scanning diagnostic settings results in a fatal error

[kewalaka]

Expected Behavior

Scans complete successfully

Actual Behavior

I ran the following, and there was an issue with the first diagnostic settings, as reported below:

PS C:\tools\azqr>  azqr scan -o 20240131.results --debug
2024-01-31T08:57:03+13:00 DBG Debug logging enabled
2024-01-31T08:57:08+13:00 INF Scanning subscriptions/...fa0f7c1 for Private Endpoints
2024-01-31T08:57:09+13:00 INF Scanning subscriptions/...fa0f7c1 for Resource Ids
2024-01-31T08:57:11+13:00 INF Scanning subscriptions/...fa0f7c1 for Diagnostic Settings
2024-01-31T08:57:12+13:00 FTL Failed to get diagnostic settings error="unmarshalling type *scanners.ArmBatchResponse: unmarshalling type *armmonitor.DiagnosticSettingsResourceCollection: json: cannot unmarshal string into Go value of type map[string]json.RawMessage" 

I can't find the debug log to share - no output file has been created.

The diagnostics settings are set by policy, using the EPAC framework.

Steps to Reproduce the Problem

Not sure of specifics - but consistently happens on the first diagnostic setting. Happy to be given more guidance to try.

[cmendible]

Hi @kewalaka,

can you please set the AZURE_SDK_GO_LOGGING environment variable to all, run the tool with the --debug flag and then share the console output with us (mask any values you don't want to share).

Also, is the credential Subscription Reader?

[cmendible]

@kewalaka can you please provide more information? I'm not able to reproduce this issue.

[cmendible]

The error seem to happen when Azure CLI is used as the authentication method and the user or service principal has access to one or more Tenant.

To avoid this problems run:

az logout
az account clear
az login -t <tenand>

and the scan as needed.