Vnet diagnostic settings

modules/azure/virtual_network/main.tf

@@ -26,3 +26,34 @@ resource "azurerm_virtual_network" "virtual_network" {
     ignore_changes = [subnet]
   }
 }
+
+
+data "azurerm_monitor_diagnostic_categories" "diagnostic_categories" {
+  count       = var.loganalytics_diagnostic_setting == null ? 0 : 1
+  resource_id = azurerm_virtual_network.virtual_network.id
+}
+
+resource "azurerm_monitor_diagnostic_setting" "diagnostic_setting" {
+  count                      = var.loganalytics_diagnostic_setting == null ? 0 : 1
+  name                       = "diag-${var.name}"
+  target_resource_id         = azurerm_virtual_network.virtual_network.id
+  log_analytics_workspace_id = var.loganalytics_diagnostic_setting.workspace_id
+
+
+  dynamic "enabled_log" {
+    for_each = var.loganalytics_diagnostic_setting.categories == null ? data.azurerm_monitor_diagnostic_categories.diagnostic_categories[0].log_category_types : var.loganalytics_diagnostic_setting.categories
+
+    content {
+      category = enabled_log.value
+    }
+  }
+
+  dynamic "metric" {
+    for_each = var.loganalytics_diagnostic_setting.metrics == null ? data.azurerm_monitor_diagnostic_categories.diagnostic_categories[0].metrics : var.loganalytics_diagnostic_setting.metrics
+
+    content {
+      category = metric.value
+      enabled  = true
+    }
+  }
+}

modules/azure/virtual_network/variables.tf

@@ -17,3 +17,13 @@ variable "address_space" {
   type        = list(string)
   description = "Address space of the virtual network."
 }
+
+variable "loganalytics_diagnostic_setting" {
+  type        = object({
+      workspace_id     = string, // log analytics workspace ID
+      categories = optional(list(string)), // null list,means send all categories
+      metrics  = optional(list(string)), // null list means send all metrics
+  })
+  description = "Specifies the log categories that have to be sent to Log analytics."
+  default     = null
+}