Welcome to Pulumi Registry, your window into the cloud. Read the announcement.

Azure Native

v1.42.0 published on Monday, Oct 25, 2021 by Pulumi

DataCollectionRule

Definition of ARM tracked top level resource. API Version: 2019-11-01-preview.

Example Usage

Create or update data collection rule

using Pulumi;
using AzureNative = Pulumi.AzureNative;

class MyStack : Stack
{
    public MyStack()
    {
        var dataCollectionRule = new AzureNative.Insights.DataCollectionRule("dataCollectionRule", new AzureNative.Insights.DataCollectionRuleArgs
        {
            DataCollectionRuleName = "myCollectionRule",
            DataFlows = 
            {
                new AzureNative.Insights.Inputs.DataFlowArgs
                {
                    Destinations = 
                    {
                        "centralWorkspace",
                    },
                    Streams = 
                    {
                        "Microsoft-Perf",
                        "Microsoft-Syslog",
                        "Microsoft-WindowsEvent",
                    },
                },
            },
            DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
            {
                PerformanceCounters = 
                {
                    new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                    {
                        CounterSpecifiers = 
                        {
                            "\\Processor(_Total)\\% Processor Time",
                            "\\Memory\\Committed Bytes",
                            "\\LogicalDisk(_Total)\\Free Megabytes",
                            "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                        },
                        Name = "cloudTeamCoreCounters",
                        SamplingFrequencyInSeconds = 15,
                        Streams = 
                        {
                            "Microsoft-Perf",
                        },
                    },
                    new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                    {
                        CounterSpecifiers = 
                        {
                            "\\Process(_Total)\\Thread Count",
                        },
                        Name = "appTeamExtraCounters",
                        SamplingFrequencyInSeconds = 30,
                        Streams = 
                        {
                            "Microsoft-Perf",
                        },
                    },
                },
                Syslog = 
                {
                    new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                    {
                        FacilityNames = 
                        {
                            "cron",
                        },
                        LogLevels = 
                        {
                            "Debug",
                            "Critical",
                            "Emergency",
                        },
                        Name = "cronSyslog",
                        Streams = 
                        {
                            "Microsoft-Syslog",
                        },
                    },
                    new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                    {
                        FacilityNames = 
                        {
                            "syslog",
                        },
                        LogLevels = 
                        {
                            "Alert",
                            "Critical",
                            "Emergency",
                        },
                        Name = "syslogBase",
                        Streams = 
                        {
                            "Microsoft-Syslog",
                        },
                    },
                },
                WindowsEventLogs = 
                {
                    new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                    {
                        Name = "cloudSecurityTeamEvents",
                        Streams = 
                        {
                            "Microsoft-WindowsEvent",
                        },
                        XPathQueries = 
                        {
                            "Security!",
                        },
                    },
                    new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                    {
                        Name = "appTeam1AppEvents",
                        Streams = 
                        {
                            "Microsoft-WindowsEvent",
                        },
                        XPathQueries = 
                        {
                            "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                            "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                        },
                    },
                },
            },
            Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
            {
                LogAnalytics = 
                {
                    new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
                    {
                        Name = "centralWorkspace",
                        WorkspaceResourceId = "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
                    },
                },
            },
            Location = "eastus",
            ResourceGroupName = "myResourceGroup",
        });
    }

}

package main

import (
	"fmt"

	insights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/insights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := insights.NewDataCollectionRule(ctx, "dataCollectionRule", &insights.DataCollectionRuleArgs{
			DataCollectionRuleName: pulumi.String("myCollectionRule"),
			DataFlows: []insights.DataFlowArgs{
				&insights.DataFlowArgs{
					Destinations: pulumi.StringArray{
						pulumi.String("centralWorkspace"),
					},
					Streams: pulumi.StringArray{
						pulumi.String("Microsoft-Perf"),
						pulumi.String("Microsoft-Syslog"),
						pulumi.String("Microsoft-WindowsEvent"),
					},
				},
			},
			DataSources: &insights.DataCollectionRuleDataSourcesArgs{
				PerformanceCounters: insights.PerfCounterDataSourceArray{
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String(fmt.Sprintf("%v%v%v", "\\Processor(_Total)\\", "%", " Processor Time")),
							pulumi.String("\\Memory\\Committed Bytes"),
							pulumi.String("\\LogicalDisk(_Total)\\Free Megabytes"),
							pulumi.String("\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
						},
						Name:                       pulumi.String("cloudTeamCoreCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(15),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
						},
					},
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Process(_Total)\\Thread Count"),
						},
						Name:                       pulumi.String("appTeamExtraCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(30),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
						},
					},
				},
				Syslog: insights.SyslogDataSourceArray{
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("cron"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("Debug"),
							pulumi.String("Critical"),
							pulumi.String("Emergency"),
						},
						Name: pulumi.String("cronSyslog"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Syslog"),
						},
					},
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("syslog"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("Alert"),
							pulumi.String("Critical"),
							pulumi.String("Emergency"),
						},
						Name: pulumi.String("syslogBase"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Syslog"),
						},
					},
				},
				WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("cloudSecurityTeamEvents"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("Security!"),
						},
					},
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("appTeam1AppEvents"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("System![System[(Level = 1 or Level = 2 or Level = 3)]]"),
							pulumi.String("Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]"),
						},
					},
				},
			},
			Destinations: &insights.DataCollectionRuleDestinationsArgs{
				LogAnalytics: insights.LogAnalyticsDestinationArray{
					&insights.LogAnalyticsDestinationArgs{
						Name:                pulumi.String("centralWorkspace"),
						WorkspaceResourceId: pulumi.String("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace"),
					},
				},
			},
			Location:          pulumi.String("eastus"),
			ResourceGroupName: pulumi.String("myResourceGroup"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

import pulumi
import pulumi_azure_native as azure_native

data_collection_rule = azure_native.insights.DataCollectionRule("dataCollectionRule",
    data_collection_rule_name="myCollectionRule",
    data_flows=[azure_native.insights.DataFlowArgs(
        destinations=["centralWorkspace"],
        streams=[
            "Microsoft-Perf",
            "Microsoft-Syslog",
            "Microsoft-WindowsEvent",
        ],
    )],
    data_sources=azure_native.insights.DataCollectionRuleDataSourcesArgs(
        performance_counters=[
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=[
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name="cloudTeamCoreCounters",
                sampling_frequency_in_seconds=15,
                streams=["Microsoft-Perf"],
            ),
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=["\\Process(_Total)\\Thread Count"],
                name="appTeamExtraCounters",
                sampling_frequency_in_seconds=30,
                streams=["Microsoft-Perf"],
            ),
        ],
        syslog=[
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=["cron"],
                log_levels=[
                    "Debug",
                    "Critical",
                    "Emergency",
                ],
                name="cronSyslog",
                streams=["Microsoft-Syslog"],
            ),
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=["syslog"],
                log_levels=[
                    "Alert",
                    "Critical",
                    "Emergency",
                ],
                name="syslogBase",
                streams=["Microsoft-Syslog"],
            ),
        ],
        windows_event_logs=[
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="cloudSecurityTeamEvents",
                streams=["Microsoft-WindowsEvent"],
                x_path_queries=["Security!"],
            ),
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="appTeam1AppEvents",
                streams=["Microsoft-WindowsEvent"],
                x_path_queries=[
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            ),
        ],
    ),
    destinations=azure_native.insights.DataCollectionRuleDestinationsArgs(
        log_analytics=[azure_native.insights.LogAnalyticsDestinationArgs(
            name="centralWorkspace",
            workspace_resource_id="/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        )],
    ),
    location="eastus",
    resource_group_name="myResourceGroup")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const dataCollectionRule = new azure_native.insights.DataCollectionRule("dataCollectionRule", {
    dataCollectionRuleName: "myCollectionRule",
    dataFlows: [{
        destinations: ["centralWorkspace"],
        streams: [
            "Microsoft-Perf",
            "Microsoft-Syslog",
            "Microsoft-WindowsEvent",
        ],
    }],
    dataSources: {
        performanceCounters: [
            {
                counterSpecifiers: [
                    `\Processor(_Total)\% Processor Time`,
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name: "cloudTeamCoreCounters",
                samplingFrequencyInSeconds: 15,
                streams: ["Microsoft-Perf"],
            },
            {
                counterSpecifiers: ["\\Process(_Total)\\Thread Count"],
                name: "appTeamExtraCounters",
                samplingFrequencyInSeconds: 30,
                streams: ["Microsoft-Perf"],
            },
        ],
        syslog: [
            {
                facilityNames: ["cron"],
                logLevels: [
                    "Debug",
                    "Critical",
                    "Emergency",
                ],
                name: "cronSyslog",
                streams: ["Microsoft-Syslog"],
            },
            {
                facilityNames: ["syslog"],
                logLevels: [
                    "Alert",
                    "Critical",
                    "Emergency",
                ],
                name: "syslogBase",
                streams: ["Microsoft-Syslog"],
            },
        ],
        windowsEventLogs: [
            {
                name: "cloudSecurityTeamEvents",
                streams: ["Microsoft-WindowsEvent"],
                xPathQueries: ["Security!"],
            },
            {
                name: "appTeam1AppEvents",
                streams: ["Microsoft-WindowsEvent"],
                xPathQueries: [
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            },
        ],
    },
    destinations: {
        logAnalytics: [{
            name: "centralWorkspace",
            workspaceResourceId: "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        }],
    },
    location: "eastus",
    resourceGroupName: "myResourceGroup",
});

Create a DataCollectionRule Resource

new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);
@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       data_collection_rule_name: Optional[str] = None,
                       data_flows: Optional[Sequence[DataFlowArgs]] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       kind: Optional[Union[str, KnownDataCollectionRuleResourceKind]] = None,
                       location: Optional[str] = None,
                       resource_group_name: Optional[str] = None,
                       tags: Optional[Mapping[str, str]] = None)
@overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)
func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)
public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.

DataCollectionRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The DataCollectionRule resource accepts the following input properties:

ResourceGroupName string
The name of the resource group. The name is case insensitive.
DataCollectionRuleName string
The name of the data collection rule. The name is case insensitive.
DataFlows List<Pulumi.AzureNative.Insights.Inputs.DataFlowArgs>
The specification of data flows.
DataSources Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
Description string
Description of the data collection rule.
Destinations Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
The specification of destinations.
Kind string | Pulumi.AzureNative.Insights.KnownDataCollectionRuleResourceKind
The kind of the resource.
Location string
The geo-location where the resource lives.
Tags Dictionary<string, string>
Resource tags.
ResourceGroupName string
The name of the resource group. The name is case insensitive.
DataCollectionRuleName string
The name of the data collection rule. The name is case insensitive.
DataFlows []DataFlowArgs
The specification of data flows.
DataSources DataCollectionRuleDataSourcesArgs
The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
Description string
Description of the data collection rule.
Destinations DataCollectionRuleDestinationsArgs
The specification of destinations.
Kind string | KnownDataCollectionRuleResourceKind
The kind of the resource.
Location string
The geo-location where the resource lives.
Tags map[string]string
Resource tags.
resourceGroupName string
The name of the resource group. The name is case insensitive.
dataCollectionRuleName string
The name of the data collection rule. The name is case insensitive.
dataFlows DataFlowArgs[]
The specification of data flows.
dataSources DataCollectionRuleDataSourcesArgs
The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description string
Description of the data collection rule.
destinations DataCollectionRuleDestinationsArgs
The specification of destinations.
kind string | KnownDataCollectionRuleResourceKind
The kind of the resource.
location string
The geo-location where the resource lives.
tags {[key: string]: string}
Resource tags.
resource_group_name str
The name of the resource group. The name is case insensitive.
data_collection_rule_name str
The name of the data collection rule. The name is case insensitive.
data_flows Sequence[DataFlowArgs]
The specification of data flows.
data_sources DataCollectionRuleDataSourcesArgs
The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description str
Description of the data collection rule.
destinations DataCollectionRuleDestinationsArgs
The specification of destinations.
kind str | KnownDataCollectionRuleResourceKind
The kind of the resource.
location str
The geo-location where the resource lives.
tags Mapping[str, str]
Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

Etag string
Resource entity tag (ETag).
Id string
The provider-assigned unique ID for this managed resource.
ImmutableId string
The immutable ID of this data collection rule. This property is READ-ONLY.
Name string
The name of the resource.
ProvisioningState string
The resource provisioning state.
Type string
The type of the resource.
Etag string
Resource entity tag (ETag).
Id string
The provider-assigned unique ID for this managed resource.
ImmutableId string
The immutable ID of this data collection rule. This property is READ-ONLY.
Name string
The name of the resource.
ProvisioningState string
The resource provisioning state.
Type string
The type of the resource.
etag string
Resource entity tag (ETag).
id string
The provider-assigned unique ID for this managed resource.
immutableId string
The immutable ID of this data collection rule. This property is READ-ONLY.
name string
The name of the resource.
provisioningState string
The resource provisioning state.
type string
The type of the resource.
etag str
Resource entity tag (ETag).
id str
The provider-assigned unique ID for this managed resource.
immutable_id str
The immutable ID of this data collection rule. This property is READ-ONLY.
name str
The name of the resource.
provisioning_state str
The resource provisioning state.
type str
The type of the resource.

Supporting Types

DataCollectionRuleDataSources

Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSource>
The list of Azure VM extension data source configurations.
PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSource>
The list of performance counter data source configurations.
Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSource>
The list of Syslog data source configurations.
WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSource>
The list of Windows Event Log data source configurations.
Extensions []ExtensionDataSource
The list of Azure VM extension data source configurations.
PerformanceCounters []PerfCounterDataSource
The list of performance counter data source configurations.
Syslog []SyslogDataSource
The list of Syslog data source configurations.
WindowsEventLogs []WindowsEventLogDataSource
The list of Windows Event Log data source configurations.
extensions ExtensionDataSource[]
The list of Azure VM extension data source configurations.
performanceCounters PerfCounterDataSource[]
The list of performance counter data source configurations.
syslog SyslogDataSource[]
The list of Syslog data source configurations.
windowsEventLogs WindowsEventLogDataSource[]
The list of Windows Event Log data source configurations.
extensions Sequence[ExtensionDataSource]
The list of Azure VM extension data source configurations.
performance_counters Sequence[PerfCounterDataSource]
The list of performance counter data source configurations.
syslog Sequence[SyslogDataSource]
The list of Syslog data source configurations.
windows_event_logs Sequence[WindowsEventLogDataSource]
The list of Windows Event Log data source configurations.

DataCollectionRuleDestinations

AzureMonitorMetrics DestinationsSpecAzureMonitorMetrics
Azure Monitor Metrics destination.
LogAnalytics []LogAnalyticsDestination
List of Log Analytics destinations.
azureMonitorMetrics DestinationsSpecAzureMonitorMetrics
Azure Monitor Metrics destination.
logAnalytics LogAnalyticsDestination[]
List of Log Analytics destinations.
azure_monitor_metrics DestinationsSpecAzureMonitorMetrics
Azure Monitor Metrics destination.
log_analytics Sequence[LogAnalyticsDestination]
List of Log Analytics destinations.

DataCollectionRuleResponseDataSources

Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSourceResponse>
The list of Azure VM extension data source configurations.
PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSourceResponse>
The list of performance counter data source configurations.
Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSourceResponse>
The list of Syslog data source configurations.
WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSourceResponse>
The list of Windows Event Log data source configurations.
Extensions []ExtensionDataSourceResponse
The list of Azure VM extension data source configurations.
PerformanceCounters []PerfCounterDataSourceResponse
The list of performance counter data source configurations.
Syslog []SyslogDataSourceResponse
The list of Syslog data source configurations.
WindowsEventLogs []WindowsEventLogDataSourceResponse
The list of Windows Event Log data source configurations.
extensions ExtensionDataSourceResponse[]
The list of Azure VM extension data source configurations.
performanceCounters PerfCounterDataSourceResponse[]
The list of performance counter data source configurations.
syslog SyslogDataSourceResponse[]
The list of Syslog data source configurations.
windowsEventLogs WindowsEventLogDataSourceResponse[]
The list of Windows Event Log data source configurations.
extensions Sequence[ExtensionDataSourceResponse]
The list of Azure VM extension data source configurations.
performance_counters Sequence[PerfCounterDataSourceResponse]
The list of performance counter data source configurations.
syslog Sequence[SyslogDataSourceResponse]
The list of Syslog data source configurations.
windows_event_logs Sequence[WindowsEventLogDataSourceResponse]
The list of Windows Event Log data source configurations.

DataCollectionRuleResponseDestinations

DataFlow

Destinations List<string>
List of destinations for this data flow.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownDataFlowStreams>>
List of streams for this data flow.
Destinations []string
List of destinations for this data flow.
Streams []string
List of streams for this data flow.
destinations string[]
List of destinations for this data flow.
streams (string | KnownDataFlowStreams)[]
List of streams for this data flow.
destinations Sequence[str]
List of destinations for this data flow.
streams Sequence[Union[str, KnownDataFlowStreams]]
List of streams for this data flow.

DataFlowResponse

Destinations List<string>
List of destinations for this data flow.
Streams List<string>
List of streams for this data flow.
Destinations []string
List of destinations for this data flow.
Streams []string
List of streams for this data flow.
destinations string[]
List of destinations for this data flow.
streams string[]
List of streams for this data flow.
destinations Sequence[str]
List of destinations for this data flow.
streams Sequence[str]
List of streams for this data flow.

DestinationsSpecAzureMonitorMetrics

Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
name str
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

DestinationsSpecResponseAzureMonitorMetrics

Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
name str
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

ExtensionDataSource

ExtensionName string
The name of the VM extension.
ExtensionSettings object
The extension settings. The format is specific for particular extension.
InputDataSources List<string>
The list of data sources this extension needs data from.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownExtensionDataSourceStreams>>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
ExtensionName string
The name of the VM extension.
ExtensionSettings interface{}
The extension settings. The format is specific for particular extension.
InputDataSources []string
The list of data sources this extension needs data from.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
extensionName string
The name of the VM extension.
extensionSettings any
The extension settings. The format is specific for particular extension.
inputDataSources string[]
The list of data sources this extension needs data from.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownExtensionDataSourceStreams)[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
extension_name str
The name of the VM extension.
extension_settings Any
The extension settings. The format is specific for particular extension.
input_data_sources Sequence[str]
The list of data sources this extension needs data from.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownExtensionDataSourceStreams]]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionDataSourceResponse

ExtensionName string
The name of the VM extension.
ExtensionSettings object
The extension settings. The format is specific for particular extension.
InputDataSources List<string>
The list of data sources this extension needs data from.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
ExtensionName string
The name of the VM extension.
ExtensionSettings interface{}
The extension settings. The format is specific for particular extension.
InputDataSources []string
The list of data sources this extension needs data from.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
extensionName string
The name of the VM extension.
extensionSettings any
The extension settings. The format is specific for particular extension.
inputDataSources string[]
The list of data sources this extension needs data from.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
extension_name str
The name of the VM extension.
extension_settings Any
The extension settings. The format is specific for particular extension.
input_data_sources Sequence[str]
The list of data sources this extension needs data from.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

KnownDataCollectionRuleResourceKind

Linux
Linux
Windows
Windows
KnownDataCollectionRuleResourceKindLinux
Linux
KnownDataCollectionRuleResourceKindWindows
Windows
Linux
Linux
Windows
Windows
LINUX
Linux
WINDOWS
Windows

KnownDataFlowStreams

Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
KnownDataFlowStreams_Microsoft_Event
Microsoft-Event
KnownDataFlowStreams_Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
KnownDataFlowStreams_Microsoft_Perf
Microsoft-Perf
KnownDataFlowStreams_Microsoft_Syslog
Microsoft-Syslog
KnownDataFlowStreams_Microsoft_WindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
MICROSOFT_EVENT
Microsoft-Event
MICROSOFT_INSIGHTS_METRICS
Microsoft-InsightsMetrics
MICROSOFT_PERF
Microsoft-Perf
MICROSOFT_SYSLOG
Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT
Microsoft-WindowsEvent

KnownExtensionDataSourceStreams

Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
KnownExtensionDataSourceStreams_Microsoft_Event
Microsoft-Event
KnownExtensionDataSourceStreams_Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
KnownExtensionDataSourceStreams_Microsoft_Perf
Microsoft-Perf
KnownExtensionDataSourceStreams_Microsoft_Syslog
Microsoft-Syslog
KnownExtensionDataSourceStreams_Microsoft_WindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_Syslog
Microsoft-Syslog
Microsoft_WindowsEvent
Microsoft-WindowsEvent
MICROSOFT_EVENT
Microsoft-Event
MICROSOFT_INSIGHTS_METRICS
Microsoft-InsightsMetrics
MICROSOFT_PERF
Microsoft-Perf
MICROSOFT_SYSLOG
Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT
Microsoft-WindowsEvent

KnownPerfCounterDataSourceStreams

Microsoft_Perf
Microsoft-Perf
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
KnownPerfCounterDataSourceStreams_Microsoft_Perf
Microsoft-Perf
KnownPerfCounterDataSourceStreams_Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
Microsoft_Perf
Microsoft-Perf
Microsoft_InsightsMetrics
Microsoft-InsightsMetrics
MICROSOFT_PERF
Microsoft-Perf
MICROSOFT_INSIGHTS_METRICS
Microsoft-InsightsMetrics

KnownSyslogDataSourceFacilityNames

Auth
auth
Authpriv
authpriv
Cron
cron
Daemon
daemon
Kern
kern
Lpr
lpr
Mail
mail
Mark
mark
News
news
Syslog
syslog
User
user
Uucp
uucp
Local0
local0
Local1
local1
Local2
local2
Local3
local3
Local4
local4
Local5
local5
Local6
local6
Local7
local7
Asterisk
*
KnownSyslogDataSourceFacilityNamesAuth
auth
KnownSyslogDataSourceFacilityNamesAuthpriv
authpriv
KnownSyslogDataSourceFacilityNamesCron
cron
KnownSyslogDataSourceFacilityNamesDaemon
daemon
KnownSyslogDataSourceFacilityNamesKern
kern
KnownSyslogDataSourceFacilityNamesLpr
lpr
KnownSyslogDataSourceFacilityNamesMail
mail
KnownSyslogDataSourceFacilityNamesMark
mark
KnownSyslogDataSourceFacilityNamesNews
news
KnownSyslogDataSourceFacilityNamesSyslog
syslog
KnownSyslogDataSourceFacilityNamesUser
user
KnownSyslogDataSourceFacilityNamesUucp
uucp
KnownSyslogDataSourceFacilityNamesLocal0
local0
KnownSyslogDataSourceFacilityNamesLocal1
local1
KnownSyslogDataSourceFacilityNamesLocal2
local2
KnownSyslogDataSourceFacilityNamesLocal3
local3
KnownSyslogDataSourceFacilityNamesLocal4
local4
KnownSyslogDataSourceFacilityNamesLocal5
local5
KnownSyslogDataSourceFacilityNamesLocal6
local6
KnownSyslogDataSourceFacilityNamesLocal7
local7
KnownSyslogDataSourceFacilityNamesAsterisk
*
Auth
auth
Authpriv
authpriv
Cron
cron
Daemon
daemon
Kern
kern
Lpr
lpr
Mail
mail
Mark
mark
News
news
Syslog
syslog
User
user
Uucp
uucp
Local0
local0
Local1
local1
Local2
local2
Local3
local3
Local4
local4
Local5
local5
Local6
local6
Local7
local7
Asterisk
*
AUTH
auth
AUTHPRIV
authpriv
CRON
cron
DAEMON
daemon
KERN
kern
LPR
lpr
MAIL
mail
MARK
mark
NEWS
news
SYSLOG
syslog
USER
user
UUCP
uucp
LOCAL0
local0
LOCAL1
local1
LOCAL2
local2
LOCAL3
local3
LOCAL4
local4
LOCAL5
local5
LOCAL6
local6
LOCAL7
local7
ASTERISK
*

KnownSyslogDataSourceLogLevels

Debug
Debug
Info
Info
Notice
Notice
Warning
Warning
Error
Error
Critical
Critical
Alert
Alert
Emergency
Emergency
Asterisk
*
KnownSyslogDataSourceLogLevelsDebug
Debug
KnownSyslogDataSourceLogLevelsInfo
Info
KnownSyslogDataSourceLogLevelsNotice
Notice
KnownSyslogDataSourceLogLevelsWarning
Warning
KnownSyslogDataSourceLogLevelsError
Error
KnownSyslogDataSourceLogLevelsCritical
Critical
KnownSyslogDataSourceLogLevelsAlert
Alert
KnownSyslogDataSourceLogLevelsEmergency
Emergency
KnownSyslogDataSourceLogLevelsAsterisk
*
Debug
Debug
Info
Info
Notice
Notice
Warning
Warning
Error
Error
Critical
Critical
Alert
Alert
Emergency
Emergency
Asterisk
*
DEBUG
Debug
INFO
Info
NOTICE
Notice
WARNING
Warning
ERROR
Error
CRITICAL
Critical
ALERT
Alert
EMERGENCY
Emergency
ASTERISK
*

KnownSyslogDataSourceStreams

Microsoft_Syslog
Microsoft-Syslog
KnownSyslogDataSourceStreams_Microsoft_Syslog
Microsoft-Syslog
Microsoft_Syslog
Microsoft-Syslog
MICROSOFT_SYSLOG
Microsoft-Syslog

KnownWindowsEventLogDataSourceStreams

Microsoft_WindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent
Microsoft-WindowsEvent
KnownWindowsEventLogDataSourceStreams_Microsoft_Event
Microsoft-Event
Microsoft_WindowsEvent
Microsoft-WindowsEvent
Microsoft_Event
Microsoft-Event
MICROSOFT_WINDOWS_EVENT
Microsoft-WindowsEvent
MICROSOFT_EVENT
Microsoft-Event

LogAnalyticsDestination

Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string
The resource ID of the Log Analytics workspace.
Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string
The resource ID of the Log Analytics workspace.
name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId string
The resource ID of the Log Analytics workspace.
name str
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspace_resource_id str
The resource ID of the Log Analytics workspace.

LogAnalyticsDestinationResponse

WorkspaceId string
The Customer ID of the Log Analytics workspace.
Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string
The resource ID of the Log Analytics workspace.
WorkspaceId string
The Customer ID of the Log Analytics workspace.
Name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string
The resource ID of the Log Analytics workspace.
workspaceId string
The Customer ID of the Log Analytics workspace.
name string
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId string
The resource ID of the Log Analytics workspace.
workspace_id str
The Customer ID of the Log Analytics workspace.
name str
A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspace_resource_id str
The resource ID of the Log Analytics workspace.

PerfCounterDataSource

CounterSpecifiers List<string>
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int
The number of seconds between consecutive counter measurements (samples).
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPerfCounterDataSourceStreams>>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
CounterSpecifiers []string
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int
The number of seconds between consecutive counter measurements (samples).
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
counterSpecifiers string[]
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds number
The number of seconds between consecutive counter measurements (samples).
streams (string | KnownPerfCounterDataSourceStreams)[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
counter_specifiers Sequence[str]
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
sampling_frequency_in_seconds int
The number of seconds between consecutive counter measurements (samples).
streams Sequence[Union[str, KnownPerfCounterDataSourceStreams]]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

PerfCounterDataSourceResponse

CounterSpecifiers List<string>
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int
The number of seconds between consecutive counter measurements (samples).
Streams List<string>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
CounterSpecifiers []string
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int
The number of seconds between consecutive counter measurements (samples).
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
counterSpecifiers string[]
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds number
The number of seconds between consecutive counter measurements (samples).
streams string[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
counter_specifiers Sequence[str]
A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command ‘typeperf’.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
sampling_frequency_in_seconds int
The number of seconds between consecutive counter measurements (samples).
streams Sequence[str]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSource

FacilityNames List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceFacilityNames>>
The list of facility names.
LogLevels List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceLogLevels>>
The log levels to collect.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceStreams>>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
FacilityNames []string
The list of facility names.
LogLevels []string
The log levels to collect.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
facilityNames (string | KnownSyslogDataSourceFacilityNames)[]
The list of facility names.
logLevels (string | KnownSyslogDataSourceLogLevels)[]
The log levels to collect.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownSyslogDataSourceStreams)[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
facility_names Sequence[Union[str, KnownSyslogDataSourceFacilityNames]]
The list of facility names.
log_levels Sequence[Union[str, KnownSyslogDataSourceLogLevels]]
The log levels to collect.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownSyslogDataSourceStreams]]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSourceResponse

FacilityNames List<string>
The list of facility names.
LogLevels List<string>
The log levels to collect.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
FacilityNames []string
The list of facility names.
LogLevels []string
The log levels to collect.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
facilityNames string[]
The list of facility names.
logLevels string[]
The log levels to collect.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
facility_names Sequence[str]
The list of facility names.
log_levels Sequence[str]
The log levels to collect.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

WindowsEventLogDataSource

Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownWindowsEventLogDataSourceStreams>>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries List<string>
A list of Windows Event Log queries in XPATH format.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries []string
A list of Windows Event Log queries in XPATH format.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownWindowsEventLogDataSourceStreams)[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries string[]
A list of Windows Event Log queries in XPATH format.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownWindowsEventLogDataSourceStreams]]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
x_path_queries Sequence[str]
A list of Windows Event Log queries in XPATH format.

WindowsEventLogDataSourceResponse

Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries List<string>
A list of Windows Event Log queries in XPATH format.
Name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries []string
A list of Windows Event Log queries in XPATH format.
name string
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries string[]
A list of Windows Event Log queries in XPATH format.
name str
A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]
List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
x_path_queries Sequence[str]
A list of Windows Event Log queries in XPATH format.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:insights:DataCollectionRule myCollectionRule /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.Insights/dataCollectionRules/myCollectionRule 

Package Details

Repository
https://github.com/pulumi/pulumi-azure-native
License
Apache-2.0