1. Packages
  2. Azure Native
  3. API Docs
  4. insights
  5. DataCollectionRule
Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi

azure-native.insights.DataCollectionRule

Explore with Pulumi AI

azure-native logo
Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi

    Definition of ARM tracked top level resource. API Version: 2019-11-01-preview.

    Example Usage

    Create or update data collection rule

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var dataCollectionRule = new AzureNative.Insights.DataCollectionRule("dataCollectionRule", new()
        {
            DataCollectionRuleName = "myCollectionRule",
            DataFlows = new[]
            {
                new AzureNative.Insights.Inputs.DataFlowArgs
                {
                    Destinations = new[]
                    {
                        "centralWorkspace",
                    },
                    Streams = new[]
                    {
                        "Microsoft-Perf",
                        "Microsoft-Syslog",
                        "Microsoft-WindowsEvent",
                    },
                },
            },
            DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
            {
                PerformanceCounters = new[]
                {
                    new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                    {
                        CounterSpecifiers = new[]
                        {
                            "\\Processor(_Total)\\% Processor Time",
                            "\\Memory\\Committed Bytes",
                            "\\LogicalDisk(_Total)\\Free Megabytes",
                            "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                        },
                        Name = "cloudTeamCoreCounters",
                        SamplingFrequencyInSeconds = 15,
                        Streams = new[]
                        {
                            "Microsoft-Perf",
                        },
                    },
                    new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                    {
                        CounterSpecifiers = new[]
                        {
                            "\\Process(_Total)\\Thread Count",
                        },
                        Name = "appTeamExtraCounters",
                        SamplingFrequencyInSeconds = 30,
                        Streams = new[]
                        {
                            "Microsoft-Perf",
                        },
                    },
                },
                Syslog = new[]
                {
                    new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                    {
                        FacilityNames = new[]
                        {
                            "cron",
                        },
                        LogLevels = new[]
                        {
                            "Debug",
                            "Critical",
                            "Emergency",
                        },
                        Name = "cronSyslog",
                        Streams = new[]
                        {
                            "Microsoft-Syslog",
                        },
                    },
                    new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                    {
                        FacilityNames = new[]
                        {
                            "syslog",
                        },
                        LogLevels = new[]
                        {
                            "Alert",
                            "Critical",
                            "Emergency",
                        },
                        Name = "syslogBase",
                        Streams = new[]
                        {
                            "Microsoft-Syslog",
                        },
                    },
                },
                WindowsEventLogs = new[]
                {
                    new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                    {
                        Name = "cloudSecurityTeamEvents",
                        Streams = new[]
                        {
                            "Microsoft-WindowsEvent",
                        },
                        XPathQueries = new[]
                        {
                            "Security!",
                        },
                    },
                    new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                    {
                        Name = "appTeam1AppEvents",
                        Streams = new[]
                        {
                            "Microsoft-WindowsEvent",
                        },
                        XPathQueries = new[]
                        {
                            "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                            "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                        },
                    },
                },
            },
            Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
            {
                LogAnalytics = new[]
                {
                    new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
                    {
                        Name = "centralWorkspace",
                        WorkspaceResourceId = "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
                    },
                },
            },
            Location = "eastus",
            ResourceGroupName = "myResourceGroup",
        });
    
    });
    
    package main
    
    import (
    	insights "github.com/pulumi/pulumi-azure-native-sdk/insights"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := insights.NewDataCollectionRule(ctx, "dataCollectionRule", &insights.DataCollectionRuleArgs{
    			DataCollectionRuleName: pulumi.String("myCollectionRule"),
    			DataFlows: []insights.DataFlowArgs{
    				{
    					Destinations: pulumi.StringArray{
    						pulumi.String("centralWorkspace"),
    					},
    					Streams: pulumi.StringArray{
    						pulumi.String("Microsoft-Perf"),
    						pulumi.String("Microsoft-Syslog"),
    						pulumi.String("Microsoft-WindowsEvent"),
    					},
    				},
    			},
    			DataSources: insights.DataCollectionRuleResponseDataSources{
    				PerformanceCounters: insights.PerfCounterDataSourceArray{
    					&insights.PerfCounterDataSourceArgs{
    						CounterSpecifiers: pulumi.StringArray{
    							pulumi.String("\\Processor(_Total)\\% Processor Time"),
    							pulumi.String("\\Memory\\Committed Bytes"),
    							pulumi.String("\\LogicalDisk(_Total)\\Free Megabytes"),
    							pulumi.String("\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
    						},
    						Name:                       pulumi.String("cloudTeamCoreCounters"),
    						SamplingFrequencyInSeconds: pulumi.Int(15),
    						Streams: pulumi.StringArray{
    							pulumi.String("Microsoft-Perf"),
    						},
    					},
    					&insights.PerfCounterDataSourceArgs{
    						CounterSpecifiers: pulumi.StringArray{
    							pulumi.String("\\Process(_Total)\\Thread Count"),
    						},
    						Name:                       pulumi.String("appTeamExtraCounters"),
    						SamplingFrequencyInSeconds: pulumi.Int(30),
    						Streams: pulumi.StringArray{
    							pulumi.String("Microsoft-Perf"),
    						},
    					},
    				},
    				Syslog: insights.SyslogDataSourceArray{
    					&insights.SyslogDataSourceArgs{
    						FacilityNames: pulumi.StringArray{
    							pulumi.String("cron"),
    						},
    						LogLevels: pulumi.StringArray{
    							pulumi.String("Debug"),
    							pulumi.String("Critical"),
    							pulumi.String("Emergency"),
    						},
    						Name: pulumi.String("cronSyslog"),
    						Streams: pulumi.StringArray{
    							pulumi.String("Microsoft-Syslog"),
    						},
    					},
    					&insights.SyslogDataSourceArgs{
    						FacilityNames: pulumi.StringArray{
    							pulumi.String("syslog"),
    						},
    						LogLevels: pulumi.StringArray{
    							pulumi.String("Alert"),
    							pulumi.String("Critical"),
    							pulumi.String("Emergency"),
    						},
    						Name: pulumi.String("syslogBase"),
    						Streams: pulumi.StringArray{
    							pulumi.String("Microsoft-Syslog"),
    						},
    					},
    				},
    				WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
    					&insights.WindowsEventLogDataSourceArgs{
    						Name: pulumi.String("cloudSecurityTeamEvents"),
    						Streams: pulumi.StringArray{
    							pulumi.String("Microsoft-WindowsEvent"),
    						},
    						XPathQueries: pulumi.StringArray{
    							pulumi.String("Security!"),
    						},
    					},
    					&insights.WindowsEventLogDataSourceArgs{
    						Name: pulumi.String("appTeam1AppEvents"),
    						Streams: pulumi.StringArray{
    							pulumi.String("Microsoft-WindowsEvent"),
    						},
    						XPathQueries: pulumi.StringArray{
    							pulumi.String("System![System[(Level = 1 or Level = 2 or Level = 3)]]"),
    							pulumi.String("Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]"),
    						},
    					},
    				},
    			},
    			Destinations: insights.DataCollectionRuleResponseDestinations{
    				LogAnalytics: insights.LogAnalyticsDestinationArray{
    					&insights.LogAnalyticsDestinationArgs{
    						Name:                pulumi.String("centralWorkspace"),
    						WorkspaceResourceId: pulumi.String("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace"),
    					},
    				},
    			},
    			Location:          pulumi.String("eastus"),
    			ResourceGroupName: pulumi.String("myResourceGroup"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.insights.DataCollectionRule;
    import com.pulumi.azurenative.insights.DataCollectionRuleArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var dataCollectionRule = new DataCollectionRule("dataCollectionRule", DataCollectionRuleArgs.builder()        
                .dataCollectionRuleName("myCollectionRule")
                .dataFlows(Map.ofEntries(
                    Map.entry("destinations", "centralWorkspace"),
                    Map.entry("streams",                 
                        "Microsoft-Perf",
                        "Microsoft-Syslog",
                        "Microsoft-WindowsEvent")
                ))
                .dataSources(Map.ofEntries(
                    Map.entry("performanceCounters",                 
                        Map.ofEntries(
                            Map.entry("counterSpecifiers",                         
                                "\\Processor(_Total)\\% Processor Time",
                                "\\Memory\\Committed Bytes",
                                "\\LogicalDisk(_Total)\\Free Megabytes",
                                "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
                            Map.entry("name", "cloudTeamCoreCounters"),
                            Map.entry("samplingFrequencyInSeconds", 15),
                            Map.entry("streams", "Microsoft-Perf")
                        ),
                        Map.ofEntries(
                            Map.entry("counterSpecifiers", "\\Process(_Total)\\Thread Count"),
                            Map.entry("name", "appTeamExtraCounters"),
                            Map.entry("samplingFrequencyInSeconds", 30),
                            Map.entry("streams", "Microsoft-Perf")
                        )),
                    Map.entry("syslog",                 
                        Map.ofEntries(
                            Map.entry("facilityNames", "cron"),
                            Map.entry("logLevels",                         
                                "Debug",
                                "Critical",
                                "Emergency"),
                            Map.entry("name", "cronSyslog"),
                            Map.entry("streams", "Microsoft-Syslog")
                        ),
                        Map.ofEntries(
                            Map.entry("facilityNames", "syslog"),
                            Map.entry("logLevels",                         
                                "Alert",
                                "Critical",
                                "Emergency"),
                            Map.entry("name", "syslogBase"),
                            Map.entry("streams", "Microsoft-Syslog")
                        )),
                    Map.entry("windowsEventLogs",                 
                        Map.ofEntries(
                            Map.entry("name", "cloudSecurityTeamEvents"),
                            Map.entry("streams", "Microsoft-WindowsEvent"),
                            Map.entry("xPathQueries", "Security!")
                        ),
                        Map.ofEntries(
                            Map.entry("name", "appTeam1AppEvents"),
                            Map.entry("streams", "Microsoft-WindowsEvent"),
                            Map.entry("xPathQueries",                         
                                "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                                "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]")
                        ))
                ))
                .destinations(Map.of("logAnalytics", Map.ofEntries(
                    Map.entry("name", "centralWorkspace"),
                    Map.entry("workspaceResourceId", "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace")
                )))
                .location("eastus")
                .resourceGroupName("myResourceGroup")
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    data_collection_rule = azure_native.insights.DataCollectionRule("dataCollectionRule",
        data_collection_rule_name="myCollectionRule",
        data_flows=[azure_native.insights.DataFlowArgs(
            destinations=["centralWorkspace"],
            streams=[
                "Microsoft-Perf",
                "Microsoft-Syslog",
                "Microsoft-WindowsEvent",
            ],
        )],
        data_sources=azure_native.insights.DataCollectionRuleResponseDataSourcesArgs(
            performance_counters=[
                azure_native.insights.PerfCounterDataSourceArgs(
                    counter_specifiers=[
                        "\\Processor(_Total)\\% Processor Time",
                        "\\Memory\\Committed Bytes",
                        "\\LogicalDisk(_Total)\\Free Megabytes",
                        "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                    ],
                    name="cloudTeamCoreCounters",
                    sampling_frequency_in_seconds=15,
                    streams=["Microsoft-Perf"],
                ),
                azure_native.insights.PerfCounterDataSourceArgs(
                    counter_specifiers=["\\Process(_Total)\\Thread Count"],
                    name="appTeamExtraCounters",
                    sampling_frequency_in_seconds=30,
                    streams=["Microsoft-Perf"],
                ),
            ],
            syslog=[
                azure_native.insights.SyslogDataSourceArgs(
                    facility_names=["cron"],
                    log_levels=[
                        "Debug",
                        "Critical",
                        "Emergency",
                    ],
                    name="cronSyslog",
                    streams=["Microsoft-Syslog"],
                ),
                azure_native.insights.SyslogDataSourceArgs(
                    facility_names=["syslog"],
                    log_levels=[
                        "Alert",
                        "Critical",
                        "Emergency",
                    ],
                    name="syslogBase",
                    streams=["Microsoft-Syslog"],
                ),
            ],
            windows_event_logs=[
                azure_native.insights.WindowsEventLogDataSourceArgs(
                    name="cloudSecurityTeamEvents",
                    streams=["Microsoft-WindowsEvent"],
                    x_path_queries=["Security!"],
                ),
                azure_native.insights.WindowsEventLogDataSourceArgs(
                    name="appTeam1AppEvents",
                    streams=["Microsoft-WindowsEvent"],
                    x_path_queries=[
                        "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                        "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                    ],
                ),
            ],
        ),
        destinations=azure_native.insights.DataCollectionRuleResponseDestinationsArgs(
            log_analytics=[azure_native.insights.LogAnalyticsDestinationArgs(
                name="centralWorkspace",
                workspace_resource_id="/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
            )],
        ),
        location="eastus",
        resource_group_name="myResourceGroup")
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const dataCollectionRule = new azure_native.insights.DataCollectionRule("dataCollectionRule", {
        dataCollectionRuleName: "myCollectionRule",
        dataFlows: [{
            destinations: ["centralWorkspace"],
            streams: [
                "Microsoft-Perf",
                "Microsoft-Syslog",
                "Microsoft-WindowsEvent",
            ],
        }],
        dataSources: {
            performanceCounters: [
                {
                    counterSpecifiers: [
                        "\\Processor(_Total)\\% Processor Time",
                        "\\Memory\\Committed Bytes",
                        "\\LogicalDisk(_Total)\\Free Megabytes",
                        "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                    ],
                    name: "cloudTeamCoreCounters",
                    samplingFrequencyInSeconds: 15,
                    streams: ["Microsoft-Perf"],
                },
                {
                    counterSpecifiers: ["\\Process(_Total)\\Thread Count"],
                    name: "appTeamExtraCounters",
                    samplingFrequencyInSeconds: 30,
                    streams: ["Microsoft-Perf"],
                },
            ],
            syslog: [
                {
                    facilityNames: ["cron"],
                    logLevels: [
                        "Debug",
                        "Critical",
                        "Emergency",
                    ],
                    name: "cronSyslog",
                    streams: ["Microsoft-Syslog"],
                },
                {
                    facilityNames: ["syslog"],
                    logLevels: [
                        "Alert",
                        "Critical",
                        "Emergency",
                    ],
                    name: "syslogBase",
                    streams: ["Microsoft-Syslog"],
                },
            ],
            windowsEventLogs: [
                {
                    name: "cloudSecurityTeamEvents",
                    streams: ["Microsoft-WindowsEvent"],
                    xPathQueries: ["Security!"],
                },
                {
                    name: "appTeam1AppEvents",
                    streams: ["Microsoft-WindowsEvent"],
                    xPathQueries: [
                        "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                        "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                    ],
                },
            ],
        },
        destinations: {
            logAnalytics: [{
                name: "centralWorkspace",
                workspaceResourceId: "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
            }],
        },
        location: "eastus",
        resourceGroupName: "myResourceGroup",
    });
    
    resources:
      dataCollectionRule:
        type: azure-native:insights:DataCollectionRule
        properties:
          dataCollectionRuleName: myCollectionRule
          dataFlows:
            - destinations:
                - centralWorkspace
              streams:
                - Microsoft-Perf
                - Microsoft-Syslog
                - Microsoft-WindowsEvent
          dataSources:
            performanceCounters:
              - counterSpecifiers:
                  - \Processor(_Total)\% Processor Time
                  - \Memory\Committed Bytes
                  - \LogicalDisk(_Total)\Free Megabytes
                  - \PhysicalDisk(_Total)\Avg. Disk Queue Length
                name: cloudTeamCoreCounters
                samplingFrequencyInSeconds: 15
                streams:
                  - Microsoft-Perf
              - counterSpecifiers:
                  - \Process(_Total)\Thread Count
                name: appTeamExtraCounters
                samplingFrequencyInSeconds: 30
                streams:
                  - Microsoft-Perf
            syslog:
              - facilityNames:
                  - cron
                logLevels:
                  - Debug
                  - Critical
                  - Emergency
                name: cronSyslog
                streams:
                  - Microsoft-Syslog
              - facilityNames:
                  - syslog
                logLevels:
                  - Alert
                  - Critical
                  - Emergency
                name: syslogBase
                streams:
                  - Microsoft-Syslog
            windowsEventLogs:
              - name: cloudSecurityTeamEvents
                streams:
                  - Microsoft-WindowsEvent
                xPathQueries:
                  - Security!
              - name: appTeam1AppEvents
                streams:
                  - Microsoft-WindowsEvent
                xPathQueries:
                  - System![System[(Level = 1 or Level = 2 or Level = 3)]]
                  - Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]
          destinations:
            logAnalytics:
              - name: centralWorkspace
                workspaceResourceId: /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace
          location: eastus
          resourceGroupName: myResourceGroup
    

    Create DataCollectionRule Resource

    new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);
    @overload
    def DataCollectionRule(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           data_collection_rule_name: Optional[str] = None,
                           data_flows: Optional[Sequence[DataFlowArgs]] = None,
                           data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                           description: Optional[str] = None,
                           destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                           kind: Optional[Union[str, KnownDataCollectionRuleResourceKind]] = None,
                           location: Optional[str] = None,
                           resource_group_name: Optional[str] = None,
                           tags: Optional[Mapping[str, str]] = None)
    @overload
    def DataCollectionRule(resource_name: str,
                           args: DataCollectionRuleArgs,
                           opts: Optional[ResourceOptions] = None)
    func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)
    public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)
    public DataCollectionRule(String name, DataCollectionRuleArgs args)
    public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)
    
    type: azure-native:insights:DataCollectionRule
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    DataCollectionRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The DataCollectionRule resource accepts the following input properties:

    ResourceGroupName string

    The name of the resource group. The name is case insensitive.

    DataCollectionRuleName string

    The name of the data collection rule. The name is case insensitive.

    DataFlows List<Pulumi.AzureNative.Insights.Inputs.DataFlowArgs>

    The specification of data flows.

    DataSources Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs

    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

    Description string

    Description of the data collection rule.

    Destinations Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs

    The specification of destinations.

    Kind string | Pulumi.AzureNative.Insights.KnownDataCollectionRuleResourceKind

    The kind of the resource.

    Location string

    The geo-location where the resource lives.

    Tags Dictionary<string, string>

    Resource tags.

    ResourceGroupName string

    The name of the resource group. The name is case insensitive.

    DataCollectionRuleName string

    The name of the data collection rule. The name is case insensitive.

    DataFlows []DataFlowArgs

    The specification of data flows.

    DataSources DataCollectionRuleDataSourcesArgs

    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

    Description string

    Description of the data collection rule.

    Destinations DataCollectionRuleDestinationsArgs

    The specification of destinations.

    Kind string | KnownDataCollectionRuleResourceKind

    The kind of the resource.

    Location string

    The geo-location where the resource lives.

    Tags map[string]string

    Resource tags.

    resourceGroupName String

    The name of the resource group. The name is case insensitive.

    dataCollectionRuleName String

    The name of the data collection rule. The name is case insensitive.

    dataFlows List<DataFlowArgs>

    The specification of data flows.

    dataSources DataCollectionRuleDataSourcesArgs

    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

    description String

    Description of the data collection rule.

    destinations DataCollectionRuleDestinationsArgs

    The specification of destinations.

    kind String | KnownDataCollectionRuleResourceKind

    The kind of the resource.

    location String

    The geo-location where the resource lives.

    tags Map<String,String>

    Resource tags.

    resourceGroupName string

    The name of the resource group. The name is case insensitive.

    dataCollectionRuleName string

    The name of the data collection rule. The name is case insensitive.

    dataFlows DataFlowArgs[]

    The specification of data flows.

    dataSources DataCollectionRuleDataSourcesArgs

    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

    description string

    Description of the data collection rule.

    destinations DataCollectionRuleDestinationsArgs

    The specification of destinations.

    kind string | KnownDataCollectionRuleResourceKind

    The kind of the resource.

    location string

    The geo-location where the resource lives.

    tags {[key: string]: string}

    Resource tags.

    resource_group_name str

    The name of the resource group. The name is case insensitive.

    data_collection_rule_name str

    The name of the data collection rule. The name is case insensitive.

    data_flows Sequence[DataFlowArgs]

    The specification of data flows.

    data_sources DataCollectionRuleDataSourcesArgs

    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

    description str

    Description of the data collection rule.

    destinations DataCollectionRuleDestinationsArgs

    The specification of destinations.

    kind str | KnownDataCollectionRuleResourceKind

    The kind of the resource.

    location str

    The geo-location where the resource lives.

    tags Mapping[str, str]

    Resource tags.

    resourceGroupName String

    The name of the resource group. The name is case insensitive.

    dataCollectionRuleName String

    The name of the data collection rule. The name is case insensitive.

    dataFlows List<Property Map>

    The specification of data flows.

    dataSources Property Map

    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

    description String

    Description of the data collection rule.

    destinations Property Map

    The specification of destinations.

    kind String | "Linux" | "Windows"

    The kind of the resource.

    location String

    The geo-location where the resource lives.

    tags Map<String>

    Resource tags.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

    Etag string

    Resource entity tag (ETag).

    Id string

    The provider-assigned unique ID for this managed resource.

    ImmutableId string

    The immutable ID of this data collection rule. This property is READ-ONLY.

    Name string

    The name of the resource.

    ProvisioningState string

    The resource provisioning state.

    Type string

    The type of the resource.

    Etag string

    Resource entity tag (ETag).

    Id string

    The provider-assigned unique ID for this managed resource.

    ImmutableId string

    The immutable ID of this data collection rule. This property is READ-ONLY.

    Name string

    The name of the resource.

    ProvisioningState string

    The resource provisioning state.

    Type string

    The type of the resource.

    etag String

    Resource entity tag (ETag).

    id String

    The provider-assigned unique ID for this managed resource.

    immutableId String

    The immutable ID of this data collection rule. This property is READ-ONLY.

    name String

    The name of the resource.

    provisioningState String

    The resource provisioning state.

    type String

    The type of the resource.

    etag string

    Resource entity tag (ETag).

    id string

    The provider-assigned unique ID for this managed resource.

    immutableId string

    The immutable ID of this data collection rule. This property is READ-ONLY.

    name string

    The name of the resource.

    provisioningState string

    The resource provisioning state.

    type string

    The type of the resource.

    etag str

    Resource entity tag (ETag).

    id str

    The provider-assigned unique ID for this managed resource.

    immutable_id str

    The immutable ID of this data collection rule. This property is READ-ONLY.

    name str

    The name of the resource.

    provisioning_state str

    The resource provisioning state.

    type str

    The type of the resource.

    etag String

    Resource entity tag (ETag).

    id String

    The provider-assigned unique ID for this managed resource.

    immutableId String

    The immutable ID of this data collection rule. This property is READ-ONLY.

    name String

    The name of the resource.

    provisioningState String

    The resource provisioning state.

    type String

    The type of the resource.

    Supporting Types

    DataCollectionRuleDataSources

    Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSource>

    The list of Azure VM extension data source configurations.

    PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSource>

    The list of performance counter data source configurations.

    Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSource>

    The list of Syslog data source configurations.

    WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSource>

    The list of Windows Event Log data source configurations.

    Extensions []ExtensionDataSource

    The list of Azure VM extension data source configurations.

    PerformanceCounters []PerfCounterDataSource

    The list of performance counter data source configurations.

    Syslog []SyslogDataSource

    The list of Syslog data source configurations.

    WindowsEventLogs []WindowsEventLogDataSource

    The list of Windows Event Log data source configurations.

    extensions List<ExtensionDataSource>

    The list of Azure VM extension data source configurations.

    performanceCounters List<PerfCounterDataSource>

    The list of performance counter data source configurations.

    syslog List<SyslogDataSource>

    The list of Syslog data source configurations.

    windowsEventLogs List<WindowsEventLogDataSource>

    The list of Windows Event Log data source configurations.

    extensions ExtensionDataSource[]

    The list of Azure VM extension data source configurations.

    performanceCounters PerfCounterDataSource[]

    The list of performance counter data source configurations.

    syslog SyslogDataSource[]

    The list of Syslog data source configurations.

    windowsEventLogs WindowsEventLogDataSource[]

    The list of Windows Event Log data source configurations.

    extensions Sequence[ExtensionDataSource]

    The list of Azure VM extension data source configurations.

    performance_counters Sequence[PerfCounterDataSource]

    The list of performance counter data source configurations.

    syslog Sequence[SyslogDataSource]

    The list of Syslog data source configurations.

    windows_event_logs Sequence[WindowsEventLogDataSource]

    The list of Windows Event Log data source configurations.

    extensions List<Property Map>

    The list of Azure VM extension data source configurations.

    performanceCounters List<Property Map>

    The list of performance counter data source configurations.

    syslog List<Property Map>

    The list of Syslog data source configurations.

    windowsEventLogs List<Property Map>

    The list of Windows Event Log data source configurations.

    DataCollectionRuleDestinations

    AzureMonitorMetrics DestinationsSpecAzureMonitorMetrics

    Azure Monitor Metrics destination.

    LogAnalytics []LogAnalyticsDestination

    List of Log Analytics destinations.

    azureMonitorMetrics DestinationsSpecAzureMonitorMetrics

    Azure Monitor Metrics destination.

    logAnalytics List<LogAnalyticsDestination>

    List of Log Analytics destinations.

    azureMonitorMetrics DestinationsSpecAzureMonitorMetrics

    Azure Monitor Metrics destination.

    logAnalytics LogAnalyticsDestination[]

    List of Log Analytics destinations.

    azure_monitor_metrics DestinationsSpecAzureMonitorMetrics

    Azure Monitor Metrics destination.

    log_analytics Sequence[LogAnalyticsDestination]

    List of Log Analytics destinations.

    azureMonitorMetrics Property Map

    Azure Monitor Metrics destination.

    logAnalytics List<Property Map>

    List of Log Analytics destinations.

    DataCollectionRuleResponseDataSources

    Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSourceResponse>

    The list of Azure VM extension data source configurations.

    PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSourceResponse>

    The list of performance counter data source configurations.

    Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSourceResponse>

    The list of Syslog data source configurations.

    WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSourceResponse>

    The list of Windows Event Log data source configurations.

    Extensions []ExtensionDataSourceResponse

    The list of Azure VM extension data source configurations.

    PerformanceCounters []PerfCounterDataSourceResponse

    The list of performance counter data source configurations.

    Syslog []SyslogDataSourceResponse

    The list of Syslog data source configurations.

    WindowsEventLogs []WindowsEventLogDataSourceResponse

    The list of Windows Event Log data source configurations.

    extensions List<ExtensionDataSourceResponse>

    The list of Azure VM extension data source configurations.

    performanceCounters List<PerfCounterDataSourceResponse>

    The list of performance counter data source configurations.

    syslog List<SyslogDataSourceResponse>

    The list of Syslog data source configurations.

    windowsEventLogs List<WindowsEventLogDataSourceResponse>

    The list of Windows Event Log data source configurations.

    extensions ExtensionDataSourceResponse[]

    The list of Azure VM extension data source configurations.

    performanceCounters PerfCounterDataSourceResponse[]

    The list of performance counter data source configurations.

    syslog SyslogDataSourceResponse[]

    The list of Syslog data source configurations.

    windowsEventLogs WindowsEventLogDataSourceResponse[]

    The list of Windows Event Log data source configurations.

    extensions Sequence[ExtensionDataSourceResponse]

    The list of Azure VM extension data source configurations.

    performance_counters Sequence[PerfCounterDataSourceResponse]

    The list of performance counter data source configurations.

    syslog Sequence[SyslogDataSourceResponse]

    The list of Syslog data source configurations.

    windows_event_logs Sequence[WindowsEventLogDataSourceResponse]

    The list of Windows Event Log data source configurations.

    extensions List<Property Map>

    The list of Azure VM extension data source configurations.

    performanceCounters List<Property Map>

    The list of performance counter data source configurations.

    syslog List<Property Map>

    The list of Syslog data source configurations.

    windowsEventLogs List<Property Map>

    The list of Windows Event Log data source configurations.

    DataCollectionRuleResponseDestinations

    azureMonitorMetrics Property Map

    Azure Monitor Metrics destination.

    logAnalytics List<Property Map>

    List of Log Analytics destinations.

    DataFlow

    Destinations List<string>

    List of destinations for this data flow.

    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownDataFlowStreams>>

    List of streams for this data flow.

    Destinations []string

    List of destinations for this data flow.

    Streams []string

    List of streams for this data flow.

    destinations List<String>

    List of destinations for this data flow.

    streams List<Either<String,KnownDataFlowStreams>>

    List of streams for this data flow.

    destinations string[]

    List of destinations for this data flow.

    streams (string | KnownDataFlowStreams)[]

    List of streams for this data flow.

    destinations Sequence[str]

    List of destinations for this data flow.

    streams Sequence[Union[str, KnownDataFlowStreams]]

    List of streams for this data flow.

    destinations List<String>

    List of destinations for this data flow.

    streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">

    List of streams for this data flow.

    DataFlowResponse

    Destinations List<string>

    List of destinations for this data flow.

    Streams List<string>

    List of streams for this data flow.

    Destinations []string

    List of destinations for this data flow.

    Streams []string

    List of streams for this data flow.

    destinations List<String>

    List of destinations for this data flow.

    streams List<String>

    List of streams for this data flow.

    destinations string[]

    List of destinations for this data flow.

    streams string[]

    List of streams for this data flow.

    destinations Sequence[str]

    List of destinations for this data flow.

    streams Sequence[str]

    List of streams for this data flow.

    destinations List<String>

    List of destinations for this data flow.

    streams List<String>

    List of streams for this data flow.

    DestinationsSpecAzureMonitorMetrics

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name str

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    DestinationsSpecResponseAzureMonitorMetrics

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name str

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    ExtensionDataSource

    ExtensionName string

    The name of the VM extension.

    ExtensionSettings object

    The extension settings. The format is specific for particular extension.

    InputDataSources List<string>

    The list of data sources this extension needs data from.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownExtensionDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    ExtensionName string

    The name of the VM extension.

    ExtensionSettings interface{}

    The extension settings. The format is specific for particular extension.

    InputDataSources []string

    The list of data sources this extension needs data from.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extensionName String

    The name of the VM extension.

    extensionSettings Object

    The extension settings. The format is specific for particular extension.

    inputDataSources List<String>

    The list of data sources this extension needs data from.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<Either<String,KnownExtensionDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extensionName string

    The name of the VM extension.

    extensionSettings any

    The extension settings. The format is specific for particular extension.

    inputDataSources string[]

    The list of data sources this extension needs data from.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams (string | KnownExtensionDataSourceStreams)[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extension_name str

    The name of the VM extension.

    extension_settings Any

    The extension settings. The format is specific for particular extension.

    input_data_sources Sequence[str]

    The list of data sources this extension needs data from.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams Sequence[Union[str, KnownExtensionDataSourceStreams]]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extensionName String

    The name of the VM extension.

    extensionSettings Any

    The extension settings. The format is specific for particular extension.

    inputDataSources List<String>

    The list of data sources this extension needs data from.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    ExtensionDataSourceResponse

    ExtensionName string

    The name of the VM extension.

    ExtensionSettings object

    The extension settings. The format is specific for particular extension.

    InputDataSources List<string>

    The list of data sources this extension needs data from.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams List<string>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    ExtensionName string

    The name of the VM extension.

    ExtensionSettings interface{}

    The extension settings. The format is specific for particular extension.

    InputDataSources []string

    The list of data sources this extension needs data from.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extensionName String

    The name of the VM extension.

    extensionSettings Object

    The extension settings. The format is specific for particular extension.

    inputDataSources List<String>

    The list of data sources this extension needs data from.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extensionName string

    The name of the VM extension.

    extensionSettings any

    The extension settings. The format is specific for particular extension.

    inputDataSources string[]

    The list of data sources this extension needs data from.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams string[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extension_name str

    The name of the VM extension.

    extension_settings Any

    The extension settings. The format is specific for particular extension.

    input_data_sources Sequence[str]

    The list of data sources this extension needs data from.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams Sequence[str]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    extensionName String

    The name of the VM extension.

    extensionSettings Any

    The extension settings. The format is specific for particular extension.

    inputDataSources List<String>

    The list of data sources this extension needs data from.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    KnownDataCollectionRuleResourceKind

    Linux
    Linux
    Windows
    Windows
    KnownDataCollectionRuleResourceKindLinux
    Linux
    KnownDataCollectionRuleResourceKindWindows
    Windows
    Linux
    Linux
    Windows
    Windows
    Linux
    Linux
    Windows
    Windows
    LINUX
    Linux
    WINDOWS
    Windows
    "Linux"
    Linux
    "Windows"
    Windows

    KnownDataFlowStreams

    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    KnownDataFlowStreams_Microsoft_Event
    Microsoft-Event
    KnownDataFlowStreams_Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    KnownDataFlowStreams_Microsoft_Perf
    Microsoft-Perf
    KnownDataFlowStreams_Microsoft_Syslog
    Microsoft-Syslog
    KnownDataFlowStreams_Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MicrosoftEvent
    Microsoft-Event
    MicrosoftInsightsMetrics
    Microsoft-InsightsMetrics
    MicrosoftPerf
    Microsoft-Perf
    MicrosoftSyslog
    Microsoft-Syslog
    MicrosoftWindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MICROSOFT_EVENT
    Microsoft-Event
    MICROSOFT_INSIGHTS_METRICS
    Microsoft-InsightsMetrics
    MICROSOFT_PERF
    Microsoft-Perf
    MICROSOFT_SYSLOG
    Microsoft-Syslog
    MICROSOFT_WINDOWS_EVENT
    Microsoft-WindowsEvent
    "Microsoft-Event"
    Microsoft-Event
    "Microsoft-InsightsMetrics"
    Microsoft-InsightsMetrics
    "Microsoft-Perf"
    Microsoft-Perf
    "Microsoft-Syslog"
    Microsoft-Syslog
    "Microsoft-WindowsEvent"
    Microsoft-WindowsEvent

    KnownExtensionDataSourceStreams

    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    KnownExtensionDataSourceStreams_Microsoft_Event
    Microsoft-Event
    KnownExtensionDataSourceStreams_Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    KnownExtensionDataSourceStreams_Microsoft_Perf
    Microsoft-Perf
    KnownExtensionDataSourceStreams_Microsoft_Syslog
    Microsoft-Syslog
    KnownExtensionDataSourceStreams_Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MicrosoftEvent
    Microsoft-Event
    MicrosoftInsightsMetrics
    Microsoft-InsightsMetrics
    MicrosoftPerf
    Microsoft-Perf
    MicrosoftSyslog
    Microsoft-Syslog
    MicrosoftWindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MICROSOFT_EVENT
    Microsoft-Event
    MICROSOFT_INSIGHTS_METRICS
    Microsoft-InsightsMetrics
    MICROSOFT_PERF
    Microsoft-Perf
    MICROSOFT_SYSLOG
    Microsoft-Syslog
    MICROSOFT_WINDOWS_EVENT
    Microsoft-WindowsEvent
    "Microsoft-Event"
    Microsoft-Event
    "Microsoft-InsightsMetrics"
    Microsoft-InsightsMetrics
    "Microsoft-Perf"
    Microsoft-Perf
    "Microsoft-Syslog"
    Microsoft-Syslog
    "Microsoft-WindowsEvent"
    Microsoft-WindowsEvent

    KnownPerfCounterDataSourceStreams

    Microsoft_Perf
    Microsoft-Perf
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    KnownPerfCounterDataSourceStreams_Microsoft_Perf
    Microsoft-Perf
    KnownPerfCounterDataSourceStreams_Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    MicrosoftPerf
    Microsoft-Perf
    MicrosoftInsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    MICROSOFT_PERF
    Microsoft-Perf
    MICROSOFT_INSIGHTS_METRICS
    Microsoft-InsightsMetrics
    "Microsoft-Perf"
    Microsoft-Perf
    "Microsoft-InsightsMetrics"
    Microsoft-InsightsMetrics

    KnownSyslogDataSourceFacilityNames

    Auth
    auth
    Authpriv
    authpriv
    Cron
    cron
    Daemon
    daemon
    Kern
    kern
    Lpr
    lpr
    Mail
    mail
    Mark
    mark
    News
    news
    Syslog
    syslog
    User
    user
    Uucp
    uucp
    Local0
    local0
    Local1
    local1
    Local2
    local2
    Local3
    local3
    Local4
    local4
    Local5
    local5
    Local6
    local6
    Local7
    local7
    Asterisk
    *
    KnownSyslogDataSourceFacilityNamesAuth
    auth
    KnownSyslogDataSourceFacilityNamesAuthpriv
    authpriv
    KnownSyslogDataSourceFacilityNamesCron
    cron
    KnownSyslogDataSourceFacilityNamesDaemon
    daemon
    KnownSyslogDataSourceFacilityNamesKern
    kern
    KnownSyslogDataSourceFacilityNamesLpr
    lpr
    KnownSyslogDataSourceFacilityNamesMail
    mail
    KnownSyslogDataSourceFacilityNamesMark
    mark
    KnownSyslogDataSourceFacilityNamesNews
    news
    KnownSyslogDataSourceFacilityNamesSyslog
    syslog
    KnownSyslogDataSourceFacilityNamesUser
    user
    KnownSyslogDataSourceFacilityNamesUucp
    uucp
    KnownSyslogDataSourceFacilityNamesLocal0
    local0
    KnownSyslogDataSourceFacilityNamesLocal1
    local1
    KnownSyslogDataSourceFacilityNamesLocal2
    local2
    KnownSyslogDataSourceFacilityNamesLocal3
    local3
    KnownSyslogDataSourceFacilityNamesLocal4
    local4
    KnownSyslogDataSourceFacilityNamesLocal5
    local5
    KnownSyslogDataSourceFacilityNamesLocal6
    local6
    KnownSyslogDataSourceFacilityNamesLocal7
    local7
    KnownSyslogDataSourceFacilityNamesAsterisk
    *
    Auth
    auth
    Authpriv
    authpriv
    Cron
    cron
    Daemon
    daemon
    Kern
    kern
    Lpr
    lpr
    Mail
    mail
    Mark
    mark
    News
    news
    Syslog
    syslog
    User
    user
    Uucp
    uucp
    Local0
    local0
    Local1
    local1
    Local2
    local2
    Local3
    local3
    Local4
    local4
    Local5
    local5
    Local6
    local6
    Local7
    local7
    Asterisk
    *
    Auth
    auth
    Authpriv
    authpriv
    Cron
    cron
    Daemon
    daemon
    Kern
    kern
    Lpr
    lpr
    Mail
    mail
    Mark
    mark
    News
    news
    Syslog
    syslog
    User
    user
    Uucp
    uucp
    Local0
    local0
    Local1
    local1
    Local2
    local2
    Local3
    local3
    Local4
    local4
    Local5
    local5
    Local6
    local6
    Local7
    local7
    Asterisk
    *
    AUTH
    auth
    AUTHPRIV
    authpriv
    CRON
    cron
    DAEMON
    daemon
    KERN
    kern
    LPR
    lpr
    MAIL
    mail
    MARK
    mark
    NEWS
    news
    SYSLOG
    syslog
    USER
    user
    UUCP
    uucp
    LOCAL0
    local0
    LOCAL1
    local1
    LOCAL2
    local2
    LOCAL3
    local3
    LOCAL4
    local4
    LOCAL5
    local5
    LOCAL6
    local6
    LOCAL7
    local7
    ASTERISK
    *
    "auth"
    auth
    "authpriv"
    authpriv
    "cron"
    cron
    "daemon"
    daemon
    "kern"
    kern
    "lpr"
    lpr
    "mail"
    mail
    "mark"
    mark
    "news"
    news
    "syslog"
    syslog
    "user"
    user
    "uucp"
    uucp
    "local0"
    local0
    "local1"
    local1
    "local2"
    local2
    "local3"
    local3
    "local4"
    local4
    "local5"
    local5
    "local6"
    local6
    "local7"
    local7
    "*"
    *

    KnownSyslogDataSourceLogLevels

    Debug
    Debug
    Info
    Info
    Notice
    Notice
    Warning
    Warning
    Error
    Error
    Critical
    Critical
    Alert
    Alert
    Emergency
    Emergency
    Asterisk
    *
    KnownSyslogDataSourceLogLevelsDebug
    Debug
    KnownSyslogDataSourceLogLevelsInfo
    Info
    KnownSyslogDataSourceLogLevelsNotice
    Notice
    KnownSyslogDataSourceLogLevelsWarning
    Warning
    KnownSyslogDataSourceLogLevelsError
    Error
    KnownSyslogDataSourceLogLevelsCritical
    Critical
    KnownSyslogDataSourceLogLevelsAlert
    Alert
    KnownSyslogDataSourceLogLevelsEmergency
    Emergency
    KnownSyslogDataSourceLogLevelsAsterisk
    *
    Debug
    Debug
    Info
    Info
    Notice
    Notice
    Warning
    Warning
    Error
    Error
    Critical
    Critical
    Alert
    Alert
    Emergency
    Emergency
    Asterisk
    *
    Debug
    Debug
    Info
    Info
    Notice
    Notice
    Warning
    Warning
    Error
    Error
    Critical
    Critical
    Alert
    Alert
    Emergency
    Emergency
    Asterisk
    *
    DEBUG
    Debug
    INFO
    Info
    NOTICE
    Notice
    WARNING
    Warning
    ERROR
    Error
    CRITICAL
    Critical
    ALERT
    Alert
    EMERGENCY
    Emergency
    ASTERISK
    *
    "Debug"
    Debug
    "Info"
    Info
    "Notice"
    Notice
    "Warning"
    Warning
    "Error"
    Error
    "Critical"
    Critical
    "Alert"
    Alert
    "Emergency"
    Emergency
    "*"
    *

    KnownSyslogDataSourceStreams

    Microsoft_Syslog
    Microsoft-Syslog
    KnownSyslogDataSourceStreams_Microsoft_Syslog
    Microsoft-Syslog
    MicrosoftSyslog
    Microsoft-Syslog
    Microsoft_Syslog
    Microsoft-Syslog
    MICROSOFT_SYSLOG
    Microsoft-Syslog
    "Microsoft-Syslog"
    Microsoft-Syslog

    KnownWindowsEventLogDataSourceStreams

    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    KnownWindowsEventLogDataSourceStreams_Microsoft_Event
    Microsoft-Event
    MicrosoftWindowsEvent
    Microsoft-WindowsEvent
    MicrosoftEvent
    Microsoft-Event
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    MICROSOFT_WINDOWS_EVENT
    Microsoft-WindowsEvent
    MICROSOFT_EVENT
    Microsoft-Event
    "Microsoft-WindowsEvent"
    Microsoft-WindowsEvent
    "Microsoft-Event"
    Microsoft-Event

    LogAnalyticsDestination

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    WorkspaceResourceId string

    The resource ID of the Log Analytics workspace.

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    WorkspaceResourceId string

    The resource ID of the Log Analytics workspace.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspaceResourceId String

    The resource ID of the Log Analytics workspace.

    name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspaceResourceId string

    The resource ID of the Log Analytics workspace.

    name str

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspace_resource_id str

    The resource ID of the Log Analytics workspace.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspaceResourceId String

    The resource ID of the Log Analytics workspace.

    LogAnalyticsDestinationResponse

    WorkspaceId string

    The Customer ID of the Log Analytics workspace.

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    WorkspaceResourceId string

    The resource ID of the Log Analytics workspace.

    WorkspaceId string

    The Customer ID of the Log Analytics workspace.

    Name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    WorkspaceResourceId string

    The resource ID of the Log Analytics workspace.

    workspaceId String

    The Customer ID of the Log Analytics workspace.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspaceResourceId String

    The resource ID of the Log Analytics workspace.

    workspaceId string

    The Customer ID of the Log Analytics workspace.

    name string

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspaceResourceId string

    The resource ID of the Log Analytics workspace.

    workspace_id str

    The Customer ID of the Log Analytics workspace.

    name str

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspace_resource_id str

    The resource ID of the Log Analytics workspace.

    workspaceId String

    The Customer ID of the Log Analytics workspace.

    name String

    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    workspaceResourceId String

    The resource ID of the Log Analytics workspace.

    PerfCounterDataSource

    CounterSpecifiers List<string>

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    SamplingFrequencyInSeconds int

    The number of seconds between consecutive counter measurements (samples).

    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPerfCounterDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    CounterSpecifiers []string

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    SamplingFrequencyInSeconds int

    The number of seconds between consecutive counter measurements (samples).

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counterSpecifiers List<String>

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    samplingFrequencyInSeconds Integer

    The number of seconds between consecutive counter measurements (samples).

    streams List<Either<String,KnownPerfCounterDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counterSpecifiers string[]

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    samplingFrequencyInSeconds number

    The number of seconds between consecutive counter measurements (samples).

    streams (string | KnownPerfCounterDataSourceStreams)[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counter_specifiers Sequence[str]

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    sampling_frequency_in_seconds int

    The number of seconds between consecutive counter measurements (samples).

    streams Sequence[Union[str, KnownPerfCounterDataSourceStreams]]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counterSpecifiers List<String>

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    samplingFrequencyInSeconds Number

    The number of seconds between consecutive counter measurements (samples).

    streams List<String | "Microsoft-Perf" | "Microsoft-InsightsMetrics">

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    PerfCounterDataSourceResponse

    CounterSpecifiers List<string>

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    SamplingFrequencyInSeconds int

    The number of seconds between consecutive counter measurements (samples).

    Streams List<string>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    CounterSpecifiers []string

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    SamplingFrequencyInSeconds int

    The number of seconds between consecutive counter measurements (samples).

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counterSpecifiers List<String>

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    samplingFrequencyInSeconds Integer

    The number of seconds between consecutive counter measurements (samples).

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counterSpecifiers string[]

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    samplingFrequencyInSeconds number

    The number of seconds between consecutive counter measurements (samples).

    streams string[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counter_specifiers Sequence[str]

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    sampling_frequency_in_seconds int

    The number of seconds between consecutive counter measurements (samples).

    streams Sequence[str]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    counterSpecifiers List<String>

    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    samplingFrequencyInSeconds Number

    The number of seconds between consecutive counter measurements (samples).

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    SyslogDataSource

    FacilityNames List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceFacilityNames>>

    The list of facility names.

    LogLevels List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceLogLevels>>

    The log levels to collect.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    FacilityNames []string

    The list of facility names.

    LogLevels []string

    The log levels to collect.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facilityNames List<Either<String,KnownSyslogDataSourceFacilityNames>>

    The list of facility names.

    logLevels List<Either<String,KnownSyslogDataSourceLogLevels>>

    The log levels to collect.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<Either<String,KnownSyslogDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facilityNames (string | KnownSyslogDataSourceFacilityNames)[]

    The list of facility names.

    logLevels (string | KnownSyslogDataSourceLogLevels)[]

    The log levels to collect.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams (string | KnownSyslogDataSourceStreams)[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facility_names Sequence[Union[str, KnownSyslogDataSourceFacilityNames]]

    The list of facility names.

    log_levels Sequence[Union[str, KnownSyslogDataSourceLogLevels]]

    The log levels to collect.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams Sequence[Union[str, KnownSyslogDataSourceStreams]]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facilityNames List<String | "auth" | "authpriv" | "cron" | "daemon" | "kern" | "lpr" | "mail" | "mark" | "news" | "syslog" | "user" | "uucp" | "local0" | "local1" | "local2" | "local3" | "local4" | "local5" | "local6" | "local7" | "*">

    The list of facility names.

    logLevels List<String | "Debug" | "Info" | "Notice" | "Warning" | "Error" | "Critical" | "Alert" | "Emergency" | "*">

    The log levels to collect.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String | "Microsoft-Syslog">

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    SyslogDataSourceResponse

    FacilityNames List<string>

    The list of facility names.

    LogLevels List<string>

    The log levels to collect.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams List<string>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    FacilityNames []string

    The list of facility names.

    LogLevels []string

    The log levels to collect.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facilityNames List<String>

    The list of facility names.

    logLevels List<String>

    The log levels to collect.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facilityNames string[]

    The list of facility names.

    logLevels string[]

    The log levels to collect.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams string[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facility_names Sequence[str]

    The list of facility names.

    log_levels Sequence[str]

    The log levels to collect.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams Sequence[str]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    facilityNames List<String>

    The list of facility names.

    logLevels List<String>

    The log levels to collect.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    WindowsEventLogDataSource

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownWindowsEventLogDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    XPathQueries List<string>

    A list of Windows Event Log queries in XPATH format.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    XPathQueries []string

    A list of Windows Event Log queries in XPATH format.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<Either<String,KnownWindowsEventLogDataSourceStreams>>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    xPathQueries List<String>

    A list of Windows Event Log queries in XPATH format.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams (string | KnownWindowsEventLogDataSourceStreams)[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    xPathQueries string[]

    A list of Windows Event Log queries in XPATH format.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams Sequence[Union[str, KnownWindowsEventLogDataSourceStreams]]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    x_path_queries Sequence[str]

    A list of Windows Event Log queries in XPATH format.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String | "Microsoft-WindowsEvent" | "Microsoft-Event">

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    xPathQueries List<String>

    A list of Windows Event Log queries in XPATH format.

    WindowsEventLogDataSourceResponse

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams List<string>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    XPathQueries List<string>

    A list of Windows Event Log queries in XPATH format.

    Name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Streams []string

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    XPathQueries []string

    A list of Windows Event Log queries in XPATH format.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    xPathQueries List<String>

    A list of Windows Event Log queries in XPATH format.

    name string

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams string[]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    xPathQueries string[]

    A list of Windows Event Log queries in XPATH format.

    name str

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams Sequence[str]

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    x_path_queries Sequence[str]

    A list of Windows Event Log queries in XPATH format.

    name String

    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    streams List<String>

    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    xPathQueries List<String>

    A list of Windows Event Log queries in XPATH format.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:insights:DataCollectionRule myCollectionRule /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.Insights/dataCollectionRules/myCollectionRule 
    

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi