Change Tracking

Activity Explorer

Search and filter Azure Activity Logs across all your subscriptions from one place, with up to 365 days of history. Investigate user actions, resource changes, and administrative operations.

Start free trial Request a demo

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

Investigating user activities across a large Azure environment presents real challenges:

Distributed Logs: Activity logs exist per-subscription, requiring teams to check each one separately
Finding the Needle: Locating specific actions or users across hundreds of daily log entries takes time
Correlation Effort: Connecting related events across resources and timeframes requires manual work
Incident Pressure: During outages, every minute spent searching is a minute not spent resolving

The Solution

StratoLens Activity Explorer unifies activity logs from all subscriptions into a single searchable interface:

Unified Search: Query activity logs across your entire Azure estate from one place
Powerful Filtering: Filter by user, resource, operation type, status, or custom timeframes
Quick Investigation: Find specific actions in seconds, not hours of manual searching

From the product

Inside Activity Explorer

StratoLens Activity Explorer filtered to a service principal, showing the Azure Activity Log entry for a route table modification with actor and timestamp — Activity Explorer in the Contoso Financial demo environment, filtered to a network automation service principal and landing on the route table change that later showed up as a cost spike. Shown with demo-environment data.

The investigation view answering who opened a management port to the Internet, with the user, operation, and time in a single row.

Delete operations from a single automation run grouped in one timeline, turning a late-night mass deletion into a readable story.

Benefits

Key benefits

Unified activity log search across all subscriptions

Search up to 365 days of activity history

Filter by user, resource, operation, or timeframe

Use cases

Common use cases

Incident investigation and root cause analysis

User activity audits for compliance

Track specific administrative operations

Self-hosted

Runs in your tenant. Reads everything, changes nothing.

StratoLens deploys from the Azure Marketplace into your own tenant and scans your subscriptions over read-only Azure APIs. The data behind Activity Explorer is collected and stored inside your tenant; there is no StratoLens cloud holding a copy.

Read-only scans via Azure management APIs
Every scan at rest in your tenant, never a vendor cloud
Deployed from the Azure Marketplace in under 15 minutes

Learn more about data residency and security architecture

Want the details?

Explore our documentation to see how Activity Explorer works in detail.

Read Documentation View All Features

Start your 14-day free trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

When the 14 days end, billing starts on your Azure invoice at your tier. One toggle in Settings turns it off, any time.

Start free trial

Request a demo

Not ready to install anything? Browse the Azure Footguns Database: 97 documented ways Azure quietly costs money or creates risk.