Provides the ability to retrieve logs for de-allocated Virtual Machines

ActivityLogs.ps1

$logs = @()
$subscriptions = Get-AzSubscription
$subscriptions | ForEach-Object {
    Set-AzContext -SubscriptionObject $_ | Out-Null
    $resourceGroups = Get-AzResourceGroup
    $resourceGroups | ForEach-Object {
        $logs += Get-AzLog `
            -ResourceGroup $_.ResourceGroupName `
            -StartTime (Get-Date).AddDays(-14) `
            -WarningAction SilentlyContinue `
            | Where-Object -FilterScript {$_.OperationName.Value -like "Microsoft.Compute/virtualMachines/deallocate/action"}
    }
}

$virtualMachineNames = @()
$count = 0
$logs | ForEach-Object {
    $virtualMachineNames += $logs[$count].Id.Split("/")[8]    
    $count = $count + 1
}

$virtualMachineNames | Select-Object -Unique