insights",
                  "item": [
                    {
                      "name": "eventtypes",
                      "item": [
                        {
                          "name": "management",
                          "item": [
                            {
                              "name": "values",
                              "item": [
                                {
                                  "name": "Azure Monitor List Activity Log events",
                                  "id": "1d1df64a-9c5c-4924-98c9-f2deb8347db4",
                                  "protocolProfileBehavior": {
                                    "disableBodyPruning": true
                                  },
                                  "request": {
                                    "method": "GET",
                                    "header": [
                                      {
                                        "key": "Accept",
                                        "value": "application/json"
                                      }
                                    ],
                                    "url": {
                                      "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/Microsoft.Insights/eventtypes/management/values?api-version=2015-04-01&$filter=<string>&$select=<string>",
                                      "host": [
                                        "{{baseUrl}}"
                                      ],
                                      "path": [
                                        "subscriptions",
                                        ":subscriptionId",
                                        "providers",
                                        "Microsoft.Insights",
                                        "eventtypes",
                                        "management",
                                        "values"
                                      ],
                                      "query": [
                                        {
                                          "description": "(Required) Client API version.",
                                          "key": "api-version",
                                          "value": "2015-04-01"
                                        },
                                        {
                                          "description": "(Required) Reduces the set of data collected. Must include a time range filter using eventTimestamp. Supports filtering by resourceGroupName, resourceUri, resourceProvider, eventChannels, status, subStatus, correlationId, and caller. Example: eventTimestamp ge '2024-01-01' and eventTimestamp le '2024-01-02'.",
                                          "key": "$filter",
                                          "value": "<string>"
                                        },
                                        {
                                          "description": "Used to fetch events with only the given properties. Accepts a comma-separated list of property names.",
                                          "key": "$select",
                                          "value": "<string>"
                                        }
                                      ],
                                      "variable": [
                                        {
                                          "id": "a9a73524-754a-4f3f-8c93-ecb693290f1e",
                                          "key": "subscriptionId",
                                          "value": "<string>",
                                          "description": "(Required) The ID of the target subscription."
                                        }
                                      ]
                                    },
                                    "description": "Provides the list of records from the Activity Log. The $filter parameter is required and must include a time range. Optionally filter by resource group, resource, resource provider, or event status."
                                  },
                                  "response": [
                                    {
                                      "id": "381084da-a94b-41fb-bfe3-e01b6b8a23f2",
                                      "name": "Successful request to list Activity Log events.",
                                      "originalRequest": {
                                        "method": "GET",
                                        "header": [
                                          {
                                            "key": "Accept",
                                            "value": "application/json"
                                          },
                                          {
                                            "description": "Added as a part of security scheme: oauth2",
                                            "key": "Authorization",
                                            "value": "<token>"
                                          }
                                        ],
                                        "url": {
                                          "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/Microsoft.Insights/eventtypes/management/values?api-version=2015-04-01&$filter=<string>&$select=<string>",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "subscriptions",
                                            ":subscriptionId",
                                            "providers",
                                            "Microsoft.Insights",
                                            "eventtypes",
                                            "management",
                                            "values"
                                          ],
                                          "query": [
                                            {
                                              "description": "(Required) Client API version.",
                                              "key": "api-version",
                                              "value": "2015-04-01"
                                            },
                                            {
                                              "description": "(Required) Reduces the set of data collected. Must include a time range filter using eventTimestamp. Supports filtering by resourceGroupName, resourceUri, resourceProvider, eventChannels, status, subStatus, correlationId, and caller. Example: eventTimestamp ge '2024-01-01' and eventTimestamp le '2024-01-02'.",
                                              "key": "$filter",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Used to fetch events with only the given properties. Accepts a comma-separated list of property names.",
                                              "key": "$select",
                                              "value": "<string>"
                                            }
                                          ],
                                          "variable": [
                                            {
                                              "key": "subscriptionId"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "OK",
                                      "code": 200,
                                      "_postman_previewlanguage": "json",
                                      "header": [
                                        {
                                          "key": "Content-Type",
                                          "value": "application/json"
                                        }
                                      ],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": "{\n  \"value\": [\n    {\n      \"authorization\": {\n        \"action\": \"<string>\",\n        \"role\": \"<string>\",\n        \"scope\": \"<string>\"\n      },\n      \"claims\": {\n        \"Ut_2b\": \"<string>\",\n        \"nisi_0\": \"<string>\",\n        \"adipisicing9\": \"<string>\"\n      },\n      \"caller\": \"<string>\",\n      \"description\": \"<string>\",\n      \"id\": \"<string>\",\n      \"eventDataId\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"eventName\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"category\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"httpRequest\": {\n        \"clientRequestId\": \"<string>\",\n        \"clientIpAddress\": \"<string>\",\n        \"method\": \"<string>\",\n        \"uri\": \"<string>\"\n      },\n      \"level\": \"Warning\",\n      \"resourceGroupName\": \"<string>\",\n      \"resourceProviderName\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"resourceId\": \"<string>\",\n      \"resourceType\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"operationId\": \"<string>\",\n      \"operationName\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"properties\": {\n        \"officia_b\": \"<string>\",\n        \"enim7\": \"<string>\"\n      },\n      \"status\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"subStatus\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"eventTimestamp\": \"<dateTime>\",\n      \"submissionTimestamp\": \"<dateTime>\",\n      \"subscriptionId\": \"<string>\",\n      \"tenantId\": \"<string>\"\n    },\n    {\n      \"authorization\": {\n        \"action\": \"<string>\",\n        \"role\": \"<string>\",\n        \"scope\": \"<string>\"\n      },\n      \"claims\": {\n        \"cupidatata\": \"<string>\"\n      },\n      \"caller\": \"<string>\",\n      \"description\": \"<string>\",\n      \"id\": \"<string>\",\n      \"eventDataId\": \"<string>\",\n      \"correlationId\": \"<string>\",\n      \"eventName\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"category\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"httpRequest\": {\n        \"clientRequestId\": \"<string>\",\n        \"clientIpAddress\": \"<string>\",\n        \"method\": \"<string>\",\n        \"uri\": \"<string>\"\n      },\n      \"level\": \"Error\",\n      \"resourceGroupName\": \"<string>\",\n      \"resourceProviderName\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"resourceId\": \"<string>\",\n      \"resourceType\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"operationId\": \"<string>\",\n      \"operationName\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"properties\": {\n        \"reprehenderit5\": \"<string>\",\n        \"consequat_0bc\": \"<string>\"\n      },\n      \"status\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"subStatus\": {\n        \"value\": \"<string>\",\n        \"localizedValue\": \"<string>\"\n      },\n      \"eventTimestamp\": \"<dateTime>\",\n      \"submissionTimestamp\": \"<dateTime>\",\n      \"subscriptionId\": \"<string>\",\n      \"tenantId\": \"<string>\"\n    }\n  ],\n  \"nextLink\": \"<string>\"\n}",
                                      "createdAt": "2026-06-05T15:11:42.000Z",
                                      "updatedAt": "2026-06-05T15:11:42.000Z",
                                      "uid": "35240-381084da-a94b-41fb-bfe3-e01b6b8a23f2"
                                    },
                                    {
                                      "id": "3cd99ced-c863-42b0-b1a6-980984f340c2",
                                      "name": "Error response describing why the operation failed.",
                                      "originalRequest": {
                                        "method": "GET",
                                        "header": [
                                          {
                                            "key": "Accept",
                                            "value": "application/json"
                                          },
                                          {
                                            "description": "Added as a part of security scheme: oauth2",
                                            "key": "Authorization",
                                            "value": "<token>"
                                          }
                                        ],
                                        "url": {
                                          "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/Microsoft.Insights/eventtypes/management/values?api-version=2015-04-01&$filter=<string>&$select=<string>",
                                          "host": [
                                            "{{baseUrl}}"
                                          ],
                                          "path": [
                                            "subscriptions",
                                            ":subscriptionId",
                                            "providers",
                                            "Microsoft.Insights",
                                            "eventtypes",
                                            "management",
                                            "values"
                                          ],
                                          "query": [
                                            {
                                              "description": "(Required) Client API version.",
                                              "key": "api-version",
                                              "value": "2015-04-01"
                                            },
                                            {
                                              "description": "(Required) Reduces the set of data collected. Must include a time range filter using eventTimestamp. Supports filtering by resourceGroupName, resourceUri, resourceProvider, eventChannels, status, subStatus, correlationId, and caller. Example: eventTimestamp ge '2024-01-01' and eventTimestamp le '2024-01-02'.",
                                              "key": "$filter",
                                              "value": "<string>"
                                            },
                                            {
                                              "description": "Used to fetch events with only the given properties. Accepts a comma-separated list of property names.",
                                              "key": "$select",
                                              "value": "<string>"
                                            }
                                          ],
                                          "variable": [
                                            {
                                              "key": "subscriptionId"
                                            }
                                          ]
                                        }
                                      },
                                      "status": "Internal Server Error",
                                      "code": 500,
                                      "_postman_previewlanguage": "json",
                                      "header": [
                                        {
                                          "key": "Content-Type",
                                          "value": "application/json"
                                        }
                                      ],
                                      "cookie": [],
                                      "responseTime": null,
                                      "body": "{\n  \"code\": \"<string>\",\n  \"message\": \"<string>\"\n}",
                                      "createdAt": "2026-06-05T15:11:42.000Z",
                                      "updatedAt": "2026-06-05T15:11:42.000Z",
                                      "uid": "35240-3cd99ced-c863-42b0-b1a6-980984f340c2"
                                    }
                                  ],
                                  "createdAt": "2026-06-05T15:11:42.000Z",
                                  "updatedAt": "2026-06-05T15:11:42.000Z",
                                  "uid": "35240-1d1df64a-9c5c-4924-98c9-f2deb8347db4"
                                }
                              ],
                              "id": "a8f59be5-8857-4662-854e-9df7eb37cf8f",
                              "createdAt": "2026-06-05T15:11:42.000Z",
                              "updatedAt": "2026-06-05T15:11:42.000Z",
                              "uid": "35240-a8f59be5-8857-4662-854e-9df7eb37cf8f"
                            }
                          ],
                          "id": "b036fd2f-5318-4075-aac9-bcc2b2f0967d",
                          "createdAt": "2026-06-05T15:11:42.000Z",
                          "updatedAt": "2026-06-05T15:11:42.000Z",
                          "uid": "35240-b036fd2f-5318-4075-aac9-bcc2b2f0967d"
                        }
                      ],
                      "id": "0eb4bfa4-dcd7-46fa-a164-c803e82896e3",
                      "createdAt": "2026-06-05T15:11:42.000Z",
                      "updatedAt": "2026-06-05T15:11:42.000Z",
                      "uid": "35240-0eb4bfa4-dcd7-46fa-a164-c803e82896e3"
                    }
                  ],
                  "id": "5c866981-311f-46f1-9663-f3f30c76f2a7",
                  "createdAt": "2026-06-05T15:11:42.000Z",
                  "updatedAt": "2026-06-05T15:11:42.000Z",
                  "uid": "35240-5c866981-311f-46f1-9663-f3f30c76f2a7"
                }
              ],
              "id": "82c30377-a59c-4f16-80e5-235162238d70",
              "createdAt": "2026-06-05T15:11:42.000Z",
              "updatedAt": "2026-06-05T15:11:42.000Z",
              "uid": "35240-82c30377-a59c-4f16-80e5-235162238d70"
            }
          ],
          "id": "fa7128b5-3276-41df-98d3-69327c1ef605",
          "createdAt": "2026-06-05T15:11:42.000Z",
          "updatedAt": "2026-06-05T15:11:42.000Z",
          "uid": "35240-fa7128b5-3276-41df-98d3-69327c1ef605"
        }
      ],
      "id": "9b0d128a-4845-4ce2-b083-fd893feee199",
      "createdAt": "2026-06-05T15:11:42.000Z",
      "updatedAt": "2026-06-05T15:11:42.000Z",
      "uid": "35240-9b0d128a-4845-4ce2-b083-fd893feee199"
    }
  ],
  "auth": {
    "type": "oauth2",
    "oauth2": [
      {
        "key": "scope",
        "value": "https://management.azure.com/.default",
        "type": "string"
      },
      {
        "key": "accessTokenUrl",
        "value": "https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token",
        "type": "string"
      },
      {
        "key": "grant_type",
        "value": "client_credentials",
        "type": "string"
      }
    ]
  },
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://management.azure.com"
    }
  ]
}