I am able to find out the diagnostic setting for KeyVault - when I enable it individually by selecting the specified category - AuditEvent using the command Get-AzDiagnosticSetting
But when I enable it by selecting Category Groups - audit & allLogs above command does not return any output.
Is there any alternative approach to check if AuditEvent logging is enabled for KeyVault?
Thanks!
You can use this Azure Management REST API Diagnostic Settings-Get to get the active Diagnostic settings for the specified resource. I have tested this from my end it is working fine.
Here is the sample screenshot for reference: