Azure Native v1.103.0, Jun 2 23

Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi

azure-native.insights.DataCollectionRule

Explore with Pulumi AI

Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi

pulumi/pulumi-azure-native

Example Usage

Create or update data collection rule

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var dataCollectionRule = new AzureNative.Insights.DataCollectionRule("dataCollectionRule", new()
    {
        DataCollectionRuleName = "myCollectionRule",
        DataFlows = new[]
        {
            new AzureNative.Insights.Inputs.DataFlowArgs
            {
                Destinations = new[]
                {
                    "centralWorkspace",
                },
                Streams = new[]
                {
                    "Microsoft-Perf",
                    "Microsoft-Syslog",
                    "Microsoft-WindowsEvent",
                },
            },
        },
        DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
        {
            PerformanceCounters = new[]
            {
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Processor(_Total)\\% Processor Time",
                        "\\Memory\\Committed Bytes",
                        "\\LogicalDisk(_Total)\\Free Megabytes",
                        "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                    },
                    Name = "cloudTeamCoreCounters",
                    SamplingFrequencyInSeconds = 15,
                    Streams = new[]
                    {
                        "Microsoft-Perf",
                    },
                },
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Process(_Total)\\Thread Count",
                    },
                    Name = "appTeamExtraCounters",
                    SamplingFrequencyInSeconds = 30,
                    Streams = new[]
                    {
                        "Microsoft-Perf",
                    },
                },
            },
            Syslog = new[]
            {
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        "cron",
                    },
                    LogLevels = new[]
                    {
                        "Debug",
                        "Critical",
                        "Emergency",
                    },
                    Name = "cronSyslog",
                    Streams = new[]
                    {
                        "Microsoft-Syslog",
                    },
                },
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        "syslog",
                    },
                    LogLevels = new[]
                    {
                        "Alert",
                        "Critical",
                        "Emergency",
                    },
                    Name = "syslogBase",
                    Streams = new[]
                    {
                        "Microsoft-Syslog",
                    },
                },
            },
            WindowsEventLogs = new[]
            {
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "cloudSecurityTeamEvents",
                    Streams = new[]
                    {
                        "Microsoft-WindowsEvent",
                    },
                    XPathQueries = new[]
                    {
                        "Security!",
                    },
                },
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "appTeam1AppEvents",
                    Streams = new[]
                    {
                        "Microsoft-WindowsEvent",
                    },
                    XPathQueries = new[]
                    {
                        "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                        "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                    },
                },
            },
        },
        Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
        {
            LogAnalytics = new[]
            {
                new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
                {
                    Name = "centralWorkspace",
                    WorkspaceResourceId = "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
                },
            },
        },
        Location = "eastus",
        ResourceGroupName = "myResourceGroup",
    });

});

package main

import (
	insights "github.com/pulumi/pulumi-azure-native-sdk/insights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := insights.NewDataCollectionRule(ctx, "dataCollectionRule", &insights.DataCollectionRuleArgs{
			DataCollectionRuleName: pulumi.String("myCollectionRule"),
			DataFlows: []insights.DataFlowArgs{
				{
					Destinations: pulumi.StringArray{
						pulumi.String("centralWorkspace"),
					},
					Streams: pulumi.StringArray{
						pulumi.String("Microsoft-Perf"),
						pulumi.String("Microsoft-Syslog"),
						pulumi.String("Microsoft-WindowsEvent"),
					},
				},
			},
			DataSources: insights.DataCollectionRuleResponseDataSources{
				PerformanceCounters: insights.PerfCounterDataSourceArray{
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Processor(_Total)\\% Processor Time"),
							pulumi.String("\\Memory\\Committed Bytes"),
							pulumi.String("\\LogicalDisk(_Total)\\Free Megabytes"),
							pulumi.String("\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
						},
						Name:                       pulumi.String("cloudTeamCoreCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(15),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
						},
					},
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Process(_Total)\\Thread Count"),
						},
						Name:                       pulumi.String("appTeamExtraCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(30),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
						},
					},
				},
				Syslog: insights.SyslogDataSourceArray{
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("cron"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("Debug"),
							pulumi.String("Critical"),
							pulumi.String("Emergency"),
						},
						Name: pulumi.String("cronSyslog"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Syslog"),
						},
					},
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("syslog"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("Alert"),
							pulumi.String("Critical"),
							pulumi.String("Emergency"),
						},
						Name: pulumi.String("syslogBase"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Syslog"),
						},
					},
				},
				WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("cloudSecurityTeamEvents"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("Security!"),
						},
					},
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("appTeam1AppEvents"),
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("System![System[(Level = 1 or Level = 2 or Level = 3)]]"),
							pulumi.String("Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]"),
						},
					},
				},
			},
			Destinations: insights.DataCollectionRuleResponseDestinations{
				LogAnalytics: insights.LogAnalyticsDestinationArray{
					&insights.LogAnalyticsDestinationArgs{
						Name:                pulumi.String("centralWorkspace"),
						WorkspaceResourceId: pulumi.String("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace"),
					},
				},
			},
			Location:          pulumi.String("eastus"),
			ResourceGroupName: pulumi.String("myResourceGroup"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.insights.DataCollectionRule;
import com.pulumi.azurenative.insights.DataCollectionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var dataCollectionRule = new DataCollectionRule("dataCollectionRule", DataCollectionRuleArgs.builder()        
            .dataCollectionRuleName("myCollectionRule")
            .dataFlows(Map.ofEntries(
                Map.entry("destinations", "centralWorkspace"),
                Map.entry("streams",                 
                    "Microsoft-Perf",
                    "Microsoft-Syslog",
                    "Microsoft-WindowsEvent")
            ))
            .dataSources(Map.ofEntries(
                Map.entry("performanceCounters",                 
                    Map.ofEntries(
                        Map.entry("counterSpecifiers",                         
                            "\\Processor(_Total)\\% Processor Time",
                            "\\Memory\\Committed Bytes",
                            "\\LogicalDisk(_Total)\\Free Megabytes",
                            "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
                        Map.entry("name", "cloudTeamCoreCounters"),
                        Map.entry("samplingFrequencyInSeconds", 15),
                        Map.entry("streams", "Microsoft-Perf")
                    ),
                    Map.ofEntries(
                        Map.entry("counterSpecifiers", "\\Process(_Total)\\Thread Count"),
                        Map.entry("name", "appTeamExtraCounters"),
                        Map.entry("samplingFrequencyInSeconds", 30),
                        Map.entry("streams", "Microsoft-Perf")
                    )),
                Map.entry("syslog",                 
                    Map.ofEntries(
                        Map.entry("facilityNames", "cron"),
                        Map.entry("logLevels",                         
                            "Debug",
                            "Critical",
                            "Emergency"),
                        Map.entry("name", "cronSyslog"),
                        Map.entry("streams", "Microsoft-Syslog")
                    ),
                    Map.ofEntries(
                        Map.entry("facilityNames", "syslog"),
                        Map.entry("logLevels",                         
                            "Alert",
                            "Critical",
                            "Emergency"),
                        Map.entry("name", "syslogBase"),
                        Map.entry("streams", "Microsoft-Syslog")
                    )),
                Map.entry("windowsEventLogs",                 
                    Map.ofEntries(
                        Map.entry("name", "cloudSecurityTeamEvents"),
                        Map.entry("streams", "Microsoft-WindowsEvent"),
                        Map.entry("xPathQueries", "Security!")
                    ),
                    Map.ofEntries(
                        Map.entry("name", "appTeam1AppEvents"),
                        Map.entry("streams", "Microsoft-WindowsEvent"),
                        Map.entry("xPathQueries",                         
                            "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                            "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]")
                    ))
            ))
            .destinations(Map.of("logAnalytics", Map.ofEntries(
                Map.entry("name", "centralWorkspace"),
                Map.entry("workspaceResourceId", "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace")
            )))
            .location("eastus")
            .resourceGroupName("myResourceGroup")
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

data_collection_rule = azure_native.insights.DataCollectionRule("dataCollectionRule",
    data_collection_rule_name="myCollectionRule",
    data_flows=[azure_native.insights.DataFlowArgs(
        destinations=["centralWorkspace"],
        streams=[
            "Microsoft-Perf",
            "Microsoft-Syslog",
            "Microsoft-WindowsEvent",
        ],
    )],
    data_sources=azure_native.insights.DataCollectionRuleResponseDataSourcesArgs(
        performance_counters=[
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=[
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name="cloudTeamCoreCounters",
                sampling_frequency_in_seconds=15,
                streams=["Microsoft-Perf"],
            ),
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=["\\Process(_Total)\\Thread Count"],
                name="appTeamExtraCounters",
                sampling_frequency_in_seconds=30,
                streams=["Microsoft-Perf"],
            ),
        ],
        syslog=[
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=["cron"],
                log_levels=[
                    "Debug",
                    "Critical",
                    "Emergency",
                ],
                name="cronSyslog",
                streams=["Microsoft-Syslog"],
            ),
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=["syslog"],
                log_levels=[
                    "Alert",
                    "Critical",
                    "Emergency",
                ],
                name="syslogBase",
                streams=["Microsoft-Syslog"],
            ),
        ],
        windows_event_logs=[
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="cloudSecurityTeamEvents",
                streams=["Microsoft-WindowsEvent"],
                x_path_queries=["Security!"],
            ),
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="appTeam1AppEvents",
                streams=["Microsoft-WindowsEvent"],
                x_path_queries=[
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            ),
        ],
    ),
    destinations=azure_native.insights.DataCollectionRuleResponseDestinationsArgs(
        log_analytics=[azure_native.insights.LogAnalyticsDestinationArgs(
            name="centralWorkspace",
            workspace_resource_id="/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        )],
    ),
    location="eastus",
    resource_group_name="myResourceGroup")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const dataCollectionRule = new azure_native.insights.DataCollectionRule("dataCollectionRule", {
    dataCollectionRuleName: "myCollectionRule",
    dataFlows: [{
        destinations: ["centralWorkspace"],
        streams: [
            "Microsoft-Perf",
            "Microsoft-Syslog",
            "Microsoft-WindowsEvent",
        ],
    }],
    dataSources: {
        performanceCounters: [
            {
                counterSpecifiers: [
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name: "cloudTeamCoreCounters",
                samplingFrequencyInSeconds: 15,
                streams: ["Microsoft-Perf"],
            },
            {
                counterSpecifiers: ["\\Process(_Total)\\Thread Count"],
                name: "appTeamExtraCounters",
                samplingFrequencyInSeconds: 30,
                streams: ["Microsoft-Perf"],
            },
        ],
        syslog: [
            {
                facilityNames: ["cron"],
                logLevels: [
                    "Debug",
                    "Critical",
                    "Emergency",
                ],
                name: "cronSyslog",
                streams: ["Microsoft-Syslog"],
            },
            {
                facilityNames: ["syslog"],
                logLevels: [
                    "Alert",
                    "Critical",
                    "Emergency",
                ],
                name: "syslogBase",
                streams: ["Microsoft-Syslog"],
            },
        ],
        windowsEventLogs: [
            {
                name: "cloudSecurityTeamEvents",
                streams: ["Microsoft-WindowsEvent"],
                xPathQueries: ["Security!"],
            },
            {
                name: "appTeam1AppEvents",
                streams: ["Microsoft-WindowsEvent"],
                xPathQueries: [
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            },
        ],
    },
    destinations: {
        logAnalytics: [{
            name: "centralWorkspace",
            workspaceResourceId: "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        }],
    },
    location: "eastus",
    resourceGroupName: "myResourceGroup",
});

resources:
  dataCollectionRule:
    type: azure-native:insights:DataCollectionRule
    properties:
      dataCollectionRuleName: myCollectionRule
      dataFlows:
        - destinations:
            - centralWorkspace
          streams:
            - Microsoft-Perf
            - Microsoft-Syslog
            - Microsoft-WindowsEvent
      dataSources:
        performanceCounters:
          - counterSpecifiers:
              - \Processor(_Total)\% Processor Time
              - \Memory\Committed Bytes
              - \LogicalDisk(_Total)\Free Megabytes
              - \PhysicalDisk(_Total)\Avg. Disk Queue Length
            name: cloudTeamCoreCounters
            samplingFrequencyInSeconds: 15
            streams:
              - Microsoft-Perf
          - counterSpecifiers:
              - \Process(_Total)\Thread Count
            name: appTeamExtraCounters
            samplingFrequencyInSeconds: 30
            streams:
              - Microsoft-Perf
        syslog:
          - facilityNames:
              - cron
            logLevels:
              - Debug
              - Critical
              - Emergency
            name: cronSyslog
            streams:
              - Microsoft-Syslog
          - facilityNames:
              - syslog
            logLevels:
              - Alert
              - Critical
              - Emergency
            name: syslogBase
            streams:
              - Microsoft-Syslog
        windowsEventLogs:
          - name: cloudSecurityTeamEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - Security!
          - name: appTeam1AppEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - System![System[(Level = 1 or Level = 2 or Level = 3)]]
              - Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]
      destinations:
        logAnalytics:
          - name: centralWorkspace
            workspaceResourceId: /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace
      location: eastus
      resourceGroupName: myResourceGroup

Create DataCollectionRule Resource

new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);

@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       data_collection_rule_name: Optional[str] = None,
                       data_flows: Optional[Sequence[DataFlowArgs]] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       kind: Optional[Union[str, KnownDataCollectionRuleResourceKind]] = None,
                       location: Optional[str] = None,
                       resource_group_name: Optional[str] = None,
                       tags: Optional[Mapping[str, str]] = None)
@overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)

func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)

public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)

public DataCollectionRule(String name, DataCollectionRuleArgs args)
public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)

type: azure-native:insights:DataCollectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

DataCollectionRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The DataCollectionRule resource accepts the following input properties:

ResourceGroupName string: The name of the resource group. The name is case insensitive.
DataCollectionRuleName string: The name of the data collection rule. The name is case insensitive.
DataFlows List<Pulumi.AzureNative.Insights.Inputs.DataFlowArgs>: The specification of data flows.
DataSources Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
Description string: Description of the data collection rule.
Destinations Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs: The specification of destinations.
Kind string | Pulumi.AzureNative.Insights.KnownDataCollectionRuleResourceKind: The kind of the resource.
Location string: The geo-location where the resource lives.
Tags Dictionary<string, string>: Resource tags.

ResourceGroupName string: The name of the resource group. The name is case insensitive.
DataCollectionRuleName string: The name of the data collection rule. The name is case insensitive.
DataFlows []DataFlowArgs: The specification of data flows.
DataSources DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
Description string: Description of the data collection rule.
Destinations DataCollectionRuleDestinationsArgs: The specification of destinations.
Kind string | KnownDataCollectionRuleResourceKind: The kind of the resource.
Location string: The geo-location where the resource lives.
Tags map[string]string: Resource tags.

resourceGroupName String: The name of the resource group. The name is case insensitive.
dataCollectionRuleName String: The name of the data collection rule. The name is case insensitive.
dataFlows List<DataFlowArgs>: The specification of data flows.
dataSources DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description String: Description of the data collection rule.
destinations DataCollectionRuleDestinationsArgs: The specification of destinations.
kind String | KnownDataCollectionRuleResourceKind: The kind of the resource.
location String: The geo-location where the resource lives.
tags Map<String,String>: Resource tags.

resourceGroupName string: The name of the resource group. The name is case insensitive.
dataCollectionRuleName string: The name of the data collection rule. The name is case insensitive.
dataFlows DataFlowArgs[]: The specification of data flows.
dataSources DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description string: Description of the data collection rule.
destinations DataCollectionRuleDestinationsArgs: The specification of destinations.
kind string | KnownDataCollectionRuleResourceKind: The kind of the resource.
location string: The geo-location where the resource lives.
tags {[key: string]: string}: Resource tags.

resource_group_name str: The name of the resource group. The name is case insensitive.
data_collection_rule_name str: The name of the data collection rule. The name is case insensitive.
data_flows Sequence[DataFlowArgs]: The specification of data flows.
data_sources DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description str: Description of the data collection rule.
destinations DataCollectionRuleDestinationsArgs: The specification of destinations.
kind str | KnownDataCollectionRuleResourceKind: The kind of the resource.
location str: The geo-location where the resource lives.
tags Mapping[str, str]: Resource tags.

resourceGroupName String: The name of the resource group. The name is case insensitive.
dataCollectionRuleName String: The name of the data collection rule. The name is case insensitive.
dataFlows List<Property Map>: The specification of data flows.
dataSources Property Map: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description String: Description of the data collection rule.
destinations Property Map: The specification of destinations.
kind String | "Linux" | "Windows": The kind of the resource.
location String: The geo-location where the resource lives.
tags Map<String>: Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

Etag string: Resource entity tag (ETag).
Id string: The provider-assigned unique ID for this managed resource.
ImmutableId string: The immutable ID of this data collection rule. This property is READ-ONLY.
Name string: The name of the resource.
ProvisioningState string: The resource provisioning state.
Type string: The type of the resource.

Etag string: Resource entity tag (ETag).
Id string: The provider-assigned unique ID for this managed resource.
ImmutableId string: The immutable ID of this data collection rule. This property is READ-ONLY.
Name string: The name of the resource.
ProvisioningState string: The resource provisioning state.
Type string: The type of the resource.

etag String: Resource entity tag (ETag).
id String: The provider-assigned unique ID for this managed resource.
immutableId String: The immutable ID of this data collection rule. This property is READ-ONLY.
name String: The name of the resource.
provisioningState String: The resource provisioning state.
type String: The type of the resource.

etag string: Resource entity tag (ETag).
id string: The provider-assigned unique ID for this managed resource.
immutableId string: The immutable ID of this data collection rule. This property is READ-ONLY.
name string: The name of the resource.
provisioningState string: The resource provisioning state.
type string: The type of the resource.

etag str: Resource entity tag (ETag).
id str: The provider-assigned unique ID for this managed resource.
immutable_id str: The immutable ID of this data collection rule. This property is READ-ONLY.
name str: The name of the resource.
provisioning_state str: The resource provisioning state.
type str: The type of the resource.

etag String: Resource entity tag (ETag).
id String: The provider-assigned unique ID for this managed resource.
immutableId String: The immutable ID of this data collection rule. This property is READ-ONLY.
name String: The name of the resource.
provisioningState String: The resource provisioning state.
type String: The type of the resource.

Supporting Types

DataCollectionRuleDataSources

Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSource>: The list of Azure VM extension data source configurations.
PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSource>: The list of performance counter data source configurations.
Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSource>: The list of Syslog data source configurations.
WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSource>: The list of Windows Event Log data source configurations.

Extensions []ExtensionDataSource: The list of Azure VM extension data source configurations.
PerformanceCounters []PerfCounterDataSource: The list of performance counter data source configurations.
Syslog []SyslogDataSource: The list of Syslog data source configurations.
WindowsEventLogs []WindowsEventLogDataSource: The list of Windows Event Log data source configurations.

extensions List<ExtensionDataSource>: The list of Azure VM extension data source configurations.
performanceCounters List<PerfCounterDataSource>: The list of performance counter data source configurations.
syslog List<SyslogDataSource>: The list of Syslog data source configurations.
windowsEventLogs List<WindowsEventLogDataSource>: The list of Windows Event Log data source configurations.

extensions ExtensionDataSource[]: The list of Azure VM extension data source configurations.
performanceCounters PerfCounterDataSource[]: The list of performance counter data source configurations.
syslog SyslogDataSource[]: The list of Syslog data source configurations.
windowsEventLogs WindowsEventLogDataSource[]: The list of Windows Event Log data source configurations.

extensions Sequence[ExtensionDataSource]: The list of Azure VM extension data source configurations.
performance_counters Sequence[PerfCounterDataSource]: The list of performance counter data source configurations.
syslog Sequence[SyslogDataSource]: The list of Syslog data source configurations.
windows_event_logs Sequence[WindowsEventLogDataSource]: The list of Windows Event Log data source configurations.

extensions List<Property Map>: The list of Azure VM extension data source configurations.
performanceCounters List<Property Map>: The list of performance counter data source configurations.
syslog List<Property Map>: The list of Syslog data source configurations.
windowsEventLogs List<Property Map>: The list of Windows Event Log data source configurations.

DataCollectionRuleDestinations

AzureMonitorMetrics Pulumi.AzureNative.Insights.Inputs.DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
LogAnalytics List<Pulumi.AzureNative.Insights.Inputs.LogAnalyticsDestination>: List of Log Analytics destinations.

AzureMonitorMetrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
LogAnalytics []LogAnalyticsDestination: List of Log Analytics destinations.

azureMonitorMetrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
logAnalytics List<LogAnalyticsDestination>: List of Log Analytics destinations.

azureMonitorMetrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
logAnalytics LogAnalyticsDestination[]: List of Log Analytics destinations.

azure_monitor_metrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
log_analytics Sequence[LogAnalyticsDestination]: List of Log Analytics destinations.

azureMonitorMetrics Property Map: Azure Monitor Metrics destination.
logAnalytics List<Property Map>: List of Log Analytics destinations.

DataCollectionRuleResponseDataSources

Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSourceResponse>: The list of Azure VM extension data source configurations.
PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSourceResponse>: The list of performance counter data source configurations.
Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSourceResponse>: The list of Syslog data source configurations.
WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSourceResponse>: The list of Windows Event Log data source configurations.

Extensions []ExtensionDataSourceResponse: The list of Azure VM extension data source configurations.
PerformanceCounters []PerfCounterDataSourceResponse: The list of performance counter data source configurations.
Syslog []SyslogDataSourceResponse: The list of Syslog data source configurations.
WindowsEventLogs []WindowsEventLogDataSourceResponse: The list of Windows Event Log data source configurations.

extensions List<ExtensionDataSourceResponse>: The list of Azure VM extension data source configurations.
performanceCounters List<PerfCounterDataSourceResponse>: The list of performance counter data source configurations.
syslog List<SyslogDataSourceResponse>: The list of Syslog data source configurations.
windowsEventLogs List<WindowsEventLogDataSourceResponse>: The list of Windows Event Log data source configurations.

extensions ExtensionDataSourceResponse[]: The list of Azure VM extension data source configurations.
performanceCounters PerfCounterDataSourceResponse[]: The list of performance counter data source configurations.
syslog SyslogDataSourceResponse[]: The list of Syslog data source configurations.
windowsEventLogs WindowsEventLogDataSourceResponse[]: The list of Windows Event Log data source configurations.

extensions Sequence[ExtensionDataSourceResponse]: The list of Azure VM extension data source configurations.
performance_counters Sequence[PerfCounterDataSourceResponse]: The list of performance counter data source configurations.
syslog Sequence[SyslogDataSourceResponse]: The list of Syslog data source configurations.
windows_event_logs Sequence[WindowsEventLogDataSourceResponse]: The list of Windows Event Log data source configurations.

extensions List<Property Map>: The list of Azure VM extension data source configurations.
performanceCounters List<Property Map>: The list of performance counter data source configurations.
syslog List<Property Map>: The list of Syslog data source configurations.
windowsEventLogs List<Property Map>: The list of Windows Event Log data source configurations.

DataCollectionRuleResponseDestinations

AzureMonitorMetrics Pulumi.AzureNative.Insights.Inputs.DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
LogAnalytics List<Pulumi.AzureNative.Insights.Inputs.LogAnalyticsDestinationResponse>: List of Log Analytics destinations.

AzureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
LogAnalytics []LogAnalyticsDestinationResponse: List of Log Analytics destinations.

azureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
logAnalytics List<LogAnalyticsDestinationResponse>: List of Log Analytics destinations.

azureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
logAnalytics LogAnalyticsDestinationResponse[]: List of Log Analytics destinations.

azure_monitor_metrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
log_analytics Sequence[LogAnalyticsDestinationResponse]: List of Log Analytics destinations.

azureMonitorMetrics Property Map: Azure Monitor Metrics destination.
logAnalytics List<Property Map>: List of Log Analytics destinations.

DataFlow

Destinations List<string>: List of destinations for this data flow.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownDataFlowStreams>>: List of streams for this data flow.

Destinations []string: List of destinations for this data flow.
Streams []string: List of streams for this data flow.

destinations List<String>: List of destinations for this data flow.
streams List<Either<String,KnownDataFlowStreams>>: List of streams for this data flow.

destinations string[]: List of destinations for this data flow.
streams (string | KnownDataFlowStreams)[]: List of streams for this data flow.

destinations Sequence[str]: List of destinations for this data flow.
streams Sequence[Union[str, KnownDataFlowStreams]]: List of streams for this data flow.

destinations List<String>: List of destinations for this data flow.
streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">: List of streams for this data flow.

DataFlowResponse

Destinations List<string>: List of destinations for this data flow.
Streams List<string>: List of streams for this data flow.

Destinations []string: List of destinations for this data flow.
Streams []string: List of streams for this data flow.

destinations List<String>: List of destinations for this data flow.
streams List<String>: List of streams for this data flow.

destinations string[]: List of destinations for this data flow.
streams string[]: List of streams for this data flow.

destinations Sequence[str]: List of destinations for this data flow.
streams Sequence[str]: List of streams for this data flow.

destinations List<String>: List of destinations for this data flow.
streams List<String>: List of streams for this data flow.

DestinationsSpecAzureMonitorMetrics

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

DestinationsSpecResponseAzureMonitorMetrics

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

ExtensionDataSource

ExtensionName string: The name of the VM extension.
ExtensionSettings object: The extension settings. The format is specific for particular extension.
InputDataSources List<string>: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownExtensionDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionName string: The name of the VM extension.
ExtensionSettings interface{}: The extension settings. The format is specific for particular extension.
InputDataSources []string: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Object: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownExtensionDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName string: The name of the VM extension.
extensionSettings any: The extension settings. The format is specific for particular extension.
inputDataSources string[]: The list of data sources this extension needs data from.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownExtensionDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extension_name str: The name of the VM extension.
extension_settings Any: The extension settings. The format is specific for particular extension.
input_data_sources Sequence[str]: The list of data sources this extension needs data from.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownExtensionDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Any: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionDataSourceResponse

ExtensionName string: The name of the VM extension.
ExtensionSettings object: The extension settings. The format is specific for particular extension.
InputDataSources List<string>: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionName string: The name of the VM extension.
ExtensionSettings interface{}: The extension settings. The format is specific for particular extension.
InputDataSources []string: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Object: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName string: The name of the VM extension.
extensionSettings any: The extension settings. The format is specific for particular extension.
inputDataSources string[]: The list of data sources this extension needs data from.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extension_name str: The name of the VM extension.
extension_settings Any: The extension settings. The format is specific for particular extension.
input_data_sources Sequence[str]: The list of data sources this extension needs data from.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Any: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

KnownDataCollectionRuleResourceKind

Linux: Linux
Windows: Windows

KnownDataCollectionRuleResourceKindLinux: Linux
KnownDataCollectionRuleResourceKindWindows: Windows

Linux: Linux
Windows: Windows

Linux: Linux
Windows: Windows

LINUX: Linux
WINDOWS: Windows

"Linux": Linux
"Windows": Windows

KnownDataFlowStreams

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

KnownDataFlowStreams_Microsoft_Event: Microsoft-Event
KnownDataFlowStreams_Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
KnownDataFlowStreams_Microsoft_Perf: Microsoft-Perf
KnownDataFlowStreams_Microsoft_Syslog: Microsoft-Syslog
KnownDataFlowStreams_Microsoft_WindowsEvent: Microsoft-WindowsEvent

MicrosoftEvent: Microsoft-Event
MicrosoftInsightsMetrics: Microsoft-InsightsMetrics
MicrosoftPerf: Microsoft-Perf
MicrosoftSyslog: Microsoft-Syslog
MicrosoftWindowsEvent: Microsoft-WindowsEvent

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

MICROSOFT_EVENT: Microsoft-Event
MICROSOFT_INSIGHTS_METRICS: Microsoft-InsightsMetrics
MICROSOFT_PERF: Microsoft-Perf
MICROSOFT_SYSLOG: Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT: Microsoft-WindowsEvent

"Microsoft-Event": Microsoft-Event
"Microsoft-InsightsMetrics": Microsoft-InsightsMetrics
"Microsoft-Perf": Microsoft-Perf
"Microsoft-Syslog": Microsoft-Syslog
"Microsoft-WindowsEvent": Microsoft-WindowsEvent

KnownExtensionDataSourceStreams

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

KnownExtensionDataSourceStreams_Microsoft_Event: Microsoft-Event
KnownExtensionDataSourceStreams_Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
KnownExtensionDataSourceStreams_Microsoft_Perf: Microsoft-Perf
KnownExtensionDataSourceStreams_Microsoft_Syslog: Microsoft-Syslog
KnownExtensionDataSourceStreams_Microsoft_WindowsEvent: Microsoft-WindowsEvent

MicrosoftEvent: Microsoft-Event
MicrosoftInsightsMetrics: Microsoft-InsightsMetrics
MicrosoftPerf: Microsoft-Perf
MicrosoftSyslog: Microsoft-Syslog
MicrosoftWindowsEvent: Microsoft-WindowsEvent

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

MICROSOFT_EVENT: Microsoft-Event
MICROSOFT_INSIGHTS_METRICS: Microsoft-InsightsMetrics
MICROSOFT_PERF: Microsoft-Perf
MICROSOFT_SYSLOG: Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT: Microsoft-WindowsEvent

"Microsoft-Event": Microsoft-Event
"Microsoft-InsightsMetrics": Microsoft-InsightsMetrics
"Microsoft-Perf": Microsoft-Perf
"Microsoft-Syslog": Microsoft-Syslog
"Microsoft-WindowsEvent": Microsoft-WindowsEvent

KnownPerfCounterDataSourceStreams

Microsoft_Perf: Microsoft-Perf
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics

KnownPerfCounterDataSourceStreams_Microsoft_Perf: Microsoft-Perf
KnownPerfCounterDataSourceStreams_Microsoft_InsightsMetrics: Microsoft-InsightsMetrics

MicrosoftPerf: Microsoft-Perf
MicrosoftInsightsMetrics: Microsoft-InsightsMetrics

Microsoft_Perf: Microsoft-Perf
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics

MICROSOFT_PERF: Microsoft-Perf
MICROSOFT_INSIGHTS_METRICS: Microsoft-InsightsMetrics

"Microsoft-Perf": Microsoft-Perf
"Microsoft-InsightsMetrics": Microsoft-InsightsMetrics

KnownSyslogDataSourceFacilityNames

Auth: auth
Authpriv: authpriv
Cron: cron
Daemon: daemon
Kern: kern
Lpr: lpr
Mail: mail
Mark: mark
News: news
Syslog: syslog
User: user
Uucp: uucp
Local0: local0
Local1: local1
Local2: local2
Local3: local3
Local4: local4
Local5: local5
Local6: local6
Local7: local7
Asterisk: *

KnownSyslogDataSourceFacilityNamesAuth: auth
KnownSyslogDataSourceFacilityNamesAuthpriv: authpriv
KnownSyslogDataSourceFacilityNamesCron: cron
KnownSyslogDataSourceFacilityNamesDaemon: daemon
KnownSyslogDataSourceFacilityNamesKern: kern
KnownSyslogDataSourceFacilityNamesLpr: lpr
KnownSyslogDataSourceFacilityNamesMail: mail
KnownSyslogDataSourceFacilityNamesMark: mark
KnownSyslogDataSourceFacilityNamesNews: news
KnownSyslogDataSourceFacilityNamesSyslog: syslog
KnownSyslogDataSourceFacilityNamesUser: user
KnownSyslogDataSourceFacilityNamesUucp: uucp
KnownSyslogDataSourceFacilityNamesLocal0: local0
KnownSyslogDataSourceFacilityNamesLocal1: local1
KnownSyslogDataSourceFacilityNamesLocal2: local2
KnownSyslogDataSourceFacilityNamesLocal3: local3
KnownSyslogDataSourceFacilityNamesLocal4: local4
KnownSyslogDataSourceFacilityNamesLocal5: local5
KnownSyslogDataSourceFacilityNamesLocal6: local6
KnownSyslogDataSourceFacilityNamesLocal7: local7
KnownSyslogDataSourceFacilityNamesAsterisk: *

Auth: auth
Authpriv: authpriv
Cron: cron
Daemon: daemon
Kern: kern
Lpr: lpr
Mail: mail
Mark: mark
News: news
Syslog: syslog
User: user
Uucp: uucp
Local0: local0
Local1: local1
Local2: local2
Local3: local3
Local4: local4
Local5: local5
Local6: local6
Local7: local7
Asterisk: *

Auth: auth
Authpriv: authpriv
Cron: cron
Daemon: daemon
Kern: kern
Lpr: lpr
Mail: mail
Mark: mark
News: news
Syslog: syslog
User: user
Uucp: uucp
Local0: local0
Local1: local1
Local2: local2
Local3: local3
Local4: local4
Local5: local5
Local6: local6
Local7: local7
Asterisk: *

AUTH: auth
AUTHPRIV: authpriv
CRON: cron
DAEMON: daemon
KERN: kern
LPR: lpr
MAIL: mail
MARK: mark
NEWS: news
SYSLOG: syslog
USER: user
UUCP: uucp
LOCAL0: local0
LOCAL1: local1
LOCAL2: local2
LOCAL3: local3
LOCAL4: local4
LOCAL5: local5
LOCAL6: local6
LOCAL7: local7
ASTERISK: *

"auth": auth
"authpriv": authpriv
"cron": cron
"daemon": daemon
"kern": kern
"lpr": lpr
"mail": mail
"mark": mark
"news": news
"syslog": syslog
"user": user
"uucp": uucp
"local0": local0
"local1": local1
"local2": local2
"local3": local3
"local4": local4
"local5": local5
"local6": local6
"local7": local7
"*": *

KnownSyslogDataSourceLogLevels

Debug: Debug
Info: Info
Notice: Notice
Warning: Warning
Error: Error
Critical: Critical
Alert: Alert
Emergency: Emergency
Asterisk: *

KnownSyslogDataSourceLogLevelsDebug: Debug
KnownSyslogDataSourceLogLevelsInfo: Info
KnownSyslogDataSourceLogLevelsNotice: Notice
KnownSyslogDataSourceLogLevelsWarning: Warning
KnownSyslogDataSourceLogLevelsError: Error
KnownSyslogDataSourceLogLevelsCritical: Critical
KnownSyslogDataSourceLogLevelsAlert: Alert
KnownSyslogDataSourceLogLevelsEmergency: Emergency
KnownSyslogDataSourceLogLevelsAsterisk: *

Debug: Debug
Info: Info
Notice: Notice
Warning: Warning
Error: Error
Critical: Critical
Alert: Alert
Emergency: Emergency
Asterisk: *

Debug: Debug
Info: Info
Notice: Notice
Warning: Warning
Error: Error
Critical: Critical
Alert: Alert
Emergency: Emergency
Asterisk: *

DEBUG: Debug
INFO: Info
NOTICE: Notice
WARNING: Warning
ERROR: Error
CRITICAL: Critical
ALERT: Alert
EMERGENCY: Emergency
ASTERISK: *

"Debug": Debug
"Info": Info
"Notice": Notice
"Warning": Warning
"Error": Error
"Critical": Critical
"Alert": Alert
"Emergency": Emergency
"*": *

KnownSyslogDataSourceStreams

Microsoft_Syslog: Microsoft-Syslog

KnownSyslogDataSourceStreams_Microsoft_Syslog: Microsoft-Syslog

MicrosoftSyslog: Microsoft-Syslog

Microsoft_Syslog: Microsoft-Syslog

MICROSOFT_SYSLOG: Microsoft-Syslog

"Microsoft-Syslog": Microsoft-Syslog

KnownWindowsEventLogDataSourceStreams

Microsoft_WindowsEvent: Microsoft-WindowsEvent
Microsoft_Event: Microsoft-Event

KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent: Microsoft-WindowsEvent
KnownWindowsEventLogDataSourceStreams_Microsoft_Event: Microsoft-Event

MicrosoftWindowsEvent: Microsoft-WindowsEvent
MicrosoftEvent: Microsoft-Event

Microsoft_WindowsEvent: Microsoft-WindowsEvent
Microsoft_Event: Microsoft-Event

MICROSOFT_WINDOWS_EVENT: Microsoft-WindowsEvent
MICROSOFT_EVENT: Microsoft-Event

"Microsoft-WindowsEvent": Microsoft-WindowsEvent
"Microsoft-Event": Microsoft-Event

LogAnalyticsDestination

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId string: The resource ID of the Log Analytics workspace.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspace_resource_id str: The resource ID of the Log Analytics workspace.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

LogAnalyticsDestinationResponse

WorkspaceId string: The Customer ID of the Log Analytics workspace.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

WorkspaceId string: The Customer ID of the Log Analytics workspace.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

workspaceId String: The Customer ID of the Log Analytics workspace.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

workspaceId string: The Customer ID of the Log Analytics workspace.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId string: The resource ID of the Log Analytics workspace.

workspace_id str: The Customer ID of the Log Analytics workspace.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspace_resource_id str: The resource ID of the Log Analytics workspace.

workspaceId String: The Customer ID of the Log Analytics workspace.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

PerfCounterDataSource

CounterSpecifiers List<string>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPerfCounterDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

CounterSpecifiers []string: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Integer: The number of seconds between consecutive counter measurements (samples).
streams List<Either<String,KnownPerfCounterDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers string[]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds number: The number of seconds between consecutive counter measurements (samples).
streams (string | KnownPerfCounterDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counter_specifiers Sequence[str]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
sampling_frequency_in_seconds int: The number of seconds between consecutive counter measurements (samples).
streams Sequence[Union[str, KnownPerfCounterDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Number: The number of seconds between consecutive counter measurements (samples).
streams List<String | "Microsoft-Perf" | "Microsoft-InsightsMetrics">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

PerfCounterDataSourceResponse

CounterSpecifiers List<string>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

CounterSpecifiers []string: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Integer: The number of seconds between consecutive counter measurements (samples).
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers string[]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds number: The number of seconds between consecutive counter measurements (samples).
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counter_specifiers Sequence[str]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
sampling_frequency_in_seconds int: The number of seconds between consecutive counter measurements (samples).
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Number: The number of seconds between consecutive counter measurements (samples).
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSource

FacilityNames List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceFacilityNames>>: The list of facility names.
LogLevels List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceLogLevels>>: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

FacilityNames []string: The list of facility names.
LogLevels []string: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<Either<String,KnownSyslogDataSourceFacilityNames>>: The list of facility names.
logLevels List<Either<String,KnownSyslogDataSourceLogLevels>>: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownSyslogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames (string | KnownSyslogDataSourceFacilityNames)[]: The list of facility names.
logLevels (string | KnownSyslogDataSourceLogLevels)[]: The log levels to collect.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownSyslogDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facility_names Sequence[Union[str, KnownSyslogDataSourceFacilityNames]]: The list of facility names.
log_levels Sequence[Union[str, KnownSyslogDataSourceLogLevels]]: The log levels to collect.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownSyslogDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String | "auth" | "authpriv" | "cron" | "daemon" | "kern" | "lpr" | "mail" | "mark" | "news" | "syslog" | "user" | "uucp" | "local0" | "local1" | "local2" | "local3" | "local4" | "local5" | "local6" | "local7" | "*">: The list of facility names.
logLevels List<String | "Debug" | "Info" | "Notice" | "Warning" | "Error" | "Critical" | "Alert" | "Emergency" | "*">: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-Syslog">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSourceResponse

FacilityNames List<string>: The list of facility names.
LogLevels List<string>: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

FacilityNames []string: The list of facility names.
LogLevels []string: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String>: The list of facility names.
logLevels List<String>: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames string[]: The list of facility names.
logLevels string[]: The log levels to collect.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facility_names Sequence[str]: The list of facility names.
log_levels Sequence[str]: The log levels to collect.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String>: The list of facility names.
logLevels List<String>: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

WindowsEventLogDataSource

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownWindowsEventLogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries List<string>: A list of Windows Event Log queries in XPATH format.

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries []string: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownWindowsEventLogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownWindowsEventLogDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries string[]: A list of Windows Event Log queries in XPATH format.

name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownWindowsEventLogDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
x_path_queries Sequence[str]: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-WindowsEvent" | "Microsoft-Event">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

WindowsEventLogDataSourceResponse

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries List<string>: A list of Windows Event Log queries in XPATH format.

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries []string: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries string[]: A list of Windows Event Log queries in XPATH format.

name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
x_path_queries Sequence[str]: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:insights:DataCollectionRule myCollectionRule /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.Insights/dataCollectionRules/myCollectionRule

Package Details

Repository: Azure Native pulumi/pulumi-azure-native
License: Apache-2.0

Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi

pulumi/pulumi-azure-native

azure-native.insights.DataCollectionRule

On this page

On this page

Example Usage

Create or update data collection rule

Create DataCollectionRule Resource

DataCollectionRule Resource Properties

Inputs

Outputs

Supporting Types

DataCollectionRuleDataSources

DataCollectionRuleDestinations

DataCollectionRuleResponseDataSources

DataCollectionRuleResponseDestinations

DataFlow

DataFlowResponse

DestinationsSpecAzureMonitorMetrics

DestinationsSpecResponseAzureMonitorMetrics

ExtensionDataSource

ExtensionDataSourceResponse

KnownDataCollectionRuleResourceKind

KnownDataFlowStreams

KnownExtensionDataSourceStreams

KnownPerfCounterDataSourceStreams

KnownSyslogDataSourceFacilityNames

KnownSyslogDataSourceLogLevels

KnownSyslogDataSourceStreams

KnownWindowsEventLogDataSourceStreams

LogAnalyticsDestination

LogAnalyticsDestinationResponse

PerfCounterDataSource

PerfCounterDataSourceResponse

SyslogDataSource

SyslogDataSourceResponse

WindowsEventLogDataSource

WindowsEventLogDataSourceResponse

Import

Package Details

On this page

On this page