Azure Policy Initiative not generating Activity logs

Thank you for your quick response.

I know I can access it from the activity logs but that is the issue. When I go to my activity logs after the creation of policy assignment, many existing non-compliant resources were found in the non-compliant resource tab but they did not get logged in the activity log tab. The log you see from 3 days ago is of new resource created AFTER I applied the initiative.

What I need is the logs for existing resources that are non-compliant once i apply the policy initiative

Hi Mansi Solanki

Non-Compliant resource will not be registered in Activity log. Run the script below to export logs. It retrieves details of all resource names, policy definition names, resource groups, subscription names, and locations from all Azure subscriptions.  

# Login with Connect-AzAccount if not using Cloud Shell
 Connect-AzAccount
# Initialize an empty array for storing non-compliant resources
$vmArray = @()
# Get all Azure subscriptions
$azureSubscriptions = Get-AzSubscription
# Loop through each subscription
foreach ($subscription in $azureSubscriptions) {
   
    # Set the Azure context to the current subscription
    Set-AzContext -SubscriptionId $subscription.Id
    # Get non-compliant resources for the current subscription
    $nonCompliantResources = Get-AzPolicyState | Where-Object { $_.ComplianceState -eq "NonCompliant" }
    # Output the count of non-compliant resources for the current subscription
    Write-Host "Subscription: $($subscription.Name) - Non-Compliant Resources: $($nonCompliantResources.Count)"
    # Retrieve and process non-compliant resources
    foreach ($resource in $nonCompliantResources) {
        $resourceName = $resource.resourceId.Split('/')[-1]
        $resourceType = $resource.resourceType
        $complianceState = $resource.complianceState
        $resourceGroup = $resource.resourceGroup
        $resourceLocation = $resource.resourceLocation
        $policyDefinitionName = $resource.PolicyDefinitionReferenceId
        # Store resource details in an object
        $vmArray += New-Object PSObject -Property @{
            ResourceType         = $resourceType
            SubscriptionName     = $subscription.Name
            ComplianceState      = $complianceState
            ResourceName         = $resourceName
            ResourceLocation     = $resourceLocation
            PolicyDefinitionName = $policyDefinitionName
            ResourceGroup        = $resourceGroup
        }
    }
}
# Export the results to a CSV file
$vmArray | Export-CSV -Path ".\compliance.csv" -NoTypeInformation
Write-Host "Compliance report exported to compliance.csv"

Output For Reference.

let us know if you have any further queries. I’m happy to assist you further.

If the information provided was helpful, please don't forget to Accept the Answer and upvote it. This helps others in the community and would be greatly appreciated.

Hi Mansi Solanki
Just want to check if the above answer worked for you or else please let us know if any help, we are always here to help whenever you need us.

If the information provided was helpful, please don't forget to Accept the Answer and upvote it. This helps others in the community and would be greatly appreciated.