Enable logging by category group for Network security groups (microsoft.network/networksecuritygroups) to Event Hub: Non existent default option 'audit'

[thedevopsjedi]

Details of the scenario you tried and the problem that is occurring

I have assigned the Policy named Enable logging by category group for Network security groups (microsoft.network/networksecuritygroups) to Event Hub which I believe is represented in built-in-policies/policyDefinitions/Monitoring/DS_EH_network-networksecuritygroups_DINE.json however the default option for Category Group is audit and this resource does not have an audit category so this is incorrect.

When left using the default option the policy appears to apply correctly but no diagnostic settings are configured.

Verbose logs showing the problem

N/A

Suggested solution to the issue

Please remove audit from the Category Group parameters and set set allLogs as the default option.