Docs Packages
  1. Pulumi Registry
  2. Azure Classic
  3. API Docs
  4. monitoring
  5. DataCollectionRule
azure logo
Azure Classic v5.43.0, May 6 23

azure.monitoring.DataCollectionRule

Explore with Pulumi AI

Manages a Data Collection Rule.

Example Usage

using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new()
    {
        Location = "West Europe",
    });

    var exampleUserAssignedIdentity = new Azure.Authorization.UserAssignedIdentity("exampleUserAssignedIdentity", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
    });

    var exampleAnalyticsWorkspace = new Azure.OperationalInsights.AnalyticsWorkspace("exampleAnalyticsWorkspace", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
    });

    var exampleAnalyticsSolution = new Azure.OperationalInsights.AnalyticsSolution("exampleAnalyticsSolution", new()
    {
        SolutionName = "WindowsEventForwarding",
        Location = exampleResourceGroup.Location,
        ResourceGroupName = exampleResourceGroup.Name,
        WorkspaceResourceId = exampleAnalyticsWorkspace.Id,
        WorkspaceName = exampleAnalyticsWorkspace.Name,
        Plan = new Azure.OperationalInsights.Inputs.AnalyticsSolutionPlanArgs
        {
            Publisher = "Microsoft",
            Product = "OMSGallery/WindowsEventForwarding",
        },
    });

    var exampleEventHub = new Azure.EventHub.EventHub("exampleEventHub", new()
    {
        NamespaceName = azurerm_eventhub_namespace.Example.Name,
        ResourceGroupName = exampleResourceGroup.Name,
        PartitionCount = 2,
        MessageRetention = 1,
    });

    var exampleAccount = new Azure.Storage.Account("exampleAccount", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
        AccountTier = "Standard",
        AccountReplicationType = "LRS",
    });

    var exampleContainer = new Azure.Storage.Container("exampleContainer", new()
    {
        StorageAccountName = exampleAccount.Name,
        ContainerAccessType = "private",
    });

    var exampleDataCollectionEndpoint = new Azure.Monitoring.DataCollectionEndpoint("exampleDataCollectionEndpoint", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
    });

    var exampleDataCollectionRule = new Azure.Monitoring.DataCollectionRule("exampleDataCollectionRule", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
        DataCollectionEndpointId = exampleDataCollectionEndpoint.Id,
        Destinations = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsArgs
        {
            LogAnalytics = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsLogAnalyticArgs
                {
                    WorkspaceResourceId = exampleAnalyticsWorkspace.Id,
                    Name = "example-destination-log",
                },
            },
            EventHub = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsEventHubArgs
            {
                EventHubId = exampleEventHub.Id,
                Name = "example-destination-eventhub",
            },
            StorageBlobs = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsStorageBlobArgs
                {
                    StorageAccountId = exampleAccount.Id,
                    ContainerName = exampleContainer.Name,
                    Name = "example-destination-storage",
                },
            },
            AzureMonitorMetrics = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsAzureMonitorMetricsArgs
            {
                Name = "example-destination-metrics",
            },
        },
        DataFlows = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataFlowArgs
            {
                Streams = new[]
                {
                    "Microsoft-InsightsMetrics",
                },
                Destinations = new[]
                {
                    "example-destination-metrics",
                },
            },
            new Azure.Monitoring.Inputs.DataCollectionRuleDataFlowArgs
            {
                Streams = new[]
                {
                    "Microsoft-InsightsMetrics",
                    "Microsoft-Syslog",
                    "Microsoft-Perf",
                },
                Destinations = new[]
                {
                    "example-destination-log",
                },
            },
            new Azure.Monitoring.Inputs.DataCollectionRuleDataFlowArgs
            {
                Streams = new[]
                {
                    "Custom-MyTableRawData",
                },
                Destinations = new[]
                {
                    "example-destination-log",
                },
                OutputStream = "Microsoft-Syslog",
                TransformKql = "source | project TimeGenerated = Time, Computer, Message = AdditionalContext",
            },
        },
        DataSources = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesArgs
        {
            Syslogs = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesSyslogArgs
                {
                    FacilityNames = new[]
                    {
                        "*",
                    },
                    LogLevels = new[]
                    {
                        "*",
                    },
                    Name = "example-datasource-syslog",
                },
            },
            IisLogs = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesIisLogArgs
                {
                    Streams = new[]
                    {
                        "Microsoft-W3CIISLog",
                    },
                    Name = "example-datasource-iis",
                    LogDirectories = new[]
                    {
                        "C:\\Logs\\W3SVC1",
                    },
                },
            },
            LogFiles = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesLogFileArgs
                {
                    Name = "example-datasource-logfile",
                    Format = "text",
                    Streams = new[]
                    {
                        "Custom-MyTableRawData",
                    },
                    FilePatterns = new[]
                    {
                        "C:\\JavaLogs\\*.log",
                    },
                    Settings = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesLogFileSettingsArgs
                    {
                        Text = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesLogFileSettingsTextArgs
                        {
                            RecordStartTimestampFormat = "ISO 8601",
                        },
                    },
                },
            },
            PerformanceCounters = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesPerformanceCounterArgs
                {
                    Streams = new[]
                    {
                        "Microsoft-Perf",
                        "Microsoft-InsightsMetrics",
                    },
                    SamplingFrequencyInSeconds = 60,
                    CounterSpecifiers = new[]
                    {
                        "Processor(*)\\% Processor Time",
                    },
                    Name = "example-datasource-perfcounter",
                },
            },
            WindowsEventLogs = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesWindowsEventLogArgs
                {
                    Streams = new[]
                    {
                        "Microsoft-WindowsEvent",
                    },
                    XPathQueries = new[]
                    {
                        "*![System/Level=1]",
                    },
                    Name = "example-datasource-wineventlog",
                },
            },
            Extensions = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesExtensionArgs
                {
                    Streams = new[]
                    {
                        "Microsoft-WindowsEvent",
                    },
                    InputDataSources = new[]
                    {
                        "example-datasource-wineventlog",
                    },
                    ExtensionName = "example-extension-name",
                    ExtensionJson = JsonSerializer.Serialize(new Dictionary<string, object?>
                    {
                        ["a"] = 1,
                        ["b"] = "hello",
                    }),
                    Name = "example-datasource-extension",
                },
            },
        },
        StreamDeclarations = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleStreamDeclarationArgs
            {
                StreamName = "Custom-MyTableRawData",
                Columns = new[]
                {
                    new Azure.Monitoring.Inputs.DataCollectionRuleStreamDeclarationColumnArgs
                    {
                        Name = "Time",
                        Type = "datetime",
                    },
                    new Azure.Monitoring.Inputs.DataCollectionRuleStreamDeclarationColumnArgs
                    {
                        Name = "Computer",
                        Type = "string",
                    },
                    new Azure.Monitoring.Inputs.DataCollectionRuleStreamDeclarationColumnArgs
                    {
                        Name = "AdditionalContext",
                        Type = "string",
                    },
                },
            },
        },
        Identity = new Azure.Monitoring.Inputs.DataCollectionRuleIdentityArgs
        {
            Type = "UserAssigned",
            IdentityIds = new[]
            {
                exampleUserAssignedIdentity.Id,
            },
        },
        Description = "data collection rule example",
        Tags = 
        {
            { "foo", "bar" },
        },
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleAnalyticsSolution,
        },
    });

});

package main

import (
	"encoding/json"

	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/authorization"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/eventhub"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/monitoring"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/operationalinsights"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/storage"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleUserAssignedIdentity, err := authorization.NewUserAssignedIdentity(ctx, "exampleUserAssignedIdentity", &authorization.UserAssignedIdentityArgs{
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
		})
		if err != nil {
			return err
		}
		exampleAnalyticsSolution, err := operationalinsights.NewAnalyticsSolution(ctx, "exampleAnalyticsSolution", &operationalinsights.AnalyticsSolutionArgs{
			SolutionName:        pulumi.String("WindowsEventForwarding"),
			Location:            exampleResourceGroup.Location,
			ResourceGroupName:   exampleResourceGroup.Name,
			WorkspaceResourceId: exampleAnalyticsWorkspace.ID(),
			WorkspaceName:       exampleAnalyticsWorkspace.Name,
			Plan: &operationalinsights.AnalyticsSolutionPlanArgs{
				Publisher: pulumi.String("Microsoft"),
				Product:   pulumi.String("OMSGallery/WindowsEventForwarding"),
			},
		})
		if err != nil {
			return err
		}
		exampleEventHub, err := eventhub.NewEventHub(ctx, "exampleEventHub", &eventhub.EventHubArgs{
			NamespaceName:     pulumi.Any(azurerm_eventhub_namespace.Example.Name),
			ResourceGroupName: exampleResourceGroup.Name,
			PartitionCount:    pulumi.Int(2),
			MessageRetention:  pulumi.Int(1),
		})
		if err != nil {
			return err
		}
		exampleAccount, err := storage.NewAccount(ctx, "exampleAccount", &storage.AccountArgs{
			ResourceGroupName:      exampleResourceGroup.Name,
			Location:               exampleResourceGroup.Location,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		exampleContainer, err := storage.NewContainer(ctx, "exampleContainer", &storage.ContainerArgs{
			StorageAccountName:  exampleAccount.Name,
			ContainerAccessType: pulumi.String("private"),
		})
		if err != nil {
			return err
		}
		exampleDataCollectionEndpoint, err := monitoring.NewDataCollectionEndpoint(ctx, "exampleDataCollectionEndpoint", &monitoring.DataCollectionEndpointArgs{
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
		})
		if err != nil {
			return err
		}
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"a": 1,
			"b": "hello",
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		_, err = monitoring.NewDataCollectionRule(ctx, "exampleDataCollectionRule", &monitoring.DataCollectionRuleArgs{
			ResourceGroupName:        exampleResourceGroup.Name,
			Location:                 exampleResourceGroup.Location,
			DataCollectionEndpointId: exampleDataCollectionEndpoint.ID(),
			Destinations: &monitoring.DataCollectionRuleDestinationsArgs{
				LogAnalytics: monitoring.DataCollectionRuleDestinationsLogAnalyticArray{
					&monitoring.DataCollectionRuleDestinationsLogAnalyticArgs{
						WorkspaceResourceId: exampleAnalyticsWorkspace.ID(),
						Name:                pulumi.String("example-destination-log"),
					},
				},
				EventHub: &monitoring.DataCollectionRuleDestinationsEventHubArgs{
					EventHubId: exampleEventHub.ID(),
					Name:       pulumi.String("example-destination-eventhub"),
				},
				StorageBlobs: monitoring.DataCollectionRuleDestinationsStorageBlobArray{
					&monitoring.DataCollectionRuleDestinationsStorageBlobArgs{
						StorageAccountId: exampleAccount.ID(),
						ContainerName:    exampleContainer.Name,
						Name:             pulumi.String("example-destination-storage"),
					},
				},
				AzureMonitorMetrics: &monitoring.DataCollectionRuleDestinationsAzureMonitorMetricsArgs{
					Name: pulumi.String("example-destination-metrics"),
				},
			},
			DataFlows: monitoring.DataCollectionRuleDataFlowArray{
				&monitoring.DataCollectionRuleDataFlowArgs{
					Streams: pulumi.StringArray{
						pulumi.String("Microsoft-InsightsMetrics"),
					},
					Destinations: pulumi.StringArray{
						pulumi.String("example-destination-metrics"),
					},
				},
				&monitoring.DataCollectionRuleDataFlowArgs{
					Streams: pulumi.StringArray{
						pulumi.String("Microsoft-InsightsMetrics"),
						pulumi.String("Microsoft-Syslog"),
						pulumi.String("Microsoft-Perf"),
					},
					Destinations: pulumi.StringArray{
						pulumi.String("example-destination-log"),
					},
				},
				&monitoring.DataCollectionRuleDataFlowArgs{
					Streams: pulumi.StringArray{
						pulumi.String("Custom-MyTableRawData"),
					},
					Destinations: pulumi.StringArray{
						pulumi.String("example-destination-log"),
					},
					OutputStream: pulumi.String("Microsoft-Syslog"),
					TransformKql: pulumi.String("source | project TimeGenerated = Time, Computer, Message = AdditionalContext"),
				},
			},
			DataSources: &monitoring.DataCollectionRuleDataSourcesArgs{
				Syslogs: monitoring.DataCollectionRuleDataSourcesSyslogArray{
					&monitoring.DataCollectionRuleDataSourcesSyslogArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String("*"),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String("*"),
						},
						Name: pulumi.String("example-datasource-syslog"),
					},
				},
				IisLogs: monitoring.DataCollectionRuleDataSourcesIisLogArray{
					&monitoring.DataCollectionRuleDataSourcesIisLogArgs{
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-W3CIISLog"),
						},
						Name: pulumi.String("example-datasource-iis"),
						LogDirectories: pulumi.StringArray{
							pulumi.String("C:\\Logs\\W3SVC1"),
						},
					},
				},
				LogFiles: monitoring.DataCollectionRuleDataSourcesLogFileArray{
					&monitoring.DataCollectionRuleDataSourcesLogFileArgs{
						Name:   pulumi.String("example-datasource-logfile"),
						Format: pulumi.String("text"),
						Streams: pulumi.StringArray{
							pulumi.String("Custom-MyTableRawData"),
						},
						FilePatterns: pulumi.StringArray{
							pulumi.String("C:\\JavaLogs\\*.log"),
						},
						Settings: &monitoring.DataCollectionRuleDataSourcesLogFileSettingsArgs{
							Text: &monitoring.DataCollectionRuleDataSourcesLogFileSettingsTextArgs{
								RecordStartTimestampFormat: pulumi.String("ISO 8601"),
							},
						},
					},
				},
				PerformanceCounters: monitoring.DataCollectionRuleDataSourcesPerformanceCounterArray{
					&monitoring.DataCollectionRuleDataSourcesPerformanceCounterArgs{
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-Perf"),
							pulumi.String("Microsoft-InsightsMetrics"),
						},
						SamplingFrequencyInSeconds: pulumi.Int(60),
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("Processor(*)\\% Processor Time"),
						},
						Name: pulumi.String("example-datasource-perfcounter"),
					},
				},
				WindowsEventLogs: monitoring.DataCollectionRuleDataSourcesWindowsEventLogArray{
					&monitoring.DataCollectionRuleDataSourcesWindowsEventLogArgs{
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("*![System/Level=1]"),
						},
						Name: pulumi.String("example-datasource-wineventlog"),
					},
				},
				Extensions: monitoring.DataCollectionRuleDataSourcesExtensionArray{
					&monitoring.DataCollectionRuleDataSourcesExtensionArgs{
						Streams: pulumi.StringArray{
							pulumi.String("Microsoft-WindowsEvent"),
						},
						InputDataSources: pulumi.StringArray{
							pulumi.String("example-datasource-wineventlog"),
						},
						ExtensionName: pulumi.String("example-extension-name"),
						ExtensionJson: pulumi.String(json0),
						Name:          pulumi.String("example-datasource-extension"),
					},
				},
			},
			StreamDeclarations: monitoring.DataCollectionRuleStreamDeclarationArray{
				&monitoring.DataCollectionRuleStreamDeclarationArgs{
					StreamName: pulumi.String("Custom-MyTableRawData"),
					Columns: monitoring.DataCollectionRuleStreamDeclarationColumnArray{
						&monitoring.DataCollectionRuleStreamDeclarationColumnArgs{
							Name: pulumi.String("Time"),
							Type: pulumi.String("datetime"),
						},
						&monitoring.DataCollectionRuleStreamDeclarationColumnArgs{
							Name: pulumi.String("Computer"),
							Type: pulumi.String("string"),
						},
						&monitoring.DataCollectionRuleStreamDeclarationColumnArgs{
							Name: pulumi.String("AdditionalContext"),
							Type: pulumi.String("string"),
						},
					},
				},
			},
			Identity: &monitoring.DataCollectionRuleIdentityArgs{
				Type: pulumi.String("UserAssigned"),
				IdentityIds: pulumi.StringArray{
					exampleUserAssignedIdentity.ID(),
				},
			},
			Description: pulumi.String("data collection rule example"),
			Tags: pulumi.StringMap{
				"foo": pulumi.String("bar"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAnalyticsSolution,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.authorization.UserAssignedIdentity;
import com.pulumi.azure.authorization.UserAssignedIdentityArgs;
import com.pulumi.azure.operationalinsights.AnalyticsWorkspace;
import com.pulumi.azure.operationalinsights.AnalyticsWorkspaceArgs;
import com.pulumi.azure.operationalinsights.AnalyticsSolution;
import com.pulumi.azure.operationalinsights.AnalyticsSolutionArgs;
import com.pulumi.azure.operationalinsights.inputs.AnalyticsSolutionPlanArgs;
import com.pulumi.azure.eventhub.EventHub;
import com.pulumi.azure.eventhub.EventHubArgs;
import com.pulumi.azure.storage.Account;
import com.pulumi.azure.storage.AccountArgs;
import com.pulumi.azure.storage.Container;
import com.pulumi.azure.storage.ContainerArgs;
import com.pulumi.azure.monitoring.DataCollectionEndpoint;
import com.pulumi.azure.monitoring.DataCollectionEndpointArgs;
import com.pulumi.azure.monitoring.DataCollectionRule;
import com.pulumi.azure.monitoring.DataCollectionRuleArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleDestinationsArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleDestinationsEventHubArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleDestinationsAzureMonitorMetricsArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleDataFlowArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleDataSourcesArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleStreamDeclarationArgs;
import com.pulumi.azure.monitoring.inputs.DataCollectionRuleIdentityArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()        
            .location("West Europe")
            .build());

        var exampleUserAssignedIdentity = new UserAssignedIdentity("exampleUserAssignedIdentity", UserAssignedIdentityArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

        var exampleAnalyticsWorkspace = new AnalyticsWorkspace("exampleAnalyticsWorkspace", AnalyticsWorkspaceArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

        var exampleAnalyticsSolution = new AnalyticsSolution("exampleAnalyticsSolution", AnalyticsSolutionArgs.builder()        
            .solutionName("WindowsEventForwarding")
            .location(exampleResourceGroup.location())
            .resourceGroupName(exampleResourceGroup.name())
            .workspaceResourceId(exampleAnalyticsWorkspace.id())
            .workspaceName(exampleAnalyticsWorkspace.name())
            .plan(AnalyticsSolutionPlanArgs.builder()
                .publisher("Microsoft")
                .product("OMSGallery/WindowsEventForwarding")
                .build())
            .build());

        var exampleEventHub = new EventHub("exampleEventHub", EventHubArgs.builder()        
            .namespaceName(azurerm_eventhub_namespace.example().name())
            .resourceGroupName(exampleResourceGroup.name())
            .partitionCount(2)
            .messageRetention(1)
            .build());

        var exampleAccount = new Account("exampleAccount", AccountArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .accountTier("Standard")
            .accountReplicationType("LRS")
            .build());

        var exampleContainer = new Container("exampleContainer", ContainerArgs.builder()        
            .storageAccountName(exampleAccount.name())
            .containerAccessType("private")
            .build());

        var exampleDataCollectionEndpoint = new DataCollectionEndpoint("exampleDataCollectionEndpoint", DataCollectionEndpointArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .build());

        var exampleDataCollectionRule = new DataCollectionRule("exampleDataCollectionRule", DataCollectionRuleArgs.builder()        
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .dataCollectionEndpointId(exampleDataCollectionEndpoint.id())
            .destinations(DataCollectionRuleDestinationsArgs.builder()
                .logAnalytics(DataCollectionRuleDestinationsLogAnalyticArgs.builder()
                    .workspaceResourceId(exampleAnalyticsWorkspace.id())
                    .name("example-destination-log")
                    .build())
                .eventHub(DataCollectionRuleDestinationsEventHubArgs.builder()
                    .eventHubId(exampleEventHub.id())
                    .name("example-destination-eventhub")
                    .build())
                .storageBlobs(DataCollectionRuleDestinationsStorageBlobArgs.builder()
                    .storageAccountId(exampleAccount.id())
                    .containerName(exampleContainer.name())
                    .name("example-destination-storage")
                    .build())
                .azureMonitorMetrics(DataCollectionRuleDestinationsAzureMonitorMetricsArgs.builder()
                    .name("example-destination-metrics")
                    .build())
                .build())
            .dataFlows(            
                DataCollectionRuleDataFlowArgs.builder()
                    .streams("Microsoft-InsightsMetrics")
                    .destinations("example-destination-metrics")
                    .build(),
                DataCollectionRuleDataFlowArgs.builder()
                    .streams(                    
                        "Microsoft-InsightsMetrics",
                        "Microsoft-Syslog",
                        "Microsoft-Perf")
                    .destinations("example-destination-log")
                    .build(),
                DataCollectionRuleDataFlowArgs.builder()
                    .streams("Custom-MyTableRawData")
                    .destinations("example-destination-log")
                    .outputStream("Microsoft-Syslog")
                    .transformKql("source | project TimeGenerated = Time, Computer, Message = AdditionalContext")
                    .build())
            .dataSources(DataCollectionRuleDataSourcesArgs.builder()
                .syslogs(DataCollectionRuleDataSourcesSyslogArgs.builder()
                    .facilityNames("*")
                    .logLevels("*")
                    .name("example-datasource-syslog")
                    .build())
                .iisLogs(DataCollectionRuleDataSourcesIisLogArgs.builder()
                    .streams("Microsoft-W3CIISLog")
                    .name("example-datasource-iis")
                    .logDirectories("C:\\Logs\\W3SVC1")
                    .build())
                .logFiles(DataCollectionRuleDataSourcesLogFileArgs.builder()
                    .name("example-datasource-logfile")
                    .format("text")
                    .streams("Custom-MyTableRawData")
                    .filePatterns("C:\\JavaLogs\\*.log")
                    .settings(DataCollectionRuleDataSourcesLogFileSettingsArgs.builder()
                        .text(DataCollectionRuleDataSourcesLogFileSettingsTextArgs.builder()
                            .recordStartTimestampFormat("ISO 8601")
                            .build())
                        .build())
                    .build())
                .performanceCounters(DataCollectionRuleDataSourcesPerformanceCounterArgs.builder()
                    .streams(                    
                        "Microsoft-Perf",
                        "Microsoft-InsightsMetrics")
                    .samplingFrequencyInSeconds(60)
                    .counterSpecifiers("Processor(*)\\% Processor Time")
                    .name("example-datasource-perfcounter")
                    .build())
                .windowsEventLogs(DataCollectionRuleDataSourcesWindowsEventLogArgs.builder()
                    .streams("Microsoft-WindowsEvent")
                    .xPathQueries("*![System/Level=1]")
                    .name("example-datasource-wineventlog")
                    .build())
                .extensions(DataCollectionRuleDataSourcesExtensionArgs.builder()
                    .streams("Microsoft-WindowsEvent")
                    .inputDataSources("example-datasource-wineventlog")
                    .extensionName("example-extension-name")
                    .extensionJson(serializeJson(
                        jsonObject(
                            jsonProperty("a", 1),
                            jsonProperty("b", "hello")
                        )))
                    .name("example-datasource-extension")
                    .build())
                .build())
            .streamDeclarations(DataCollectionRuleStreamDeclarationArgs.builder()
                .streamName("Custom-MyTableRawData")
                .columns(                
                    DataCollectionRuleStreamDeclarationColumnArgs.builder()
                        .name("Time")
                        .type("datetime")
                        .build(),
                    DataCollectionRuleStreamDeclarationColumnArgs.builder()
                        .name("Computer")
                        .type("string")
                        .build(),
                    DataCollectionRuleStreamDeclarationColumnArgs.builder()
                        .name("AdditionalContext")
                        .type("string")
                        .build())
                .build())
            .identity(DataCollectionRuleIdentityArgs.builder()
                .type("UserAssigned")
                .identityIds(exampleUserAssignedIdentity.id())
                .build())
            .description("data collection rule example")
            .tags(Map.of("foo", "bar"))
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleAnalyticsSolution)
                .build());

    }
}

import pulumi
import json
import pulumi_azure as azure

example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_user_assigned_identity = azure.authorization.UserAssignedIdentity("exampleUserAssignedIdentity",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location)
example_analytics_workspace = azure.operationalinsights.AnalyticsWorkspace("exampleAnalyticsWorkspace",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location)
example_analytics_solution = azure.operationalinsights.AnalyticsSolution("exampleAnalyticsSolution",
    solution_name="WindowsEventForwarding",
    location=example_resource_group.location,
    resource_group_name=example_resource_group.name,
    workspace_resource_id=example_analytics_workspace.id,
    workspace_name=example_analytics_workspace.name,
    plan=azure.operationalinsights.AnalyticsSolutionPlanArgs(
        publisher="Microsoft",
        product="OMSGallery/WindowsEventForwarding",
    ))
example_event_hub = azure.eventhub.EventHub("exampleEventHub",
    namespace_name=azurerm_eventhub_namespace["example"]["name"],
    resource_group_name=example_resource_group.name,
    partition_count=2,
    message_retention=1)
example_account = azure.storage.Account("exampleAccount",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location,
    account_tier="Standard",
    account_replication_type="LRS")
example_container = azure.storage.Container("exampleContainer",
    storage_account_name=example_account.name,
    container_access_type="private")
example_data_collection_endpoint = azure.monitoring.DataCollectionEndpoint("exampleDataCollectionEndpoint",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location)
example_data_collection_rule = azure.monitoring.DataCollectionRule("exampleDataCollectionRule",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location,
    data_collection_endpoint_id=example_data_collection_endpoint.id,
    destinations=azure.monitoring.DataCollectionRuleDestinationsArgs(
        log_analytics=[azure.monitoring.DataCollectionRuleDestinationsLogAnalyticArgs(
            workspace_resource_id=example_analytics_workspace.id,
            name="example-destination-log",
        )],
        event_hub=azure.monitoring.DataCollectionRuleDestinationsEventHubArgs(
            event_hub_id=example_event_hub.id,
            name="example-destination-eventhub",
        ),
        storage_blobs=[azure.monitoring.DataCollectionRuleDestinationsStorageBlobArgs(
            storage_account_id=example_account.id,
            container_name=example_container.name,
            name="example-destination-storage",
        )],
        azure_monitor_metrics=azure.monitoring.DataCollectionRuleDestinationsAzureMonitorMetricsArgs(
            name="example-destination-metrics",
        ),
    ),
    data_flows=[
        azure.monitoring.DataCollectionRuleDataFlowArgs(
            streams=["Microsoft-InsightsMetrics"],
            destinations=["example-destination-metrics"],
        ),
        azure.monitoring.DataCollectionRuleDataFlowArgs(
            streams=[
                "Microsoft-InsightsMetrics",
                "Microsoft-Syslog",
                "Microsoft-Perf",
            ],
            destinations=["example-destination-log"],
        ),
        azure.monitoring.DataCollectionRuleDataFlowArgs(
            streams=["Custom-MyTableRawData"],
            destinations=["example-destination-log"],
            output_stream="Microsoft-Syslog",
            transform_kql="source | project TimeGenerated = Time, Computer, Message = AdditionalContext",
        ),
    ],
    data_sources=azure.monitoring.DataCollectionRuleDataSourcesArgs(
        syslogs=[azure.monitoring.DataCollectionRuleDataSourcesSyslogArgs(
            facility_names=["*"],
            log_levels=["*"],
            name="example-datasource-syslog",
        )],
        iis_logs=[azure.monitoring.DataCollectionRuleDataSourcesIisLogArgs(
            streams=["Microsoft-W3CIISLog"],
            name="example-datasource-iis",
            log_directories=["C:\\Logs\\W3SVC1"],
        )],
        log_files=[azure.monitoring.DataCollectionRuleDataSourcesLogFileArgs(
            name="example-datasource-logfile",
            format="text",
            streams=["Custom-MyTableRawData"],
            file_patterns=["C:\\JavaLogs\\*.log"],
            settings=azure.monitoring.DataCollectionRuleDataSourcesLogFileSettingsArgs(
                text=azure.monitoring.DataCollectionRuleDataSourcesLogFileSettingsTextArgs(
                    record_start_timestamp_format="ISO 8601",
                ),
            ),
        )],
        performance_counters=[azure.monitoring.DataCollectionRuleDataSourcesPerformanceCounterArgs(
            streams=[
                "Microsoft-Perf",
                "Microsoft-InsightsMetrics",
            ],
            sampling_frequency_in_seconds=60,
            counter_specifiers=["Processor(*)\\% Processor Time"],
            name="example-datasource-perfcounter",
        )],
        windows_event_logs=[azure.monitoring.DataCollectionRuleDataSourcesWindowsEventLogArgs(
            streams=["Microsoft-WindowsEvent"],
            x_path_queries=["*![System/Level=1]"],
            name="example-datasource-wineventlog",
        )],
        extensions=[azure.monitoring.DataCollectionRuleDataSourcesExtensionArgs(
            streams=["Microsoft-WindowsEvent"],
            input_data_sources=["example-datasource-wineventlog"],
            extension_name="example-extension-name",
            extension_json=json.dumps({
                "a": 1,
                "b": "hello",
            }),
            name="example-datasource-extension",
        )],
    ),
    stream_declarations=[azure.monitoring.DataCollectionRuleStreamDeclarationArgs(
        stream_name="Custom-MyTableRawData",
        columns=[
            azure.monitoring.DataCollectionRuleStreamDeclarationColumnArgs(
                name="Time",
                type="datetime",
            ),
            azure.monitoring.DataCollectionRuleStreamDeclarationColumnArgs(
                name="Computer",
                type="string",
            ),
            azure.monitoring.DataCollectionRuleStreamDeclarationColumnArgs(
                name="AdditionalContext",
                type="string",
            ),
        ],
    )],
    identity=azure.monitoring.DataCollectionRuleIdentityArgs(
        type="UserAssigned",
        identity_ids=[example_user_assigned_identity.id],
    ),
    description="data collection rule example",
    tags={
        "foo": "bar",
    },
    opts=pulumi.ResourceOptions(depends_on=[example_analytics_solution]))

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleUserAssignedIdentity = new azure.authorization.UserAssignedIdentity("exampleUserAssignedIdentity", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
});
const exampleAnalyticsWorkspace = new azure.operationalinsights.AnalyticsWorkspace("exampleAnalyticsWorkspace", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
});
const exampleAnalyticsSolution = new azure.operationalinsights.AnalyticsSolution("exampleAnalyticsSolution", {
    solutionName: "WindowsEventForwarding",
    location: exampleResourceGroup.location,
    resourceGroupName: exampleResourceGroup.name,
    workspaceResourceId: exampleAnalyticsWorkspace.id,
    workspaceName: exampleAnalyticsWorkspace.name,
    plan: {
        publisher: "Microsoft",
        product: "OMSGallery/WindowsEventForwarding",
    },
});
const exampleEventHub = new azure.eventhub.EventHub("exampleEventHub", {
    namespaceName: azurerm_eventhub_namespace.example.name,
    resourceGroupName: exampleResourceGroup.name,
    partitionCount: 2,
    messageRetention: 1,
});
const exampleAccount = new azure.storage.Account("exampleAccount", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
    accountTier: "Standard",
    accountReplicationType: "LRS",
});
const exampleContainer = new azure.storage.Container("exampleContainer", {
    storageAccountName: exampleAccount.name,
    containerAccessType: "private",
});
const exampleDataCollectionEndpoint = new azure.monitoring.DataCollectionEndpoint("exampleDataCollectionEndpoint", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
});
const exampleDataCollectionRule = new azure.monitoring.DataCollectionRule("exampleDataCollectionRule", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
    dataCollectionEndpointId: exampleDataCollectionEndpoint.id,
    destinations: {
        logAnalytics: [{
            workspaceResourceId: exampleAnalyticsWorkspace.id,
            name: "example-destination-log",
        }],
        eventHub: {
            eventHubId: exampleEventHub.id,
            name: "example-destination-eventhub",
        },
        storageBlobs: [{
            storageAccountId: exampleAccount.id,
            containerName: exampleContainer.name,
            name: "example-destination-storage",
        }],
        azureMonitorMetrics: {
            name: "example-destination-metrics",
        },
    },
    dataFlows: [
        {
            streams: ["Microsoft-InsightsMetrics"],
            destinations: ["example-destination-metrics"],
        },
        {
            streams: [
                "Microsoft-InsightsMetrics",
                "Microsoft-Syslog",
                "Microsoft-Perf",
            ],
            destinations: ["example-destination-log"],
        },
        {
            streams: ["Custom-MyTableRawData"],
            destinations: ["example-destination-log"],
            outputStream: "Microsoft-Syslog",
            transformKql: "source | project TimeGenerated = Time, Computer, Message = AdditionalContext",
        },
    ],
    dataSources: {
        syslogs: [{
            facilityNames: ["*"],
            logLevels: ["*"],
            name: "example-datasource-syslog",
        }],
        iisLogs: [{
            streams: ["Microsoft-W3CIISLog"],
            name: "example-datasource-iis",
            logDirectories: ["C:\\Logs\\W3SVC1"],
        }],
        logFiles: [{
            name: "example-datasource-logfile",
            format: "text",
            streams: ["Custom-MyTableRawData"],
            filePatterns: ["C:\\JavaLogs\\*.log"],
            settings: {
                text: {
                    recordStartTimestampFormat: "ISO 8601",
                },
            },
        }],
        performanceCounters: [{
            streams: [
                "Microsoft-Perf",
                "Microsoft-InsightsMetrics",
            ],
            samplingFrequencyInSeconds: 60,
            counterSpecifiers: ["Processor(*)\\% Processor Time"],
            name: "example-datasource-perfcounter",
        }],
        windowsEventLogs: [{
            streams: ["Microsoft-WindowsEvent"],
            xPathQueries: ["*![System/Level=1]"],
            name: "example-datasource-wineventlog",
        }],
        extensions: [{
            streams: ["Microsoft-WindowsEvent"],
            inputDataSources: ["example-datasource-wineventlog"],
            extensionName: "example-extension-name",
            extensionJson: JSON.stringify({
                a: 1,
                b: "hello",
            }),
            name: "example-datasource-extension",
        }],
    },
    streamDeclarations: [{
        streamName: "Custom-MyTableRawData",
        columns: [
            {
                name: "Time",
                type: "datetime",
            },
            {
                name: "Computer",
                type: "string",
            },
            {
                name: "AdditionalContext",
                type: "string",
            },
        ],
    }],
    identity: {
        type: "UserAssigned",
        identityIds: [exampleUserAssignedIdentity.id],
    },
    description: "data collection rule example",
    tags: {
        foo: "bar",
    },
}, {
    dependsOn: [exampleAnalyticsSolution],
});

resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    properties:
      location: West Europe
  exampleUserAssignedIdentity:
    type: azure:authorization:UserAssignedIdentity
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
  exampleAnalyticsWorkspace:
    type: azure:operationalinsights:AnalyticsWorkspace
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
  exampleAnalyticsSolution:
    type: azure:operationalinsights:AnalyticsSolution
    properties:
      solutionName: WindowsEventForwarding
      location: ${exampleResourceGroup.location}
      resourceGroupName: ${exampleResourceGroup.name}
      workspaceResourceId: ${exampleAnalyticsWorkspace.id}
      workspaceName: ${exampleAnalyticsWorkspace.name}
      plan:
        publisher: Microsoft
        product: OMSGallery/WindowsEventForwarding
  exampleEventHub:
    type: azure:eventhub:EventHub
    properties:
      namespaceName: ${azurerm_eventhub_namespace.example.name}
      resourceGroupName: ${exampleResourceGroup.name}
      partitionCount: 2
      messageRetention: 1
  exampleAccount:
    type: azure:storage:Account
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
      accountTier: Standard
      accountReplicationType: LRS
  exampleContainer:
    type: azure:storage:Container
    properties:
      storageAccountName: ${exampleAccount.name}
      containerAccessType: private
  exampleDataCollectionEndpoint:
    type: azure:monitoring:DataCollectionEndpoint
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
  exampleDataCollectionRule:
    type: azure:monitoring:DataCollectionRule
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
      dataCollectionEndpointId: ${exampleDataCollectionEndpoint.id}
      destinations:
        logAnalytics:
          - workspaceResourceId: ${exampleAnalyticsWorkspace.id}
            name: example-destination-log
        eventHub:
          eventHubId: ${exampleEventHub.id}
          name: example-destination-eventhub
        storageBlobs:
          - storageAccountId: ${exampleAccount.id}
            containerName: ${exampleContainer.name}
            name: example-destination-storage
        azureMonitorMetrics:
          name: example-destination-metrics
      dataFlows:
        - streams:
            - Microsoft-InsightsMetrics
          destinations:
            - example-destination-metrics
        - streams:
            - Microsoft-InsightsMetrics
            - Microsoft-Syslog
            - Microsoft-Perf
          destinations:
            - example-destination-log
        - streams:
            - Custom-MyTableRawData
          destinations:
            - example-destination-log
          outputStream: Microsoft-Syslog
          transformKql: source | project TimeGenerated = Time, Computer, Message = AdditionalContext
      dataSources:
        syslogs:
          - facilityNames:
              - '*'
            logLevels:
              - '*'
            name: example-datasource-syslog
        iisLogs:
          - streams:
              - Microsoft-W3CIISLog
            name: example-datasource-iis
            logDirectories:
              - C:\Logs\W3SVC1
        logFiles:
          - name: example-datasource-logfile
            format: text
            streams:
              - Custom-MyTableRawData
            filePatterns:
              - C:\JavaLogs\*.log
            settings:
              text:
                recordStartTimestampFormat: ISO 8601
        performanceCounters:
          - streams:
              - Microsoft-Perf
              - Microsoft-InsightsMetrics
            samplingFrequencyInSeconds: 60
            counterSpecifiers:
              - Processor(*)\% Processor Time
            name: example-datasource-perfcounter
        windowsEventLogs:
          - streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - '*![System/Level=1]'
            name: example-datasource-wineventlog
        extensions:
          - streams:
              - Microsoft-WindowsEvent
            inputDataSources:
              - example-datasource-wineventlog
            extensionName: example-extension-name
            extensionJson:
              fn::toJSON:
                a: 1
                b: hello
            name: example-datasource-extension
      streamDeclarations:
        - streamName: Custom-MyTableRawData
          columns:
            - name: Time
              type: datetime
            - name: Computer
              type: string
            - name: AdditionalContext
              type: string
      identity:
        type: UserAssigned
        identityIds:
          - ${exampleUserAssignedIdentity.id}
      description: data collection rule example
      tags:
        foo: bar
    options:
      dependson:
        - ${exampleAnalyticsSolution}

Create DataCollectionRule Resource

new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);
@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       data_collection_endpoint_id: Optional[str] = None,
                       data_flows: Optional[Sequence[DataCollectionRuleDataFlowArgs]] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       identity: Optional[DataCollectionRuleIdentityArgs] = None,
                       kind: Optional[str] = None,
                       location: Optional[str] = None,
                       name: Optional[str] = None,
                       resource_group_name: Optional[str] = None,
                       stream_declarations: Optional[Sequence[DataCollectionRuleStreamDeclarationArgs]] = None,
                       tags: Optional[Mapping[str, str]] = None)
@overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)
func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)
public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)
public DataCollectionRule(String name, DataCollectionRuleArgs args)
public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)

type: azure:monitoring:DataCollectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args DataCollectionRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

DataCollectionRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The DataCollectionRule resource accepts the following input properties:

DataFlows List<DataCollectionRuleDataFlowArgs>

One or more data_flow blocks as defined below.

Destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

ResourceGroupName string

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

DataCollectionEndpointId string

The resource ID of the Data Collection Endpoint that this rule can be used with.

DataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

Description string

The description of the Data Collection Rule.

Identity DataCollectionRuleIdentityArgs

An identity block as defined below.

Kind string

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

Location string

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

Name string

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

StreamDeclarations List<DataCollectionRuleStreamDeclarationArgs>

A stream_declaration block as defined below.

Tags Dictionary<string, string>

A mapping of tags which should be assigned to the Data Collection Rule.

DataFlows []DataCollectionRuleDataFlowArgs

One or more data_flow blocks as defined below.

Destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

ResourceGroupName string

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

DataCollectionEndpointId string

The resource ID of the Data Collection Endpoint that this rule can be used with.

DataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

Description string

The description of the Data Collection Rule.

Identity DataCollectionRuleIdentityArgs

An identity block as defined below.

Kind string

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

Location string

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

Name string

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

StreamDeclarations []DataCollectionRuleStreamDeclarationArgs

A stream_declaration block as defined below.

Tags map[string]string

A mapping of tags which should be assigned to the Data Collection Rule.

dataFlows List<DataCollectionRuleDataFlowArgs>

One or more data_flow blocks as defined below.

destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

resourceGroupName String

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

dataCollectionEndpointId String

The resource ID of the Data Collection Endpoint that this rule can be used with.

dataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description String

The description of the Data Collection Rule.

identity DataCollectionRuleIdentityArgs

An identity block as defined below.

kind String

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location String

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name String

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

streamDeclarations List<DataCollectionRuleStreamDeclarationArgs>

A stream_declaration block as defined below.

tags Map<String,String>

A mapping of tags which should be assigned to the Data Collection Rule.

dataFlows DataCollectionRuleDataFlowArgs[]

One or more data_flow blocks as defined below.

destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

resourceGroupName string

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

dataCollectionEndpointId string

The resource ID of the Data Collection Endpoint that this rule can be used with.

dataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description string

The description of the Data Collection Rule.

identity DataCollectionRuleIdentityArgs

An identity block as defined below.

kind string

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location string

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name string

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

streamDeclarations DataCollectionRuleStreamDeclarationArgs[]

A stream_declaration block as defined below.

tags {[key: string]: string}

A mapping of tags which should be assigned to the Data Collection Rule.

data_flows Sequence[DataCollectionRuleDataFlowArgs]

One or more data_flow blocks as defined below.

destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

resource_group_name str

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

data_collection_endpoint_id str

The resource ID of the Data Collection Endpoint that this rule can be used with.

data_sources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description str

The description of the Data Collection Rule.

identity DataCollectionRuleIdentityArgs

An identity block as defined below.

kind str

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location str

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name str

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

stream_declarations Sequence[DataCollectionRuleStreamDeclarationArgs]

A stream_declaration block as defined below.

tags Mapping[str, str]

A mapping of tags which should be assigned to the Data Collection Rule.

dataFlows List<Property Map>

One or more data_flow blocks as defined below.

destinations Property Map

A destinations block as defined below.

resourceGroupName String

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

dataCollectionEndpointId String

The resource ID of the Data Collection Endpoint that this rule can be used with.

dataSources Property Map

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description String

The description of the Data Collection Rule.

identity Property Map

An identity block as defined below.

kind String

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location String

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name String

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

streamDeclarations List<Property Map>

A stream_declaration block as defined below.

tags Map<String>

A mapping of tags which should be assigned to the Data Collection Rule.

Outputs

All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

ImmutableId string

The immutable ID of the Data Collection Rule.

Id string

The provider-assigned unique ID for this managed resource.

ImmutableId string

The immutable ID of the Data Collection Rule.

id String

The provider-assigned unique ID for this managed resource.

immutableId String

The immutable ID of the Data Collection Rule.

id string

The provider-assigned unique ID for this managed resource.

immutableId string

The immutable ID of the Data Collection Rule.

id str

The provider-assigned unique ID for this managed resource.

immutable_id str

The immutable ID of the Data Collection Rule.

id String

The provider-assigned unique ID for this managed resource.

immutableId String

The immutable ID of the Data Collection Rule.

Look up Existing DataCollectionRule Resource

Get an existing DataCollectionRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: DataCollectionRuleState, opts?: CustomResourceOptions): DataCollectionRule
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        data_collection_endpoint_id: Optional[str] = None,
        data_flows: Optional[Sequence[DataCollectionRuleDataFlowArgs]] = None,
        data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
        description: Optional[str] = None,
        destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
        identity: Optional[DataCollectionRuleIdentityArgs] = None,
        immutable_id: Optional[str] = None,
        kind: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        resource_group_name: Optional[str] = None,
        stream_declarations: Optional[Sequence[DataCollectionRuleStreamDeclarationArgs]] = None,
        tags: Optional[Mapping[str, str]] = None) -> DataCollectionRule
func GetDataCollectionRule(ctx *Context, name string, id IDInput, state *DataCollectionRuleState, opts ...ResourceOption) (*DataCollectionRule, error)
public static DataCollectionRule Get(string name, Input<string> id, DataCollectionRuleState? state, CustomResourceOptions? opts = null)
public static DataCollectionRule get(String name, Output<String> id, DataCollectionRuleState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
DataCollectionEndpointId string

The resource ID of the Data Collection Endpoint that this rule can be used with.

DataFlows List<DataCollectionRuleDataFlowArgs>

One or more data_flow blocks as defined below.

DataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

Description string

The description of the Data Collection Rule.

Destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

Identity DataCollectionRuleIdentityArgs

An identity block as defined below.

ImmutableId string

The immutable ID of the Data Collection Rule.

Kind string

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

Location string

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

Name string

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

ResourceGroupName string

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

StreamDeclarations List<DataCollectionRuleStreamDeclarationArgs>

A stream_declaration block as defined below.

Tags Dictionary<string, string>

A mapping of tags which should be assigned to the Data Collection Rule.

DataCollectionEndpointId string

The resource ID of the Data Collection Endpoint that this rule can be used with.

DataFlows []DataCollectionRuleDataFlowArgs

One or more data_flow blocks as defined below.

DataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

Description string

The description of the Data Collection Rule.

Destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

Identity DataCollectionRuleIdentityArgs

An identity block as defined below.

ImmutableId string

The immutable ID of the Data Collection Rule.

Kind string

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

Location string

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

Name string

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

ResourceGroupName string

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

StreamDeclarations []DataCollectionRuleStreamDeclarationArgs

A stream_declaration block as defined below.

Tags map[string]string

A mapping of tags which should be assigned to the Data Collection Rule.

dataCollectionEndpointId String

The resource ID of the Data Collection Endpoint that this rule can be used with.

dataFlows List<DataCollectionRuleDataFlowArgs>

One or more data_flow blocks as defined below.

dataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description String

The description of the Data Collection Rule.

destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

identity DataCollectionRuleIdentityArgs

An identity block as defined below.

immutableId String

The immutable ID of the Data Collection Rule.

kind String

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location String

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name String

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

resourceGroupName String

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

streamDeclarations List<DataCollectionRuleStreamDeclarationArgs>

A stream_declaration block as defined below.

tags Map<String,String>

A mapping of tags which should be assigned to the Data Collection Rule.

dataCollectionEndpointId string

The resource ID of the Data Collection Endpoint that this rule can be used with.

dataFlows DataCollectionRuleDataFlowArgs[]

One or more data_flow blocks as defined below.

dataSources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description string

The description of the Data Collection Rule.

destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

identity DataCollectionRuleIdentityArgs

An identity block as defined below.

immutableId string

The immutable ID of the Data Collection Rule.

kind string

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location string

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name string

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

resourceGroupName string

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

streamDeclarations DataCollectionRuleStreamDeclarationArgs[]

A stream_declaration block as defined below.

tags {[key: string]: string}

A mapping of tags which should be assigned to the Data Collection Rule.

data_collection_endpoint_id str

The resource ID of the Data Collection Endpoint that this rule can be used with.

data_flows Sequence[DataCollectionRuleDataFlowArgs]

One or more data_flow blocks as defined below.

data_sources DataCollectionRuleDataSourcesArgs

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description str

The description of the Data Collection Rule.

destinations DataCollectionRuleDestinationsArgs

A destinations block as defined below.

identity DataCollectionRuleIdentityArgs

An identity block as defined below.

immutable_id str

The immutable ID of the Data Collection Rule.

kind str

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location str

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name str

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

resource_group_name str

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

stream_declarations Sequence[DataCollectionRuleStreamDeclarationArgs]

A stream_declaration block as defined below.

tags Mapping[str, str]

A mapping of tags which should be assigned to the Data Collection Rule.

dataCollectionEndpointId String

The resource ID of the Data Collection Endpoint that this rule can be used with.

dataFlows List<Property Map>

One or more data_flow blocks as defined below.

dataSources Property Map

A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.

description String

The description of the Data Collection Rule.

destinations Property Map

A destinations block as defined below.

identity Property Map

An identity block as defined below.

immutableId String

The immutable ID of the Data Collection Rule.

kind String

The kind of the Data Collection Rule. Possible values are Linux, Windows,and AgentDirectToStore. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

location String

The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

name String

The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.

resourceGroupName String

The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.

streamDeclarations List<Property Map>

A stream_declaration block as defined below.

tags Map<String>

A mapping of tags which should be assigned to the Data Collection Rule.

Supporting Types

DataCollectionRuleDataFlow

Destinations List<string>

Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.

Streams List<string>

Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog,and Microsoft-WindowsEvent.

BuiltInTransform string

The built-in transform to transform stream data.

OutputStream string

The output stream of the transform. Only required if the data flow changes data to a different stream.

TransformKql string

The KQL query to transform stream data.

Destinations []string

Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.

Streams []string

Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog,and Microsoft-WindowsEvent.

BuiltInTransform string

The built-in transform to transform stream data.

OutputStream string

The output stream of the transform. Only required if the data flow changes data to a different stream.

TransformKql string

The KQL query to transform stream data.

destinations List<String>

Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.

streams List<String>

Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog,and Microsoft-WindowsEvent.

builtInTransform String

The built-in transform to transform stream data.

outputStream String

The output stream of the transform. Only required if the data flow changes data to a different stream.

transformKql String

The KQL query to transform stream data.

destinations string[]

Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.

streams string[]

Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog,and Microsoft-WindowsEvent.

builtInTransform string

The built-in transform to transform stream data.

outputStream string

The output stream of the transform. Only required if the data flow changes data to a different stream.

transformKql string

The KQL query to transform stream data.

destinations Sequence[str]

Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.

streams Sequence[str]

Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog,and Microsoft-WindowsEvent.

built_in_transform str

The built-in transform to transform stream data.

output_stream str

The output stream of the transform. Only required if the data flow changes data to a different stream.

transform_kql str

The KQL query to transform stream data.

destinations List<String>

Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.

streams List<String>

Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog,and Microsoft-WindowsEvent.

builtInTransform String

The built-in transform to transform stream data.

outputStream String

The output stream of the transform. Only required if the data flow changes data to a different stream.

transformKql String

The KQL query to transform stream data.

DataCollectionRuleDataSources

DataImport DataCollectionRuleDataSourcesDataImport

A data_import block as defined above.

Extensions List<DataCollectionRuleDataSourcesExtension>

One or more extension blocks as defined below.

IisLogs List<DataCollectionRuleDataSourcesIisLog>

One or more iis_log blocks as defined below.

LogFiles List<DataCollectionRuleDataSourcesLogFile>

One or more log_file blocks as defined below.

PerformanceCounters List<DataCollectionRuleDataSourcesPerformanceCounter>

One or more performance_counter blocks as defined below.

PlatformTelemetries List<DataCollectionRuleDataSourcesPlatformTelemetry>

One or more platform_telemetry blocks as defined below.

PrometheusForwarders List<DataCollectionRuleDataSourcesPrometheusForwarder>

One or more prometheus_forwarder blocks as defined below.

Syslogs List<DataCollectionRuleDataSourcesSyslog>

One or more syslog blocks as defined below.

WindowsEventLogs List<DataCollectionRuleDataSourcesWindowsEventLog>

One or more windows_event_log blocks as defined below.

WindowsFirewallLogs List<DataCollectionRuleDataSourcesWindowsFirewallLog>

One or more windows_firewall_log blocks as defined below.

DataImport DataCollectionRuleDataSourcesDataImport

A data_import block as defined above.

Extensions []DataCollectionRuleDataSourcesExtension

One or more extension blocks as defined below.

IisLogs []DataCollectionRuleDataSourcesIisLog

One or more iis_log blocks as defined below.

LogFiles []DataCollectionRuleDataSourcesLogFile

One or more log_file blocks as defined below.

PerformanceCounters []DataCollectionRuleDataSourcesPerformanceCounter

One or more performance_counter blocks as defined below.

PlatformTelemetries []DataCollectionRuleDataSourcesPlatformTelemetry

One or more platform_telemetry blocks as defined below.

PrometheusForwarders []DataCollectionRuleDataSourcesPrometheusForwarder

One or more prometheus_forwarder blocks as defined below.

Syslogs []DataCollectionRuleDataSourcesSyslog

One or more syslog blocks as defined below.

WindowsEventLogs []DataCollectionRuleDataSourcesWindowsEventLog

One or more windows_event_log blocks as defined below.

WindowsFirewallLogs []DataCollectionRuleDataSourcesWindowsFirewallLog

One or more windows_firewall_log blocks as defined below.

dataImport DataCollectionRuleDataSourcesDataImport

A data_import block as defined above.

extensions List<DataCollectionRuleDataSourcesExtension>

One or more extension blocks as defined below.

iisLogs List<DataCollectionRuleDataSourcesIisLog>

One or more iis_log blocks as defined below.

logFiles List<DataCollectionRuleDataSourcesLogFile>

One or more log_file blocks as defined below.

performanceCounters List<DataCollectionRuleDataSourcesPerformanceCounter>

One or more performance_counter blocks as defined below.

platformTelemetries List<DataCollectionRuleDataSourcesPlatformTelemetry>

One or more platform_telemetry blocks as defined below.

prometheusForwarders List<DataCollectionRuleDataSourcesPrometheusForwarder>

One or more prometheus_forwarder blocks as defined below.

syslogs List<DataCollectionRuleDataSourcesSyslog>

One or more syslog blocks as defined below.

windowsEventLogs List<DataCollectionRuleDataSourcesWindowsEventLog>

One or more windows_event_log blocks as defined below.

windowsFirewallLogs List<DataCollectionRuleDataSourcesWindowsFirewallLog>

One or more windows_firewall_log blocks as defined below.

dataImport DataCollectionRuleDataSourcesDataImport

A data_import block as defined above.

extensions DataCollectionRuleDataSourcesExtension[]

One or more extension blocks as defined below.

iisLogs DataCollectionRuleDataSourcesIisLog[]

One or more iis_log blocks as defined below.

logFiles DataCollectionRuleDataSourcesLogFile[]

One or more log_file blocks as defined below.

performanceCounters DataCollectionRuleDataSourcesPerformanceCounter[]

One or more performance_counter blocks as defined below.

platformTelemetries DataCollectionRuleDataSourcesPlatformTelemetry[]

One or more platform_telemetry blocks as defined below.

prometheusForwarders DataCollectionRuleDataSourcesPrometheusForwarder[]

One or more prometheus_forwarder blocks as defined below.

syslogs DataCollectionRuleDataSourcesSyslog[]

One or more syslog blocks as defined below.

windowsEventLogs DataCollectionRuleDataSourcesWindowsEventLog[]

One or more windows_event_log blocks as defined below.

windowsFirewallLogs DataCollectionRuleDataSourcesWindowsFirewallLog[]

One or more windows_firewall_log blocks as defined below.

data_import DataCollectionRuleDataSourcesDataImport

A data_import block as defined above.

extensions Sequence[DataCollectionRuleDataSourcesExtension]

One or more extension blocks as defined below.

iis_logs Sequence[DataCollectionRuleDataSourcesIisLog]

One or more iis_log blocks as defined below.

log_files Sequence[DataCollectionRuleDataSourcesLogFile]

One or more log_file blocks as defined below.

performance_counters Sequence[DataCollectionRuleDataSourcesPerformanceCounter]

One or more performance_counter blocks as defined below.

platform_telemetries Sequence[DataCollectionRuleDataSourcesPlatformTelemetry]

One or more platform_telemetry blocks as defined below.

prometheus_forwarders Sequence[DataCollectionRuleDataSourcesPrometheusForwarder]

One or more prometheus_forwarder blocks as defined below.

syslogs Sequence[DataCollectionRuleDataSourcesSyslog]

One or more syslog blocks as defined below.

windows_event_logs Sequence[DataCollectionRuleDataSourcesWindowsEventLog]

One or more windows_event_log blocks as defined below.

windows_firewall_logs Sequence[DataCollectionRuleDataSourcesWindowsFirewallLog]

One or more windows_firewall_log blocks as defined below.

dataImport Property Map

A data_import block as defined above.

extensions List<Property Map>

One or more extension blocks as defined below.

iisLogs List<Property Map>

One or more iis_log blocks as defined below.

logFiles List<Property Map>

One or more log_file blocks as defined below.

performanceCounters List<Property Map>

One or more performance_counter blocks as defined below.

platformTelemetries List<Property Map>

One or more platform_telemetry blocks as defined below.

prometheusForwarders List<Property Map>

One or more prometheus_forwarder blocks as defined below.

syslogs List<Property Map>

One or more syslog blocks as defined below.

windowsEventLogs List<Property Map>

One or more windows_event_log blocks as defined below.

windowsFirewallLogs List<Property Map>

One or more windows_firewall_log blocks as defined below.

DataCollectionRuleDataSourcesDataImport

eventHubDataSources List<Property Map>

An event_hub_data_source block as defined below.

DataCollectionRuleDataSourcesDataImportEventHubDataSource

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Stream string

The stream to collect from Event Hub. Possible value should be a custom stream name.

ConsumerGroup string

The Event Hub consumer group name.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Stream string

The stream to collect from Event Hub. Possible value should be a custom stream name.

ConsumerGroup string

The Event Hub consumer group name.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

stream String

The stream to collect from Event Hub. Possible value should be a custom stream name.

consumerGroup String

The Event Hub consumer group name.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

stream string

The stream to collect from Event Hub. Possible value should be a custom stream name.

consumerGroup string

The Event Hub consumer group name.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

stream str

The stream to collect from Event Hub. Possible value should be a custom stream name.

consumer_group str

The Event Hub consumer group name.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

stream String

The stream to collect from Event Hub. Possible value should be a custom stream name.

consumerGroup String

The Event Hub consumer group name.

DataCollectionRuleDataSourcesExtension

ExtensionName string

The name of the VM extension.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.

ExtensionJson string

A JSON String which specifies the extension setting.

InputDataSources List<string>

Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

ExtensionName string

The name of the VM extension.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.

ExtensionJson string

A JSON String which specifies the extension setting.

InputDataSources []string

Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

extensionName String

The name of the VM extension.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.

extensionJson String

A JSON String which specifies the extension setting.

inputDataSources List<String>

Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

extensionName string

The name of the VM extension.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.

extensionJson string

A JSON String which specifies the extension setting.

inputDataSources string[]

Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

extension_name str

The name of the VM extension.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.

extension_json str

A JSON String which specifies the extension setting.

input_data_sources Sequence[str]

Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

extensionName String

The name of the VM extension.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.

extensionJson String

A JSON String which specifies the extension setting.

inputDataSources List<String>

Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

DataCollectionRuleDataSourcesIisLog

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.

LogDirectories List<string>

Specifies a list of absolute paths where the log files are located.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.

LogDirectories []string

Specifies a list of absolute paths where the log files are located.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.

logDirectories List<String>

Specifies a list of absolute paths where the log files are located.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.

logDirectories string[]

Specifies a list of absolute paths where the log files are located.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.

log_directories Sequence[str]

Specifies a list of absolute paths where the log files are located.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.

logDirectories List<String>

Specifies a list of absolute paths where the log files are located.

DataCollectionRuleDataSourcesLogFile

FilePatterns List<string>

Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.

Format string

The data format of the log files. possible value is text.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.

Settings DataCollectionRuleDataSourcesLogFileSettings

A settings block as defined below.

FilePatterns []string

Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.

Format string

The data format of the log files. possible value is text.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.

Settings DataCollectionRuleDataSourcesLogFileSettings

A settings block as defined below.

filePatterns List<String>

Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.

format String

The data format of the log files. possible value is text.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.

settings DataCollectionRuleDataSourcesLogFileSettings

A settings block as defined below.

filePatterns string[]

Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.

format string

The data format of the log files. possible value is text.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.

settings DataCollectionRuleDataSourcesLogFileSettings

A settings block as defined below.

file_patterns Sequence[str]

Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.

format str

The data format of the log files. possible value is text.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.

settings DataCollectionRuleDataSourcesLogFileSettings

A settings block as defined below.

filePatterns List<String>

Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.

format String

The data format of the log files. possible value is text.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.

settings Property Map

A settings block as defined below.

DataCollectionRuleDataSourcesLogFileSettings

text Property Map

A text block as defined below.

DataCollectionRuleDataSourcesLogFileSettingsText

RecordStartTimestampFormat string

The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

RecordStartTimestampFormat string

The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

recordStartTimestampFormat String

The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

recordStartTimestampFormat string

The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

record_start_timestamp_format str

The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

recordStartTimestampFormat String

The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

DataCollectionRuleDataSourcesPerformanceCounter

CounterSpecifiers List<string>

Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

SamplingFrequencyInSeconds int

The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 300 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

CounterSpecifiers []string

Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

SamplingFrequencyInSeconds int

The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 300 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

counterSpecifiers List<String>

Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

samplingFrequencyInSeconds Integer

The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 300 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

counterSpecifiers string[]

Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

samplingFrequencyInSeconds number

The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 300 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

counter_specifiers Sequence[str]

Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

sampling_frequency_in_seconds int

The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 300 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

counterSpecifiers List<String>

Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

samplingFrequencyInSeconds Number

The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 300 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

DataCollectionRuleDataSourcesPlatformTelemetry

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

DataCollectionRuleDataSourcesPrometheusForwarder

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.

LabelIncludeFilters List<DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter>

One or more label_include_filter blocks as defined above.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.

LabelIncludeFilters []DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter

One or more label_include_filter blocks as defined above.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.

labelIncludeFilters List<DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter>

One or more label_include_filter blocks as defined above.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.

labelIncludeFilters DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter[]

One or more label_include_filter blocks as defined above.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.

label_include_filters Sequence[DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter]

One or more label_include_filter blocks as defined above.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.

labelIncludeFilters List<Property Map>

One or more label_include_filter blocks as defined above.

DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter

Label string

The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.

Value string

The value of the filter.

Label string

The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.

Value string

The value of the filter.

label String

The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.

value String

The value of the filter.

label string

The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.

value string

The value of the filter.

label str

The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.

value str

The value of the filter.

label String

The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.

value String

The value of the filter.

DataCollectionRuleDataSourcesSyslog

FacilityNames List<string>

Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are auth, authpriv, cron, daemon, kern, lpr, mail, mark, news, syslog, user, uucp, local0, local1, local2, local3, local4, local5, local6, local7,and *.

LogLevels List<string>

Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

FacilityNames []string

Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are auth, authpriv, cron, daemon, kern, lpr, mail, mark, news, syslog, user, uucp, local0, local1, local2, local3, local4, local5, local6, local7,and *.

LogLevels []string

Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

facilityNames List<String>

Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are auth, authpriv, cron, daemon, kern, lpr, mail, mark, news, syslog, user, uucp, local0, local1, local2, local3, local4, local5, local6, local7,and *.

logLevels List<String>

Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

facilityNames string[]

Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are auth, authpriv, cron, daemon, kern, lpr, mail, mark, news, syslog, user, uucp, local0, local1, local2, local3, local4, local5, local6, local7,and *.

logLevels string[]

Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

facility_names Sequence[str]

Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are auth, authpriv, cron, daemon, kern, lpr, mail, mark, news, syslog, user, uucp, local0, local1, local2, local3, local4, local5, local6, local7,and *.

log_levels Sequence[str]

Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

facilityNames List<String>

Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are auth, authpriv, cron, daemon, kern, lpr, mail, mark, news, syslog, user, uucp, local0, local1, local2, local3, local4, local5, local6, local7,and *.

logLevels List<String>

Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

DataCollectionRuleDataSourcesWindowsEventLog

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.

XPathQueries List<string>

Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.

XPathQueries []string

Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.

xPathQueries List<String>

Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.

xPathQueries string[]

Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.

x_path_queries Sequence[str]

Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.

xPathQueries List<String>

Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

DataCollectionRuleDataSourcesWindowsFirewallLog

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams List<string>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

Name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

Streams []string

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

name string

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams string[]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

name str

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams Sequence[str]

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

name String

The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.

streams List<String>

Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

DataCollectionRuleDestinations

AzureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics

A azure_monitor_metrics block as defined above.

EventHub DataCollectionRuleDestinationsEventHub

One or more event_hub blocks as defined below.

EventHubDirect DataCollectionRuleDestinationsEventHubDirect

One or more event_hub blocks as defined below.

LogAnalytics List<DataCollectionRuleDestinationsLogAnalytic>

One or more log_analytics blocks as defined below.

MonitorAccounts List<DataCollectionRuleDestinationsMonitorAccount>

One or more monitor_account blocks as defined below.

StorageBlobDirects List<DataCollectionRuleDestinationsStorageBlobDirect>

One or more storage_blob_direct blocks as defined below.

StorageBlobs List<DataCollectionRuleDestinationsStorageBlob>

One or more storage_blob blocks as defined below.

StorageTableDirects List<DataCollectionRuleDestinationsStorageTableDirect>

One or more storage_table_direct blocks as defined below.

AzureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics

A azure_monitor_metrics block as defined above.

EventHub DataCollectionRuleDestinationsEventHub

One or more event_hub blocks as defined below.

EventHubDirect DataCollectionRuleDestinationsEventHubDirect

One or more event_hub blocks as defined below.

LogAnalytics []DataCollectionRuleDestinationsLogAnalytic

One or more log_analytics blocks as defined below.

MonitorAccounts []DataCollectionRuleDestinationsMonitorAccount

One or more monitor_account blocks as defined below.

StorageBlobDirects []DataCollectionRuleDestinationsStorageBlobDirect

One or more storage_blob_direct blocks as defined below.

StorageBlobs []DataCollectionRuleDestinationsStorageBlob

One or more storage_blob blocks as defined below.

StorageTableDirects []DataCollectionRuleDestinationsStorageTableDirect

One or more storage_table_direct blocks as defined below.

azureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics

A azure_monitor_metrics block as defined above.

eventHub DataCollectionRuleDestinationsEventHub

One or more event_hub blocks as defined below.

eventHubDirect DataCollectionRuleDestinationsEventHubDirect

One or more event_hub blocks as defined below.

logAnalytics List<DataCollectionRuleDestinationsLogAnalytic>

One or more log_analytics blocks as defined below.

monitorAccounts List<DataCollectionRuleDestinationsMonitorAccount>

One or more monitor_account blocks as defined below.

storageBlobDirects List<DataCollectionRuleDestinationsStorageBlobDirect>

One or more storage_blob_direct blocks as defined below.

storageBlobs List<DataCollectionRuleDestinationsStorageBlob>

One or more storage_blob blocks as defined below.

storageTableDirects List<DataCollectionRuleDestinationsStorageTableDirect>

One or more storage_table_direct blocks as defined below.

azureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics

A azure_monitor_metrics block as defined above.

eventHub DataCollectionRuleDestinationsEventHub

One or more event_hub blocks as defined below.

eventHubDirect DataCollectionRuleDestinationsEventHubDirect

One or more event_hub blocks as defined below.

logAnalytics DataCollectionRuleDestinationsLogAnalytic[]

One or more log_analytics blocks as defined below.

monitorAccounts DataCollectionRuleDestinationsMonitorAccount[]

One or more monitor_account blocks as defined below.

storageBlobDirects DataCollectionRuleDestinationsStorageBlobDirect[]

One or more storage_blob_direct blocks as defined below.

storageBlobs DataCollectionRuleDestinationsStorageBlob[]

One or more storage_blob blocks as defined below.

storageTableDirects DataCollectionRuleDestinationsStorageTableDirect[]

One or more storage_table_direct blocks as defined below.

azure_monitor_metrics DataCollectionRuleDestinationsAzureMonitorMetrics

A azure_monitor_metrics block as defined above.

event_hub DataCollectionRuleDestinationsEventHub

One or more event_hub blocks as defined below.

event_hub_direct DataCollectionRuleDestinationsEventHubDirect

One or more event_hub blocks as defined below.

log_analytics Sequence[DataCollectionRuleDestinationsLogAnalytic]

One or more log_analytics blocks as defined below.

monitor_accounts Sequence[DataCollectionRuleDestinationsMonitorAccount]

One or more monitor_account blocks as defined below.

storage_blob_directs Sequence[DataCollectionRuleDestinationsStorageBlobDirect]

One or more storage_blob_direct blocks as defined below.

storage_blobs Sequence[DataCollectionRuleDestinationsStorageBlob]

One or more storage_blob blocks as defined below.

storage_table_directs Sequence[DataCollectionRuleDestinationsStorageTableDirect]

One or more storage_table_direct blocks as defined below.

azureMonitorMetrics Property Map

A azure_monitor_metrics block as defined above.

eventHub Property Map

One or more event_hub blocks as defined below.

eventHubDirect Property Map

One or more event_hub blocks as defined below.

logAnalytics List<Property Map>

One or more log_analytics blocks as defined below.

monitorAccounts List<Property Map>

One or more monitor_account blocks as defined below.

storageBlobDirects List<Property Map>

One or more storage_blob_direct blocks as defined below.

storageBlobs List<Property Map>

One or more storage_blob blocks as defined below.

storageTableDirects List<Property Map>

One or more storage_table_direct blocks as defined below.

DataCollectionRuleDestinationsAzureMonitorMetrics

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

DataCollectionRuleDestinationsEventHub

EventHubId string

The resource ID of the Event Hub.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

EventHubId string

The resource ID of the Event Hub.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

eventHubId String

The resource ID of the Event Hub.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

eventHubId string

The resource ID of the Event Hub.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

event_hub_id str

The resource ID of the Event Hub.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

eventHubId String

The resource ID of the Event Hub.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

DataCollectionRuleDestinationsEventHubDirect

EventHubId string

The resource ID of the Event Hub.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

EventHubId string

The resource ID of the Event Hub.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

eventHubId String

The resource ID of the Event Hub.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

eventHubId string

The resource ID of the Event Hub.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

event_hub_id str

The resource ID of the Event Hub.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

eventHubId String

The resource ID of the Event Hub.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

DataCollectionRuleDestinationsLogAnalytic

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

WorkspaceResourceId string

The ID of a Log Analytic Workspace resource.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

WorkspaceResourceId string

The ID of a Log Analytic Workspace resource.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

workspaceResourceId String

The ID of a Log Analytic Workspace resource.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

workspaceResourceId string

The ID of a Log Analytic Workspace resource.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

workspace_resource_id str

The ID of a Log Analytic Workspace resource.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

workspaceResourceId String

The ID of a Log Analytic Workspace resource.

DataCollectionRuleDestinationsMonitorAccount

MonitorAccountId string

The resource ID of the Monitor Account.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

MonitorAccountId string

The resource ID of the Monitor Account.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

monitorAccountId String

The resource ID of the Monitor Account.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

monitorAccountId string

The resource ID of the Monitor Account.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

monitor_account_id str

The resource ID of the Monitor Account.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

monitorAccountId String

The resource ID of the Monitor Account.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

DataCollectionRuleDestinationsStorageBlob

ContainerName string

The Storage Container name.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

StorageAccountId string

The resource ID of the Storage Account.

ContainerName string

The Storage Container name.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

StorageAccountId string

The resource ID of the Storage Account.

containerName String

The Storage Container name.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId String

The resource ID of the Storage Account.

containerName string

The Storage Container name.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId string

The resource ID of the Storage Account.

container_name str

The Storage Container name.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storage_account_id str

The resource ID of the Storage Account.

containerName String

The Storage Container name.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId String

The resource ID of the Storage Account.

DataCollectionRuleDestinationsStorageBlobDirect

ContainerName string

The Storage Container name.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

StorageAccountId string

The resource ID of the Storage Account.

ContainerName string

The Storage Container name.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

StorageAccountId string

The resource ID of the Storage Account.

containerName String

The Storage Container name.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId String

The resource ID of the Storage Account.

containerName string

The Storage Container name.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId string

The resource ID of the Storage Account.

container_name str

The Storage Container name.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storage_account_id str

The resource ID of the Storage Account.

containerName String

The Storage Container name.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId String

The resource ID of the Storage Account.

DataCollectionRuleDestinationsStorageTableDirect

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

StorageAccountId string

The resource ID of the Storage Account.

TableName string

The Storage Table name.

Name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

StorageAccountId string

The resource ID of the Storage Account.

TableName string

The Storage Table name.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId String

The resource ID of the Storage Account.

tableName String

The Storage Table name.

name string

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId string

The resource ID of the Storage Account.

tableName string

The Storage Table name.

name str

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storage_account_id str

The resource ID of the Storage Account.

table_name str

The Storage Table name.

name String

The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

storageAccountId String

The resource ID of the Storage Account.

tableName String

The Storage Table name.

DataCollectionRuleIdentity

Type string

Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.

IdentityIds List<string>

A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

PrincipalId string

The Principal ID associated with this Managed Service Identity.

TenantId string

The Tenant ID associated with this Managed Service Identity.

Type string

Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.

IdentityIds []string

A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

PrincipalId string

The Principal ID associated with this Managed Service Identity.

TenantId string

The Tenant ID associated with this Managed Service Identity.

type String

Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.

identityIds List<String>

A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

principalId String

The Principal ID associated with this Managed Service Identity.

tenantId String

The Tenant ID associated with this Managed Service Identity.

type string

Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.

identityIds string[]

A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

principalId string

The Principal ID associated with this Managed Service Identity.

tenantId string

The Tenant ID associated with this Managed Service Identity.

type str

Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.

identity_ids Sequence[str]

A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

principal_id str

The Principal ID associated with this Managed Service Identity.

tenant_id str

The Tenant ID associated with this Managed Service Identity.

type String

Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.

identityIds List<String>

A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

principalId String

The Principal ID associated with this Managed Service Identity.

tenantId String

The Tenant ID associated with this Managed Service Identity.

DataCollectionRuleStreamDeclaration

Columns List<DataCollectionRuleStreamDeclarationColumn>

One or more column blocks as defined above.

StreamName string

The name of the custom stream. This name should be unique across all stream_declaration blocks.

Columns []DataCollectionRuleStreamDeclarationColumn

One or more column blocks as defined above.

StreamName string

The name of the custom stream. This name should be unique across all stream_declaration blocks.

columns List<DataCollectionRuleStreamDeclarationColumn>

One or more column blocks as defined above.

streamName String

The name of the custom stream. This name should be unique across all stream_declaration blocks.

columns DataCollectionRuleStreamDeclarationColumn[]

One or more column blocks as defined above.

streamName string

The name of the custom stream. This name should be unique across all stream_declaration blocks.

columns Sequence[DataCollectionRuleStreamDeclarationColumn]

One or more column blocks as defined above.

stream_name str

The name of the custom stream. This name should be unique across all stream_declaration blocks.

columns List<Property Map>

One or more column blocks as defined above.

streamName String

The name of the custom stream. This name should be unique across all stream_declaration blocks.

DataCollectionRuleStreamDeclarationColumn

Name string

The name of the column.

Type string

The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

Name string

The name of the column.

Type string

The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

name String

The name of the column.

type String

The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

name string

The name of the column.

type string

The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

name str

The name of the column.

type str

The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

name String

The name of the column.

type String

The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

Import

Data Collection Rules can be imported using the resource id, e.g.

 $ pulumi import azure:monitoring/dataCollectionRule:DataCollectionRule example /subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/group1/providers/Microsoft.Insights/dataCollectionRules/rule1

Package Details

Repository
Azure Classic pulumi/pulumi-azure
License
Apache-2.0
Notes

This Pulumi package is based on the azurerm Terraform Provider.