Skip to content

Commit 2812e71

Browse files
Update azure-monitor-agent-data-field-differences.md
1 parent 8cd6714 commit 2812e71

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

articles/azure-monitor/agents/azure-monitor-agent-data-field-differences.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,7 @@ This table collects log data from the Internet Information Service on Window sys
2828

2929
### Windows event table
3030
This table collects Events from the Windows Event log. There are two other tables that are used to store Windows events, the SecurityEvent and Event tables.
31+
3132
|LAW Field | Difference | Reason| Additional Information |
3233
|---|---|---|---|
3334
| UserName | MMA enriches the event with the username prior to sending the event for ingestion. AMA do not do the same enrichment. | The AMA enrichment is not yet implemented. | AMA principles dictate that the event data should remain unchanged by default. Adding and enriched field adds possible processing errors and additional cost for storage. In this case, the customer demand for the field is very high and work is underway to add the username. |

0 commit comments

Comments
 (0)