Azure Native

v1.79.2 published on Thursday, Sep 29, 2022 by Pulumi

DataCollectionRule

Definition of ARM tracked top level resource. API Version: 2019-11-01-preview.

Example Usage

Create or update data collection rule

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var dataCollectionRule = new AzureNative.Insights.DataCollectionRule("dataCollectionRule", new()
    {
        DataCollectionRuleName = "myCollectionRule",
        DataFlows = new[]
        {
            new AzureNative.Insights.Inputs.DataFlowArgs
            {
                Destinations = new[]
                {
                    "centralWorkspace",
                },
                Streams = new[]
                {
                    "Microsoft-Perf",
                    "Microsoft-Syslog",
                    "Microsoft-WindowsEvent",
                },
            },
        },
        DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
        {
            PerformanceCounters = new[]
            {
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Processor(_Total)\\% Processor Time",
                        "\\Memory\\Committed Bytes",
                        "\\LogicalDisk(_Total)\\Free Megabytes",
                        "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                    },
                    Name = "cloudTeamCoreCounters",
                    SamplingFrequencyInSeconds = 15,
                    Streams = new[]
                    {
                        "Microsoft-Perf",
                    },
                },
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Process(_Total)\\Thread Count",
                    },
                    Name = "appTeamExtraCounters",
                    SamplingFrequencyInSeconds = 30,
                    Streams = new[]
                    {
                        "Microsoft-Perf",
                    },
                },
            },
            Syslog = new[]
            {
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        "cron",
                    },
                    LogLevels = new[]
                    {
                        "Debug",
                        "Critical",
                        "Emergency",
                    },
                    Name = "cronSyslog",
                    Streams = new[]
                    {
                        "Microsoft-Syslog",
                    },
                },
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        "syslog",
                    },
                    LogLevels = new[]
                    {
                        "Alert",
                        "Critical",
                        "Emergency",
                    },
                    Name = "syslogBase",
                    Streams = new[]
                    {
                        "Microsoft-Syslog",
                    },
                },
            },
            WindowsEventLogs = new[]
            {
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "cloudSecurityTeamEvents",
                    Streams = new[]
                    {
                        "Microsoft-WindowsEvent",
                    },
                    XPathQueries = new[]
                    {
                        "Security!",
                    },
                },
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "appTeam1AppEvents",
                    Streams = new[]
                    {
                        "Microsoft-WindowsEvent",
                    },
                    XPathQueries = new[]
                    {
                        "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                        "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                    },
                },
            },
        },
        Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
        {
            LogAnalytics = new[]
            {
                new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
                {
                    Name = "centralWorkspace",
                    WorkspaceResourceId = "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
                },
            },
        },
        Location = "eastus",
        ResourceGroupName = "myResourceGroup",
    });

});
package main

import (
	"fmt"

	insights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/insights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := insights.NewDataCollectionRule(ctx, "dataCollectionRule", &insights.DataCollectionRuleArgs{
			DataCollectionRuleName: pulumi.String("myCollectionRule"),
			DataFlows: []insights.DataFlowArgs{
				&insights.DataFlowArgs{
					Destinations: pulumi.StringArray{
						pulumi.String("centralWorkspace"),
					},
					Streams: pulumi.StringArray{
						pulumi.String("Microsoft-Perf"),
						pulumi.String("Microsoft-Syslog"),
						pulumi.String("Microsoft-WindowsEvent"),
					},
				},
			},
			DataSources: &insights.DataCollectionRuleDataSourcesArgs{
				PerformanceCounters: insights.PerfCounterDataSourceArray{
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String(fmt.Sprintf("\\Processor(_Total)\\%v Processor Time", "%")),
							pulumi.String("\\Memory\\Committed Bytes"),
							pulumi.String("\\LogicalDisk(_Total)\\Free Megabytes"),
							pulumi.String("\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
						},
						Name:                       pulumi.String("cloudTeamCoreCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(15),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
						},
					},
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Process(_Total)\\Thread Count"),
						},
						Name:                       pulumi.String("appTeamExtraCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(30),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
						},
					},
				},
				Syslog: insights.SyslogDataSourceArray{
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("cron"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("Debug"),
							pulumi.String("Critical"),
							pulumi.String("Emergency"),
						},
						Name: pulumi.String("cronSyslog"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Syslog"),
						},
					},
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("syslog"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("Alert"),
							pulumi.String("Critical"),
							pulumi.String("Emergency"),
						},
						Name: pulumi.String("syslogBase"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Syslog"),
						},
					},
				},
				WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("cloudSecurityTeamEvents"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("Security!"),
						},
					},
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("appTeam1AppEvents"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("System![System[(Level = 1 or Level = 2 or Level = 3)]]"),
							pulumi.String("Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]"),
						},
					},
				},
			},
			Destinations: &insights.DataCollectionRuleDestinationsArgs{
				LogAnalytics: insights.LogAnalyticsDestinationArray{
					&insights.LogAnalyticsDestinationArgs{
						Name:                pulumi.String("centralWorkspace"),
						WorkspaceResourceId: pulumi.String("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace"),
					},
				},
			},
			Location:          pulumi.String("eastus"),
			ResourceGroupName: pulumi.String("myResourceGroup"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.insights.DataCollectionRule;
import com.pulumi.azurenative.insights.DataCollectionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var dataCollectionRule = new DataCollectionRule("dataCollectionRule", DataCollectionRuleArgs.builder()        
            .dataCollectionRuleName("myCollectionRule")
            .dataFlows(Map.ofEntries(
                Map.entry("destinations", "centralWorkspace"),
                Map.entry("streams",                 
                    "Microsoft-Perf",
                    "Microsoft-Syslog",
                    "Microsoft-WindowsEvent")
            ))
            .dataSources(Map.ofEntries(
                Map.entry("performanceCounters",                 
                    Map.ofEntries(
                        Map.entry("counterSpecifiers",                         
                            "\\Processor(_Total)\\% Processor Time",
                            "\\Memory\\Committed Bytes",
                            "\\LogicalDisk(_Total)\\Free Megabytes",
                            "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
                        Map.entry("name", "cloudTeamCoreCounters"),
                        Map.entry("samplingFrequencyInSeconds", 15),
                        Map.entry("streams", "Microsoft-Perf")
                    ),
                    Map.ofEntries(
                        Map.entry("counterSpecifiers", "\\Process(_Total)\\Thread Count"),
                        Map.entry("name", "appTeamExtraCounters"),
                        Map.entry("samplingFrequencyInSeconds", 30),
                        Map.entry("streams", "Microsoft-Perf")
                    )),
                Map.entry("syslog",                 
                    Map.ofEntries(
                        Map.entry("facilityNames", "cron"),
                        Map.entry("logLevels",                         
                            "Debug",
                            "Critical",
                            "Emergency"),
                        Map.entry("name", "cronSyslog"),
                        Map.entry("streams", "Microsoft-Syslog")
                    ),
                    Map.ofEntries(
                        Map.entry("facilityNames", "syslog"),
                        Map.entry("logLevels",                         
                            "Alert",
                            "Critical",
                            "Emergency"),
                        Map.entry("name", "syslogBase"),
                        Map.entry("streams", "Microsoft-Syslog")
                    )),
                Map.entry("windowsEventLogs",                 
                    Map.ofEntries(
                        Map.entry("name", "cloudSecurityTeamEvents"),
                        Map.entry("streams", "Microsoft-WindowsEvent"),
                        Map.entry("xPathQueries", "Security!")
                    ),
                    Map.ofEntries(
                        Map.entry("name", "appTeam1AppEvents"),
                        Map.entry("streams", "Microsoft-WindowsEvent"),
                        Map.entry("xPathQueries",                         
                            "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                            "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]")
                    ))
            ))
            .destinations(Map.of("logAnalytics", Map.ofEntries(
                Map.entry("name", "centralWorkspace"),
                Map.entry("workspaceResourceId", "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace")
            )))
            .location("eastus")
            .resourceGroupName("myResourceGroup")
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

data_collection_rule = azure_native.insights.DataCollectionRule("dataCollectionRule",
    data_collection_rule_name="myCollectionRule",
    data_flows=[azure_native.insights.DataFlowArgs(
        destinations=["centralWorkspace"],
        streams=[
            "Microsoft-Perf",
            "Microsoft-Syslog",
            "Microsoft-WindowsEvent",
        ],
    )],
    data_sources=azure_native.insights.DataCollectionRuleDataSourcesArgs(
        performance_counters=[
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=[
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name="cloudTeamCoreCounters",
                sampling_frequency_in_seconds=15,
                streams=["Microsoft-Perf"],
            ),
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=["\\Process(_Total)\\Thread Count"],
                name="appTeamExtraCounters",
                sampling_frequency_in_seconds=30,
                streams=["Microsoft-Perf"],
            ),
        ],
        syslog=[
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=["cron"],
                log_levels=[
                    "Debug",
                    "Critical",
                    "Emergency",
                ],
                name="cronSyslog",
                streams=["Microsoft-Syslog"],
            ),
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=["syslog"],
                log_levels=[
                    "Alert",
                    "Critical",
                    "Emergency",
                ],
                name="syslogBase",
                streams=["Microsoft-Syslog"],
            ),
        ],
        windows_event_logs=[
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="cloudSecurityTeamEvents",
                streams=["Microsoft-WindowsEvent"],
                x_path_queries=["Security!"],
            ),
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="appTeam1AppEvents",
                streams=["Microsoft-WindowsEvent"],
                x_path_queries=[
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            ),
        ],
    ),
    destinations=azure_native.insights.DataCollectionRuleDestinationsArgs(
        log_analytics=[azure_native.insights.LogAnalyticsDestinationArgs(
            name="centralWorkspace",
            workspace_resource_id="/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        )],
    ),
    location="eastus",
    resource_group_name="myResourceGroup")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const dataCollectionRule = new azure_native.insights.DataCollectionRule("dataCollectionRule", {
    dataCollectionRuleName: "myCollectionRule",
    dataFlows: [{
        destinations: ["centralWorkspace"],
        streams: [
            "Microsoft-Perf",
            "Microsoft-Syslog",
            "Microsoft-WindowsEvent",
        ],
    }],
    dataSources: {
        performanceCounters: [
            {
                counterSpecifiers: [
                    `\Processor(_Total)\% Processor Time`,
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name: "cloudTeamCoreCounters",
                samplingFrequencyInSeconds: 15,
                streams: ["Microsoft-Perf"],
            },
            {
                counterSpecifiers: ["\\Process(_Total)\\Thread Count"],
                name: "appTeamExtraCounters",
                samplingFrequencyInSeconds: 30,
                streams: ["Microsoft-Perf"],
            },
        ],
        syslog: [
            {
                facilityNames: ["cron"],
                logLevels: [
                    "Debug",
                    "Critical",
                    "Emergency",
                ],
                name: "cronSyslog",
                streams: ["Microsoft-Syslog"],
            },
            {
                facilityNames: ["syslog"],
                logLevels: [
                    "Alert",
                    "Critical",
                    "Emergency",
                ],
                name: "syslogBase",
                streams: ["Microsoft-Syslog"],
            },
        ],
        windowsEventLogs: [
            {
                name: "cloudSecurityTeamEvents",
                streams: ["Microsoft-WindowsEvent"],
                xPathQueries: ["Security!"],
            },
            {
                name: "appTeam1AppEvents",
                streams: ["Microsoft-WindowsEvent"],
                xPathQueries: [
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            },
        ],
    },
    destinations: {
        logAnalytics: [{
            name: "centralWorkspace",
            workspaceResourceId: "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        }],
    },
    location: "eastus",
    resourceGroupName: "myResourceGroup",
});
resources:
  dataCollectionRule:
    type: azure-native:insights:DataCollectionRule
    properties:
      dataCollectionRuleName: myCollectionRule
      dataFlows:
        - destinations:
            - centralWorkspace
          streams:
            - Microsoft-Perf
            - Microsoft-Syslog
            - Microsoft-WindowsEvent
      dataSources:
        performanceCounters:
          - counterSpecifiers:
              - \Processor(_Total)\% Processor Time
              - \Memory\Committed Bytes
              - \LogicalDisk(_Total)\Free Megabytes
              - \PhysicalDisk(_Total)\Avg. Disk Queue Length
            name: cloudTeamCoreCounters
            samplingFrequencyInSeconds: 15
            streams:
              - Microsoft-Perf
          - counterSpecifiers:
              - \Process(_Total)\Thread Count
            name: appTeamExtraCounters
            samplingFrequencyInSeconds: 30
            streams:
              - Microsoft-Perf
        syslog:
          - facilityNames:
              - cron
            logLevels:
              - Debug
              - Critical
              - Emergency
            name: cronSyslog
            streams:
              - Microsoft-Syslog
          - facilityNames:
              - syslog
            logLevels:
              - Alert
              - Critical
              - Emergency
            name: syslogBase
            streams:
              - Microsoft-Syslog
        windowsEventLogs:
          - name: cloudSecurityTeamEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - Security!
          - name: appTeam1AppEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - System![System[(Level = 1 or Level = 2 or Level = 3)]]
              - Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]
      destinations:
        logAnalytics:
          - name: centralWorkspace
            workspaceResourceId: /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace
      location: eastus
      resourceGroupName: myResourceGroup

Create a DataCollectionRule Resource

new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);
@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       data_collection_rule_name: Optional[str] = None,
                       data_flows: Optional[Sequence[DataFlowArgs]] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       kind: Optional[Union[str, KnownDataCollectionRuleResourceKind]] = None,
                       location: Optional[str] = None,
                       resource_group_name: Optional[str] = None,
                       tags: Optional[Mapping[str, str]] = None)
@overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)
func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)
public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)
public DataCollectionRule(String name, DataCollectionRuleArgs args)
public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)
type: azure-native:insights:DataCollectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

DataCollectionRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The DataCollectionRule resource accepts the following input properties:

ResourceGroupName string

The name of the resource group. The name is case insensitive.

DataCollectionRuleName string

The name of the data collection rule. The name is case insensitive.

DataFlows List<Pulumi.AzureNative.Insights.Inputs.DataFlowArgs>

The specification of data flows.

DataSources Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs

The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

Description string

Description of the data collection rule.

Destinations Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs

The specification of destinations.

Kind string | Pulumi.AzureNative.Insights.KnownDataCollectionRuleResourceKind

The kind of the resource.

Location string

The geo-location where the resource lives.

Tags Dictionary<string, string>

Resource tags.

ResourceGroupName string

The name of the resource group. The name is case insensitive.

DataCollectionRuleName string

The name of the data collection rule. The name is case insensitive.

DataFlows []DataFlowArgs

The specification of data flows.

DataSources DataCollectionRuleDataSourcesArgs

The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

Description string

Description of the data collection rule.

Destinations DataCollectionRuleDestinationsArgs

The specification of destinations.

Kind string | KnownDataCollectionRuleResourceKind

The kind of the resource.

Location string

The geo-location where the resource lives.

Tags map[string]string

Resource tags.

resourceGroupName String

The name of the resource group. The name is case insensitive.

dataCollectionRuleName String

The name of the data collection rule. The name is case insensitive.

dataFlows List<DataFlowArgs>

The specification of data flows.

dataSources DataCollectionRuleDataSourcesArgs

The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description String

Description of the data collection rule.

destinations DataCollectionRuleDestinationsArgs

The specification of destinations.

kind String | KnownDataCollectionRuleResourceKind

The kind of the resource.

location String

The geo-location where the resource lives.

tags Map<String,String>

Resource tags.

resourceGroupName string

The name of the resource group. The name is case insensitive.

dataCollectionRuleName string

The name of the data collection rule. The name is case insensitive.

dataFlows DataFlowArgs[]

The specification of data flows.

dataSources DataCollectionRuleDataSourcesArgs

The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description string

Description of the data collection rule.

destinations DataCollectionRuleDestinationsArgs

The specification of destinations.

kind string | KnownDataCollectionRuleResourceKind

The kind of the resource.

location string

The geo-location where the resource lives.

tags {[key: string]: string}

Resource tags.

resource_group_name str

The name of the resource group. The name is case insensitive.

data_collection_rule_name str

The name of the data collection rule. The name is case insensitive.

data_flows Sequence[DataFlowArgs]

The specification of data flows.

data_sources DataCollectionRuleDataSourcesArgs

The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description str

Description of the data collection rule.

destinations DataCollectionRuleDestinationsArgs

The specification of destinations.

kind str | KnownDataCollectionRuleResourceKind

The kind of the resource.

location str

The geo-location where the resource lives.

tags Mapping[str, str]

Resource tags.

resourceGroupName String

The name of the resource group. The name is case insensitive.

dataCollectionRuleName String

The name of the data collection rule. The name is case insensitive.

dataFlows List<Property Map>

The specification of data flows.

dataSources Property Map

The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description String

Description of the data collection rule.

destinations Property Map

The specification of destinations.

kind String | "Linux" | "Windows"

The kind of the resource.

location String

The geo-location where the resource lives.

tags Map<String>

Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

Etag string

Resource entity tag (ETag).

Id string

The provider-assigned unique ID for this managed resource.

ImmutableId string

The immutable ID of this data collection rule. This property is READ-ONLY.

Name string

The name of the resource.

ProvisioningState string

The resource provisioning state.

Type string

The type of the resource.

Etag string

Resource entity tag (ETag).

Id string

The provider-assigned unique ID for this managed resource.

ImmutableId string

The immutable ID of this data collection rule. This property is READ-ONLY.

Name string

The name of the resource.

ProvisioningState string

The resource provisioning state.

Type string

The type of the resource.

etag String

Resource entity tag (ETag).

id String

The provider-assigned unique ID for this managed resource.

immutableId String

The immutable ID of this data collection rule. This property is READ-ONLY.

name String

The name of the resource.

provisioningState String

The resource provisioning state.

type String

The type of the resource.

etag string

Resource entity tag (ETag).

id string

The provider-assigned unique ID for this managed resource.

immutableId string

The immutable ID of this data collection rule. This property is READ-ONLY.

name string

The name of the resource.

provisioningState string

The resource provisioning state.

type string

The type of the resource.

etag str

Resource entity tag (ETag).

id str

The provider-assigned unique ID for this managed resource.

immutable_id str

The immutable ID of this data collection rule. This property is READ-ONLY.

name str

The name of the resource.

provisioning_state str

The resource provisioning state.

type str

The type of the resource.

etag String

Resource entity tag (ETag).

id String

The provider-assigned unique ID for this managed resource.

immutableId String

The immutable ID of this data collection rule. This property is READ-ONLY.

name String

The name of the resource.

provisioningState String

The resource provisioning state.

type String

The type of the resource.

Supporting Types

DataCollectionRuleDataSources

Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSource>

The list of Azure VM extension data source configurations.

PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSource>

The list of performance counter data source configurations.

Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSource>

The list of Syslog data source configurations.

WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSource>

The list of Windows Event Log data source configurations.

Extensions []ExtensionDataSource

The list of Azure VM extension data source configurations.

PerformanceCounters []PerfCounterDataSource

The list of performance counter data source configurations.

Syslog []SyslogDataSource

The list of Syslog data source configurations.

WindowsEventLogs []WindowsEventLogDataSource

The list of Windows Event Log data source configurations.

extensions List<ExtensionDataSource>

The list of Azure VM extension data source configurations.

performanceCounters List<PerfCounterDataSource>

The list of performance counter data source configurations.

syslog List<SyslogDataSource>

The list of Syslog data source configurations.

windowsEventLogs List<WindowsEventLogDataSource>

The list of Windows Event Log data source configurations.

extensions ExtensionDataSource[]

The list of Azure VM extension data source configurations.

performanceCounters PerfCounterDataSource[]

The list of performance counter data source configurations.

syslog SyslogDataSource[]

The list of Syslog data source configurations.

windowsEventLogs WindowsEventLogDataSource[]

The list of Windows Event Log data source configurations.

extensions Sequence[ExtensionDataSource]

The list of Azure VM extension data source configurations.

performance_counters Sequence[PerfCounterDataSource]

The list of performance counter data source configurations.

syslog Sequence[SyslogDataSource]

The list of Syslog data source configurations.

windows_event_logs Sequence[WindowsEventLogDataSource]

The list of Windows Event Log data source configurations.

extensions List<Property Map>

The list of Azure VM extension data source configurations.

performanceCounters List<Property Map>

The list of performance counter data source configurations.

syslog List<Property Map>

The list of Syslog data source configurations.

windowsEventLogs List<Property Map>

The list of Windows Event Log data source configurations.

DataCollectionRuleDestinations

AzureMonitorMetrics DestinationsSpecAzureMonitorMetrics

Azure Monitor Metrics destination.

LogAnalytics []LogAnalyticsDestination

List of Log Analytics destinations.

azureMonitorMetrics DestinationsSpecAzureMonitorMetrics

Azure Monitor Metrics destination.

logAnalytics List<LogAnalyticsDestination>

List of Log Analytics destinations.

azureMonitorMetrics DestinationsSpecAzureMonitorMetrics

Azure Monitor Metrics destination.

logAnalytics LogAnalyticsDestination[]

List of Log Analytics destinations.

azure_monitor_metrics DestinationsSpecAzureMonitorMetrics

Azure Monitor Metrics destination.

log_analytics Sequence[LogAnalyticsDestination]

List of Log Analytics destinations.

azureMonitorMetrics Property Map

Azure Monitor Metrics destination.

logAnalytics List<Property Map>

List of Log Analytics destinations.

DataCollectionRuleResponseDataSources

Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSourceResponse>

The list of Azure VM extension data source configurations.

PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSourceResponse>

The list of performance counter data source configurations.

Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSourceResponse>

The list of Syslog data source configurations.

WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSourceResponse>

The list of Windows Event Log data source configurations.

Extensions []ExtensionDataSourceResponse

The list of Azure VM extension data source configurations.

PerformanceCounters []PerfCounterDataSourceResponse

The list of performance counter data source configurations.

Syslog []SyslogDataSourceResponse

The list of Syslog data source configurations.

WindowsEventLogs []WindowsEventLogDataSourceResponse

The list of Windows Event Log data source configurations.

extensions List<ExtensionDataSourceResponse>

The list of Azure VM extension data source configurations.

performanceCounters List<PerfCounterDataSourceResponse>

The list of performance counter data source configurations.

syslog List<SyslogDataSourceResponse>

The list of Syslog data source configurations.

windowsEventLogs List<WindowsEventLogDataSourceResponse>

The list of Windows Event Log data source configurations.

extensions ExtensionDataSourceResponse[]

The list of Azure VM extension data source configurations.

performanceCounters PerfCounterDataSourceResponse[]

The list of performance counter data source configurations.

syslog SyslogDataSourceResponse[]

The list of Syslog data source configurations.

windowsEventLogs WindowsEventLogDataSourceResponse[]

The list of Windows Event Log data source configurations.

extensions Sequence[ExtensionDataSourceResponse]

The list of Azure VM extension data source configurations.

performance_counters Sequence[PerfCounterDataSourceResponse]

The list of performance counter data source configurations.

syslog Sequence[SyslogDataSourceResponse]

The list of Syslog data source configurations.

windows_event_logs Sequence[WindowsEventLogDataSourceResponse]

The list of Windows Event Log data source configurations.

extensions List<Property Map>

The list of Azure VM extension data source configurations.

performanceCounters List<Property Map>

The list of performance counter data source configurations.

syslog List<Property Map>

The list of Syslog data source configurations.

windowsEventLogs List<Property Map>

The list of Windows Event Log data source configurations.

DataCollectionRuleResponseDestinations

azureMonitorMetrics Property Map

Azure Monitor Metrics destination.

logAnalytics List<Property Map>

List of Log Analytics destinations.

DataFlow

Destinations List<string>

List of destinations for this data flow.

Streams List<Union<string, Pulumi.AzureNative.Insights.KnownDataFlowStreams>>

List of streams for this data flow.

Destinations []string

List of destinations for this data flow.

Streams []string

List of streams for this data flow.

destinations List<String>

List of destinations for this data flow.

streams List<Either<String,KnownDataFlowStreams>>

List of streams for this data flow.

destinations string[]

List of destinations for this data flow.

streams (string | KnownDataFlowStreams)[]

List of streams for this data flow.

destinations Sequence[str]

List of destinations for this data flow.

streams Sequence[Union[str, KnownDataFlowStreams]]

List of streams for this data flow.

destinations List<String>

List of destinations for this data flow.

streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">

List of streams for this data flow.

DataFlowResponse

Destinations List<string>

List of destinations for this data flow.

Streams List<string>

List of streams for this data flow.

Destinations []string

List of destinations for this data flow.

Streams []string

List of streams for this data flow.

destinations List<String>

List of destinations for this data flow.

streams List<String>

List of streams for this data flow.

destinations string[]

List of destinations for this data flow.

streams string[]

List of streams for this data flow.

destinations Sequence[str]

List of destinations for this data flow.

streams Sequence[str]

List of streams for this data flow.

destinations List<String>

List of destinations for this data flow.

streams List<String>

List of streams for this data flow.

DestinationsSpecAzureMonitorMetrics

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name str

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

DestinationsSpecResponseAzureMonitorMetrics

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name str

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

ExtensionDataSource

ExtensionName string

The name of the VM extension.

ExtensionSettings object

The extension settings. The format is specific for particular extension.

InputDataSources List<string>

The list of data sources this extension needs data from.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams List<Union<string, Pulumi.AzureNative.Insights.KnownExtensionDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionName string

The name of the VM extension.

ExtensionSettings interface{}

The extension settings. The format is specific for particular extension.

InputDataSources []string

The list of data sources this extension needs data from.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String

The name of the VM extension.

extensionSettings Object

The extension settings. The format is specific for particular extension.

inputDataSources List<String>

The list of data sources this extension needs data from.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<Either<String,KnownExtensionDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName string

The name of the VM extension.

extensionSettings any

The extension settings. The format is specific for particular extension.

inputDataSources string[]

The list of data sources this extension needs data from.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams (string | KnownExtensionDataSourceStreams)[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extension_name str

The name of the VM extension.

extension_settings Any

The extension settings. The format is specific for particular extension.

input_data_sources Sequence[str]

The list of data sources this extension needs data from.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[Union[str, KnownExtensionDataSourceStreams]]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String

The name of the VM extension.

extensionSettings Any

The extension settings. The format is specific for particular extension.

inputDataSources List<String>

The list of data sources this extension needs data from.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionDataSourceResponse

ExtensionName string

The name of the VM extension.

ExtensionSettings object

The extension settings. The format is specific for particular extension.

InputDataSources List<string>

The list of data sources this extension needs data from.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams List<string>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionName string

The name of the VM extension.

ExtensionSettings interface{}

The extension settings. The format is specific for particular extension.

InputDataSources []string

The list of data sources this extension needs data from.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String

The name of the VM extension.

extensionSettings Object

The extension settings. The format is specific for particular extension.

inputDataSources List<String>

The list of data sources this extension needs data from.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName string

The name of the VM extension.

extensionSettings any

The extension settings. The format is specific for particular extension.

inputDataSources string[]

The list of data sources this extension needs data from.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extension_name str

The name of the VM extension.

extension_settings Any

The extension settings. The format is specific for particular extension.

input_data_sources Sequence[str]

The list of data sources this extension needs data from.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String

The name of the VM extension.

extensionSettings Any

The extension settings. The format is specific for particular extension.

inputDataSources List<String>

The list of data sources this extension needs data from.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

KnownDataCollectionRuleResourceKind

Linux
Linux
Windows
Windows
KnownDataCollectionRuleResourceKindLinux
Linux
KnownDataCollectionRuleResourceKindWindows
Windows
Linux
Linux
Windows
Windows
Linux
Linux
Windows
Windows
LINUX
Linux
WINDOWS
Windows
"Linux"
Linux
"Windows"
Windows

KnownDataFlowStreams

Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
KnownDataFlowStreams_Microsoft_Event
Microsoft-Event
KnownDataFlowStreams_Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
KnownDataFlowStreams_Microsoft_Perf
Microsoft-Perf
KnownDataFlowStreams_Microsoft_Syslog
Microsoft-Syslog
KnownDataFlowStreams_Microsoft_WindowsEvent
Microsoft-WindowsEvent
MicrosoftEvent
Microsoft-Event
MicrosoftInsightsMetrics
Microsoft-InsightsMetrics
MicrosoftPerf
Microsoft-Perf
MicrosoftSyslog
Microsoft-Syslog
MicrosoftWindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
MICROSOFT_EVENT
Microsoft-Event
MICROSOFT_INSIGHTS_METRICS
Microsoft-InsightsMetrics
MICROSOFT_PERF
Microsoft-Perf
MICROSOFT_SYSLOG
Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT
Microsoft-WindowsEvent
"Microsoft-Event"
Microsoft-Event
"Microsoft-InsightsMetrics"
Microsoft-InsightsMetrics
"Microsoft-Perf"
Microsoft-Perf
"Microsoft-Syslog"
Microsoft-Syslog
"Microsoft-WindowsEvent"
Microsoft-WindowsEvent

KnownExtensionDataSourceStreams

Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
KnownExtensionDataSourceStreams_Microsoft_Event
Microsoft-Event
KnownExtensionDataSourceStreams_Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
KnownExtensionDataSourceStreams_Microsoft_Perf
Microsoft-Perf
KnownExtensionDataSourceStreams_Microsoft_Syslog
Microsoft-Syslog
KnownExtensionDataSourceStreams_Microsoft_WindowsEvent
Microsoft-WindowsEvent
MicrosoftEvent
Microsoft-Event
MicrosoftInsightsMetrics
Microsoft-InsightsMetrics
MicrosoftPerf
Microsoft-Perf
MicrosoftSyslog
Microsoft-Syslog
MicrosoftWindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
MICROSOFT_EVENT
Microsoft-Event
MICROSOFT_INSIGHTS_METRICS
Microsoft-InsightsMetrics
MICROSOFT_PERF
Microsoft-Perf
MICROSOFT_SYSLOG
Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT
Microsoft-WindowsEvent
"Microsoft-Event"
Microsoft-Event
"Microsoft-InsightsMetrics"
Microsoft-InsightsMetrics
"Microsoft-Perf"
Microsoft-Perf
"Microsoft-Syslog"
Microsoft-Syslog
"Microsoft-WindowsEvent"
Microsoft-WindowsEvent

KnownPerfCounterDataSourceStreams

Microsoft_Perf
Microsoft-Perf
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
KnownPerfCounterDataSourceStreams_Microsoft_Perf
Microsoft-Perf
KnownPerfCounterDataSourceStreams_Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
MicrosoftPerf
Microsoft-Perf
MicrosoftInsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
MICROSOFT_PERF
Microsoft-Perf
MICROSOFT_INSIGHTS_METRICS
Microsoft-InsightsMetrics
"Microsoft-Perf"
Microsoft-Perf
"Microsoft-InsightsMetrics"
Microsoft-InsightsMetrics

KnownSyslogDataSourceFacilityNames

Auth
auth
Authpriv
authpriv
Cron
cron
Daemon
daemon
Kern
kern
Lpr
lpr
Mail
mail
Mark
mark
News
news
Syslog
syslog
User
user
Uucp
uucp
Local0
local0
Local1
local1
Local2
local2
Local3
local3
Local4
local4
Local5
local5
Local6
local6
Local7
local7
Asterisk
*
KnownSyslogDataSourceFacilityNamesAuth
auth
KnownSyslogDataSourceFacilityNamesAuthpriv
authpriv
KnownSyslogDataSourceFacilityNamesCron
cron
KnownSyslogDataSourceFacilityNamesDaemon
daemon
KnownSyslogDataSourceFacilityNamesKern
kern
KnownSyslogDataSourceFacilityNamesLpr
lpr
KnownSyslogDataSourceFacilityNamesMail
mail
KnownSyslogDataSourceFacilityNamesMark
mark
KnownSyslogDataSourceFacilityNamesNews
news
KnownSyslogDataSourceFacilityNamesSyslog
syslog
KnownSyslogDataSourceFacilityNamesUser
user
KnownSyslogDataSourceFacilityNamesUucp
uucp
KnownSyslogDataSourceFacilityNamesLocal0
local0
KnownSyslogDataSourceFacilityNamesLocal1
local1
KnownSyslogDataSourceFacilityNamesLocal2
local2
KnownSyslogDataSourceFacilityNamesLocal3
local3
KnownSyslogDataSourceFacilityNamesLocal4
local4
KnownSyslogDataSourceFacilityNamesLocal5
local5
KnownSyslogDataSourceFacilityNamesLocal6
local6
KnownSyslogDataSourceFacilityNamesLocal7
local7
KnownSyslogDataSourceFacilityNamesAsterisk
*
Auth
auth
Authpriv
authpriv
Cron
cron
Daemon
daemon
Kern
kern
Lpr
lpr
Mail
mail
Mark
mark
News
news
Syslog
syslog
User
user
Uucp
uucp
Local0
local0
Local1
local1
Local2
local2
Local3
local3
Local4
local4
Local5
local5
Local6
local6
Local7
local7
Asterisk
*
Auth
auth
Authpriv
authpriv
Cron
cron
Daemon
daemon
Kern
kern
Lpr
lpr
Mail
mail
Mark
mark
News
news
Syslog
syslog
User
user
Uucp
uucp
Local0
local0
Local1
local1
Local2
local2
Local3
local3
Local4
local4
Local5
local5
Local6
local6
Local7
local7
Asterisk
*
AUTH
auth
AUTHPRIV
authpriv
CRON
cron
DAEMON
daemon
KERN
kern
LPR
lpr
MAIL
mail
MARK
mark
NEWS
news
SYSLOG
syslog
USER
user
UUCP
uucp
LOCAL0
local0
LOCAL1
local1
LOCAL2
local2
LOCAL3
local3
LOCAL4
local4
LOCAL5
local5
LOCAL6
local6
LOCAL7
local7
ASTERISK
*
"auth"
auth
"authpriv"
authpriv
"cron"
cron
"daemon"
daemon
"kern"
kern
"lpr"
lpr
"mail"
mail
"mark"
mark
"news"
news
"syslog"
syslog
"user"
user
"uucp"
uucp
"local0"
local0
"local1"
local1
"local2"
local2
"local3"
local3
"local4"
local4
"local5"
local5
"local6"
local6
"local7"
local7
"*"
*

KnownSyslogDataSourceLogLevels

Debug
Debug
Info
Info
Notice
Notice
Warning
Warning
Error
Error
Critical
Critical
Alert
Alert
Emergency
Emergency
Asterisk
*
KnownSyslogDataSourceLogLevelsDebug
Debug
KnownSyslogDataSourceLogLevelsInfo
Info
KnownSyslogDataSourceLogLevelsNotice
Notice
KnownSyslogDataSourceLogLevelsWarning
Warning
KnownSyslogDataSourceLogLevelsError
Error
KnownSyslogDataSourceLogLevelsCritical
Critical
KnownSyslogDataSourceLogLevelsAlert
Alert
KnownSyslogDataSourceLogLevelsEmergency
Emergency
KnownSyslogDataSourceLogLevelsAsterisk
*
Debug
Debug
Info
Info
Notice
Notice
Warning
Warning
Error
Error
Critical
Critical
Alert
Alert
Emergency
Emergency
Asterisk
*
Debug
Debug
Info
Info
Notice
Notice
Warning
Warning
Error
Error
Critical
Critical
Alert
Alert
Emergency
Emergency
Asterisk
*
DEBUG
Debug
INFO
Info
NOTICE
Notice
WARNING
Warning
ERROR
Error
CRITICAL
Critical
ALERT
Alert
EMERGENCY
Emergency
ASTERISK
*
"Debug"
Debug
"Info"
Info
"Notice"
Notice
"Warning"
Warning
"Error"
Error
"Critical"
Critical
"Alert"
Alert
"Emergency"
Emergency
"*"
*

KnownSyslogDataSourceStreams

Microsoft_Syslog
Microsoft-Syslog
KnownSyslogDataSourceStreams_Microsoft_Syslog
Microsoft-Syslog
MicrosoftSyslog
Microsoft-Syslog
Microsoft_Syslog
Microsoft-Syslog
MICROSOFT_SYSLOG
Microsoft-Syslog
"Microsoft-Syslog"
Microsoft-Syslog

KnownWindowsEventLogDataSourceStreams

Microsoft_WindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent
Microsoft-WindowsEvent
KnownWindowsEventLogDataSourceStreams_Microsoft_Event
Microsoft-Event
MicrosoftWindowsEvent
Microsoft-WindowsEvent
MicrosoftEvent
Microsoft-Event
Microsoft_WindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
MICROSOFT_WINDOWS_EVENT
Microsoft-WindowsEvent
MICROSOFT_EVENT
Microsoft-Event
"Microsoft-WindowsEvent"
Microsoft-WindowsEvent
"Microsoft-Event"
Microsoft-Event

LogAnalyticsDestination

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

WorkspaceResourceId string

The resource ID of the Log Analytics workspace.

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

WorkspaceResourceId string

The resource ID of the Log Analytics workspace.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspaceResourceId String

The resource ID of the Log Analytics workspace.

name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspaceResourceId string

The resource ID of the Log Analytics workspace.

name str

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspace_resource_id str

The resource ID of the Log Analytics workspace.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspaceResourceId String

The resource ID of the Log Analytics workspace.

LogAnalyticsDestinationResponse

WorkspaceId string

The Customer ID of the Log Analytics workspace.

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

WorkspaceResourceId string

The resource ID of the Log Analytics workspace.

WorkspaceId string

The Customer ID of the Log Analytics workspace.

Name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

WorkspaceResourceId string

The resource ID of the Log Analytics workspace.

workspaceId String

The Customer ID of the Log Analytics workspace.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspaceResourceId String

The resource ID of the Log Analytics workspace.

workspaceId string

The Customer ID of the Log Analytics workspace.

name string

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspaceResourceId string

The resource ID of the Log Analytics workspace.

workspace_id str

The Customer ID of the Log Analytics workspace.

name str

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspace_resource_id str

The resource ID of the Log Analytics workspace.

workspaceId String

The Customer ID of the Log Analytics workspace.

name String

A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

workspaceResourceId String

The resource ID of the Log Analytics workspace.

PerfCounterDataSource

CounterSpecifiers List<string>

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

SamplingFrequencyInSeconds int

The number of seconds between consecutive counter measurements (samples).

Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPerfCounterDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

CounterSpecifiers []string

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

SamplingFrequencyInSeconds int

The number of seconds between consecutive counter measurements (samples).

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

samplingFrequencyInSeconds Integer

The number of seconds between consecutive counter measurements (samples).

streams List<Either<String,KnownPerfCounterDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers string[]

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

samplingFrequencyInSeconds number

The number of seconds between consecutive counter measurements (samples).

streams (string | KnownPerfCounterDataSourceStreams)[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counter_specifiers Sequence[str]

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

sampling_frequency_in_seconds int

The number of seconds between consecutive counter measurements (samples).

streams Sequence[Union[str, KnownPerfCounterDataSourceStreams]]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

samplingFrequencyInSeconds Number

The number of seconds between consecutive counter measurements (samples).

streams List<String | "Microsoft-Perf" | "Microsoft-InsightsMetrics">

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

PerfCounterDataSourceResponse

CounterSpecifiers List<string>

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

SamplingFrequencyInSeconds int

The number of seconds between consecutive counter measurements (samples).

Streams List<string>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

CounterSpecifiers []string

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

SamplingFrequencyInSeconds int

The number of seconds between consecutive counter measurements (samples).

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

samplingFrequencyInSeconds Integer

The number of seconds between consecutive counter measurements (samples).

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers string[]

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

samplingFrequencyInSeconds number

The number of seconds between consecutive counter measurements (samples).

streams string[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counter_specifiers Sequence[str]

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

sampling_frequency_in_seconds int

The number of seconds between consecutive counter measurements (samples).

streams Sequence[str]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>

A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

samplingFrequencyInSeconds Number

The number of seconds between consecutive counter measurements (samples).

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSource

FacilityNames List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceFacilityNames>>

The list of facility names.

LogLevels List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceLogLevels>>

The log levels to collect.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

FacilityNames []string

The list of facility names.

LogLevels []string

The log levels to collect.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<Either<String,KnownSyslogDataSourceFacilityNames>>

The list of facility names.

logLevels List<Either<String,KnownSyslogDataSourceLogLevels>>

The log levels to collect.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<Either<String,KnownSyslogDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames (string | KnownSyslogDataSourceFacilityNames)[]

The list of facility names.

logLevels (string | KnownSyslogDataSourceLogLevels)[]

The log levels to collect.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams (string | KnownSyslogDataSourceStreams)[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facility_names Sequence[Union[str, KnownSyslogDataSourceFacilityNames]]

The list of facility names.

log_levels Sequence[Union[str, KnownSyslogDataSourceLogLevels]]

The log levels to collect.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[Union[str, KnownSyslogDataSourceStreams]]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String | "auth" | "authpriv" | "cron" | "daemon" | "kern" | "lpr" | "mail" | "mark" | "news" | "syslog" | "user" | "uucp" | "local0" | "local1" | "local2" | "local3" | "local4" | "local5" | "local6" | "local7" | "*">

The list of facility names.

logLevels List<String | "Debug" | "Info" | "Notice" | "Warning" | "Error" | "Critical" | "Alert" | "Emergency" | "*">

The log levels to collect.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String | "Microsoft-Syslog">

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSourceResponse

FacilityNames List<string>

The list of facility names.

LogLevels List<string>

The log levels to collect.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams List<string>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

FacilityNames []string

The list of facility names.

LogLevels []string

The log levels to collect.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String>

The list of facility names.

logLevels List<String>

The log levels to collect.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames string[]

The list of facility names.

logLevels string[]

The log levels to collect.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facility_names Sequence[str]

The list of facility names.

log_levels Sequence[str]

The log levels to collect.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String>

The list of facility names.

logLevels List<String>

The log levels to collect.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

WindowsEventLogDataSource

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams List<Union<string, Pulumi.AzureNative.Insights.KnownWindowsEventLogDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

XPathQueries List<string>

A list of Windows Event Log queries in XPATH format.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

XPathQueries []string

A list of Windows Event Log queries in XPATH format.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<Either<String,KnownWindowsEventLogDataSourceStreams>>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

xPathQueries List<String>

A list of Windows Event Log queries in XPATH format.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams (string | KnownWindowsEventLogDataSourceStreams)[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

xPathQueries string[]

A list of Windows Event Log queries in XPATH format.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[Union[str, KnownWindowsEventLogDataSourceStreams]]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

x_path_queries Sequence[str]

A list of Windows Event Log queries in XPATH format.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String | "Microsoft-WindowsEvent" | "Microsoft-Event">

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

xPathQueries List<String>

A list of Windows Event Log queries in XPATH format.

WindowsEventLogDataSourceResponse

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams List<string>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

XPathQueries List<string>

A list of Windows Event Log queries in XPATH format.

Name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

XPathQueries []string

A list of Windows Event Log queries in XPATH format.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

xPathQueries List<String>

A list of Windows Event Log queries in XPATH format.

name string

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

xPathQueries string[]

A list of Windows Event Log queries in XPATH format.

name str

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

x_path_queries Sequence[str]

A list of Windows Event Log queries in XPATH format.

name String

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

xPathQueries List<String>

A list of Windows Event Log queries in XPATH format.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:insights:DataCollectionRule myCollectionRule /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.Insights/dataCollectionRules/myCollectionRule 

Package Details

Repository
https://github.com/pulumi/pulumi-azure-native
License
Apache-2.0