Scan History

The full audit trail of every scan StratoLens has run. Open a scan's details to see phase timings, changes, warnings, and backfill progress. Delete individual scans or bulk-clean anything older than a cutoff you choose. Open Scans > History from the left sidebar.

The Scan History Table

Columns appear in this exact order:

Timestamp: When the scan ran.
Status: Color-coded badge showing the scan outcome.
Warnings: Count of warnings collected during the scan. Click the count to open the warnings dialog.
Resources: Number of Azure resources the scan saw.
Duration: How long the scan took.
Delete: Per-row delete button.

Only Completed scans feed dashboards

Dashboards, Explorer, Cost Explorer, and other views only reflect Completed scans. Failed and cancelled scans stay in Scan History for auditing but do not feed visualizations.

Click Details on any row to open the Scan Details modal. The modal has up to eight tabs, shown in this order. The three Backfill tabs appear only when that type of backfill data exists for the scan.

Overview

Scan summary, resource counts, and status message.

Timeline

Collapsible per-phase progress timeline with timings.

Changes

Summary of what was added, modified, or removed compared to the previous scan.

Ignore Analysis

How scope exclusions affected this scan's results.

Activity Log Backfill (conditional)

Progress of the historical Activity Log backfill.

Cost Backfill (conditional)

Progress of the historical cost backfill.

Changes Backfill (conditional)

Progress of the historical resource-graph changes backfill.

Technical

Raw scan manifest details and the complete list of warnings.

Warnings

Clicking a warning count opens a dialog titled Scan Warnings ({count}), or Suppressed Scan Warnings ({count}) for warnings the scanner considers expected or benign. Each warning can be expanded for full detail.

Identifying fields: Error code, operation, principal ID, principal type.
Retry context: Whether the operation was retryable, and which attempt failed.
Query data: Query text, scopes, API endpoint, filter, time period.
Azure scope: Subscription ID and resource ID.
Full details: Raw details blob for the specific warning.

What counts as a warning

A warning is a non-fatal issue the scanner encountered, for example, one API call that was throttled but retried successfully. A scan with many warnings is not the same as a failed scan. A suppressed warning is one the scanner considers expected or benign, so it's hidden from the default view but still recorded for auditing.

Deleting Scans

Delete a single scan

Click Deleteon any row. A confirmation dialog shows the scan timestamp and warns that the scan's data will be removed. Confirm to delete.

Delete old scans in bulk

Click Delete Old Scans at the top-right of the page. Pick a cutoff (scans older than the chosen date are selected), review the count of scans to be removed, and confirm.

Deletion cascades

Deleting a scan removes the scan record plus all data collected by that scan, in phases. A progress modal shows which phase is currently being cleaned up. Bulk deletion runs asynchronously, you can navigate away while it runs.

Cost data, activity logs, and change history are kept independently

Even when older scans are deleted, cost data, Azure Activity Log operations, and Resource Graph change records are retained according to their own retention settings. See Settings > Schedules.

Retention

How long StratoLens keeps scan data is controlled by several independent settings, all in Settings > Schedules:

Auto-Delete (scan retention): Default 365 days. Scans older than this are automatically deleted.
Cost Data retention: Default 365 days. Kept independently of scans.
Activity Log retention: Default 365 days. Kept independently of scans.
Resource Graph Changes retention: Default 365 days. Kept independently of scans.

Troubleshooting

My dashboard numbers jumped after deleting a scan

Expected behavior

The dashboard reflects the latest Completed scan. Deleting the most recent scan falls back to the previous one, which is why numbers shift. Run a new scan to refresh dashboards with current data.

I don't see the Activity Log Backfill, Cost Backfill, or Changes Backfill tab