Find SKU of deployed resources in Log Analytics

I have configured the following Kusto query to gather info of Azure deployments in our subscription.

AzureActivity 
| where ResourceProviderValue startswith "Microsoft.resources" 
| where ActivitySubstatusValue contains "Created"

This query will display various information about new deployments across all resource providers. These are the columns that are included when running the query:

TenantId, SourceSystem, CallerIpAddress, CategoryValue, CorrelationId, Authorization, Authorization_d, Claims, Claims_d, Level, OperationNameValue, Properties, Properties_d, Caller, EventDataId, EventSubmissionTimestamp, HTTPRequest, OperationId, ResourceGroup, ResourceProviderValue, ActivityStatusValue, ActivitySubstatusValue, Hierarchy, TimeGenerated, SubscriptionId, OperationName, ActivityStatus, ActivitySubstatus, Category, ResourceId, ResourceProvider, Resource, Type, _ResourceId

however not the SKU of the deployed resource.

I want to monitor the deployed resources in a subscription, including SKU's. Is it possible to include the SKU of deployed resources of all resource providers in a Log Analytics query from Azure Activity logs?

CodePudding user response：

We have tested this in our local environment , Below analysis are based on our observations.

The Activity log is a