Question

Your operations team must retain Azure Cosmos DB data-plane request logs for seven years to satisfy a compliance audit, while also sending a 90-day copy to a Log Analytics workspace for interactive KQL queries. Costs must be minimized for the long-term retention copy, which is queried only rarely. Which configuration should you implement?

Accepted Answer

Create one diagnostic setting that sends DataPlaneRequests to a Log Analytics workspace and, in the same setting, also archives the logs to an Azure Storage account for long-term retention.

Answer

Create a single diagnostic setting that streams DataPlaneRequests to Log Analytics only, then rely on the workspace's data retention policy set to 2555 days.

Answer

Enable continuous backup on the account and use point-in-time restore to recover the request logs when the auditor requests them.

Answer

Query the Normalized RU Consumption metric in Azure Monitor Metrics and export the chart to CSV every 90 days for archival.