We'll transition to using diagnostic settings to forward Azure activity logs on 30 September 2026

Hello @OV, Joel

Thanks for reaching out. I reviewed the Microsoft notice about the legacy Azure Activity Log forwarding retiring on 30 September 2026. Here’s a quick guide to check if you’re using the legacy setup and how to switch to the new Diagnostic Settings method.

The legacy export uses an older API and creates a legacy solution in Log Analytics. Use these checks to see if your environment is affected.

Legacy Activity Logs

Checking Your Log Analytics Workspace

1. Hop into the Azure Portal.
2. Look up Log Analytics workspaces and pick the one that gets your Activity Logs.
3. On the left, hit Solutions.

If you spot any of these solutions:

1. AzureActivity
2. Activity Log (Legacy)
3. Activity Log Analytics Solution
4. That means your workspace is set up with the legacy solution.

Subscription Activity Log Export Settings

1. In the Azure Portal, head to Subscriptions.
2. Pick your subscription.
3. On the left, go to Activity Log and then Export Activity Logs.
4. If you see an export profile here—rather than in Diagnostic Settings—it shows you’re on the legacy export method.

• Automation or Script Check - If you’re using scripts or automation that call APIs like.

1. providers/microsoft.insights/eventtypes/management/values
2. providers/microsoft.insights/logprofiles

→ These are legacy APIs, so you’ll need to swap them out before retirement.

How to Manually Set Up Activity Log Export with Diagnostic Settings

Microsoft now suggests using subscription-level Diagnostic Settings to send Activity Logs to your choice of:

• Log Analytics workspace
• Storage account
• Event Hub

Here’s how you can set this up:

Step-by-Step Guide for Creating Diagnostic Settings for Activity Logs
Open Your Subscription

1. Head over to the Azure Portal.
2. Search for Subscriptions.
3. Pick the subscription you want to work with.

• Access Diagnostic Settings

1. On the left, click Diagnostic Settings.
2. Hit + Add diagnostic setting.

Choose Activity Log Categories

Under Category details, select all categories you want to include (grabbing all is usually best):

• Administrative
• Security
• ServiceHealth
• Alert
• Recommendation
• Policy
• Autoscale

This covers all Activity Log events.

• Pick Your Destination- You can choose one or more options, whatever works for you:
• Send to Log Analytics Workspace

1. Switch on Send to Log Analytics workspace.
2. Select your workspace.

• Archive to a Storage Account

1. Turn on Archive to a storage account.
2. Pick your storage account.

• Stream to Event Hub

1. Enable Stream to an event hub.
2. Choose the Event Hub namespace and hub.

• Save Your Diagnostic Setting

1. Give it a clear name (like ActivityLogs-Prod-Diagnostic).
2. Click Save.

And that’s it you’ve switched to the new recommended method!

Remove Legacy Configuration After Migration :-

1. Go to Subscriptions → Activity Log → Export Activity Logs.
2. If a legacy export profile exists, delete or disable it.

Remove Legacy Log Analytics Solutions:

1. Open your Log Analytics workspace.
2. Select Solutions.
3. Remove AzureActivity or similar legacy solutions. These will stop receiving data automatically after retirement, but removing them helps keep the environment clean.

If you have any questions please revert back we will be happy to assist.

Reference link
https://learn.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings?tabs=portal

Thanks,
Manish Deshpande.