Skip to content

Commit 5424f5e

Browse files
committed
added supported tables
1 parent 405194d commit 5424f5e

File tree

1 file changed

+70
-2
lines changed

1 file changed

+70
-2
lines changed

articles/azure-monitor/logs/logs-data-export.md

Lines changed: 70 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -649,6 +649,7 @@ If the data export rule includes an unsupported table, the configuration will su
649649
| AACAudit | |
650650
| AACHttpRequest | |
651651
| AADB2CRequestLogs | |
652+
| AADCustomSecurityAttributeAuditLogs | |
652653
| AADDomainServicesAccountLogon | |
653654
| AADDomainServicesAccountManagement | |
654655
| AADDomainServicesDirectoryServiceAccess | |
@@ -672,6 +673,9 @@ If the data export rule includes an unsupported table, the configuration will su
672673
| ACSBillingUsage | |
673674
| ACSCallAutomationIncomingOperations | |
674675
| ACSCallAutomationMediaSummary | |
676+
| ACSCallClientMediaStatsTimeSeries | |
677+
| ACSCallClientOperations | |
678+
| ACSCallClosedCaptionsSummary | |
675679
| ACSCallDiagnostics | |
676680
| ACSCallRecordingIncomingOperations | |
677681
| ACSCallRecordingSummary | |
@@ -681,6 +685,7 @@ If the data export rule includes an unsupported table, the configuration will su
681685
| ACSEmailSendMailOperational | |
682686
| ACSEmailStatusUpdateOperational | |
683687
| ACSEmailUserEngagementOperational | |
688+
| ACSJobRouterIncomingOperations | |
684689
| ACSNetworkTraversalDiagnostics | |
685690
| ACSNetworkTraversalIncomingOperations | |
686691
| ACSRoomsIncomingOperations | |
@@ -725,8 +730,11 @@ If the data export rule includes an unsupported table, the configuration will su
725730
| AegDataPlaneRequests | |
726731
| AegDeliveryFailureLogs | |
727732
| AegPublishFailureLogs | |
733+
| AEWAssignmentBlobLogs | |
728734
| AEWAuditLogs | |
729735
| AEWComputePipelinesLogs | |
736+
| AFSAuditLogs | |
737+
| AGCAccessLogs | |
730738
| AgriFoodApplicationAuditLogs | |
731739
| AgriFoodFarmManagementLogs | |
732740
| AgriFoodFarmOperationLogs | |
@@ -738,6 +746,9 @@ If the data export rule includes an unsupported table, the configuration will su
738746
| AgriFoodSensorManagementLogs | |
739747
| AgriFoodWeatherLogs | |
740748
| AGSGrafanaLoginEvents | |
749+
| AGWAccessLogs | |
750+
| AGWFirewallLogs | |
751+
| AGWPerformanceLogs | |
741752
| AHDSDicomAuditLogs | |
742753
| AHDSDicomDiagnosticLogs | |
743754
| AHDSMedTechDiagnosticLogs | |
@@ -772,6 +783,9 @@ If the data export rule includes an unsupported table, the configuration will su
772783
| AMSStreamingEndpointRequests | |
773784
| ANFFileAccess | |
774785
| Anomalies | |
786+
| AOIDatabaseQuery | |
787+
| AOIDigestion | |
788+
| AOIStorage | |
775789
| ApiManagementGatewayLogs | |
776790
| AppAvailabilityResults | |
777791
| AppBrowserTimings | |
@@ -790,6 +804,7 @@ If the data export rule includes an unsupported table, the configuration will su
790804
| AppServiceAntivirusScanAuditLogs | |
791805
| AppServiceAppLogs | |
792806
| AppServiceAuditLogs | |
807+
| AppServiceAuthenticationLogs | |
793808
| AppServiceConsoleLogs | |
794809
| AppServiceEnvironmentPlatformLogs | |
795810
| AppServiceFileAuditLogs | |
@@ -799,22 +814,31 @@ If the data export rule includes an unsupported table, the configuration will su
799814
| AppServiceServerlessSecurityPluginData | |
800815
| AppSystemEvents | |
801816
| AppTraces | |
817+
| ArcK8sAudit | |
818+
| ArcK8sAuditAdmin | |
819+
| ArcK8sControlPlane | |
802820
| ASCAuditLogs | |
803821
| ASCDeviceEvents | |
804822
| ASimAuditEventLogs | |
805823
| ASimAuthenticationEventLogs | |
824+
| ASimDhcpEventLogs | |
806825
| ASimDnsActivityLogs | |
807-
| ASimNetworkSessionLogs | |
826+
| ASimFileEventLogs | |
808827
| ASimNetworkSessionLogs | |
809828
| ASimProcessEventLogs | |
829+
| ASimRegistryEventLogs | |
830+
| ASimUserManagementActivityLogs | |
810831
| ASimWebSessionLogs | |
811832
| ASRJobs | |
812833
| ASRReplicatedItems | |
813834
| ATCExpressRouteCircuitIpfix | |
814835
| AuditLogs | |
815836
| AutoscaleEvaluationsLog | |
816837
| AutoscaleScaleActionsLog | |
838+
| AVNMConnectivityConfigurationChange | |
839+
| AVNMIPAMPoolAllocationChange | |
817840
| AVNMNetworkGroupMembershipChange | |
841+
| AVNMRuleCollectionChange | |
818842
| AVSSyslog | |
819843
| AWSCloudTrail | |
820844
| AWSCloudWatch | |
@@ -844,10 +868,14 @@ If the data export rule includes an unsupported table, the configuration will su
844868
| AZMSOperationalLogs | |
845869
| AZMSRunTimeAuditLogs | |
846870
| AZMSVnetConnectionEvents | |
871+
| AzureActivity | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
847872
| AzureAssessmentRecommendation | |
848873
| AzureAttestationDiagnostics | |
874+
| AzureBackupOperations | |
849875
| AzureDevOpsAuditing | |
876+
| AzureDiagnostics | |
850877
| AzureLoadTestingOperation | |
878+
| AzureMetricsV2 | |
851879
| BehaviorAnalytics | |
852880
| CassandraAudit | |
853881
| CassandraLogs | |
@@ -871,7 +899,9 @@ If the data export rule includes an unsupported table, the configuration will su
871899
| ConfigurationData | Partial support. Some of the data is ingested through internal services that aren't supported in export. Currently, this portion is missing in export. |
872900
| ContainerAppConsoleLogs | |
873901
| ContainerAppSystemLogs | |
902+
| ContainerEvent | |
874903
| ContainerImageInventory | |
904+
| ContainerInstanceLog | |
875905
| ContainerInventory | |
876906
| ContainerLog | |
877907
| ContainerLogV2 | |
@@ -908,8 +938,14 @@ If the data export rule includes an unsupported table, the configuration will su
908938
| DatabricksUnityCatalog | |
909939
| DatabricksWebTerminal | |
910940
| DatabricksWorkspace | |
941+
| DatabricksWorkspaceLogs | |
911942
| DataTransferOperations | |
943+
| DataverseActivity | |
944+
| DCRLogErrors | |
945+
| DCRLogTroubleshooting | |
946+
| DevCenterBillingEventLogs | |
912947
| DevCenterDiagnosticLogs | |
948+
| DevCenterResourceOperationLogs | |
913949
| DeviceEvents | |
914950
| DeviceFileCertificateInfo | |
915951
| DeviceFileEvents | |
@@ -927,23 +963,30 @@ If the data export rule includes an unsupported table, the configuration will su
927963
| DeviceTvmSoftwareVulnerabilitiesKB | |
928964
| DnsEvents | |
929965
| DnsInventory | |
966+
| DNSQueryLogs | |
930967
| DSMAzureBlobStorageLogs | |
931968
| DSMDataClassificationLogs | |
932969
| DSMDataLabelingLogs | |
933-
| DynamicEventCollection | |
934970
| Dynamics365Activity | |
935971
| DynamicSummary | |
972+
| EGNFailedMqttConnections | |
973+
| EGNFailedMqttPublishedMessages | |
974+
| EGNFailedMqttSubscriptions | |
975+
| EGNMqttDisconnections | |
976+
| EGNSuccessfulMqttConnections | |
936977
| EmailAttachmentInfo | |
937978
| EmailEvents | |
938979
| EmailPostDeliveryEvents | |
939980
| EmailUrlInfo | |
940981
| EnrichedMicrosoft365AuditLogs | |
982+
| ETWEvent | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
941983
| Event | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
942984
| ExchangeAssessmentRecommendation | |
943985
| ExchangeOnlineAssessmentRecommendation | |
944986
| FailedIngestion | |
945987
| FunctionAppLogs | |
946988
| GCPAuditLogs | |
989+
| GoogleCloudSCC | |
947990
| HDInsightAmbariClusterAlerts | |
948991
| HDInsightAmbariSystemMetrics | |
949992
| HDInsightGatewayAuditLogs | |
@@ -994,6 +1037,8 @@ If the data export rule includes an unsupported table, the configuration will su
9941037
| KubePVInventory | |
9951038
| KubeServices | |
9961039
| LAQueryLogs | |
1040+
| LASummaryLogs | |
1041+
| LinuxAuditLog | |
9971042
| LogicAppWorkflowRuntime | |
9981043
| McasShadowItReporting | |
9991044
| MCCEventLogs | |
@@ -1002,10 +1047,23 @@ If the data export rule includes an unsupported table, the configuration will su
10021047
| MicrosoftAzureBastionAuditLogs | |
10031048
| MicrosoftDataShareReceivedSnapshotLog | |
10041049
| MicrosoftDataShareSentSnapshotLog | |
1050+
| MicrosoftDataShareShareLog | |
10051051
| MicrosoftGraphActivityLogs | |
10061052
| MicrosoftHealthcareApisAuditLogs | |
10071053
| MicrosoftPurviewInformationProtection | |
1054+
| MNFDeviceUpdates | |
1055+
| MNFSystemStateMessageUpdates | |
1056+
| NCBMBreakGlassAuditLogs | |
1057+
| NCBMSecurityDefenderLogs | |
1058+
| NCBMSecurityLogs | |
1059+
| NCBMSystemLogs | |
1060+
| NCCKubernetesLogs | |
1061+
| NCCVMOrchestrationLogs | |
1062+
| NCSStorageAlerts | |
1063+
| NCSStorageLogs | |
10081064
| NetworkAccessTraffic | |
1065+
| NetworkMonitoring | |
1066+
| NGXOperationLogs | |
10091067
| NSPAccessLogs | |
10101068
| NTAIpDetails | |
10111069
| NTANetAnalytics | |
@@ -1031,19 +1089,22 @@ If the data export rule includes an unsupported table, the configuration will su
10311089
| PowerBIDatasetsTenant | |
10321090
| PowerBIDatasetsWorkspace | |
10331091
| PowerBIReportUsageWorkspace | |
1092+
| PowerPlatformAdminActivity | |
10341093
| PowerPlatformConnectorActivity | |
10351094
| PowerPlatformDlpActivity | |
10361095
| ProjectActivity | |
10371096
| PurviewDataSensitivityLogs | |
10381097
| PurviewScanStatusLogs | |
10391098
| PurviewSecurityLogs | |
10401099
| REDConnectionEvents | |
1100+
| RemoteNetworkHealthLogs | |
10411101
| ResourceManagementPublicAccessLogs | |
10421102
| SCCMAssessmentRecommendation | |
10431103
| SCOMAssessmentRecommendation | |
10441104
| SecureScoreControls | |
10451105
| SecureScores | |
10461106
| SecurityAlert | |
1107+
| SecurityAttackPathData | |
10471108
| SecurityBaseline | |
10481109
| SecurityBaselineSummary | |
10491110
| SecurityDetection | |
@@ -1055,6 +1116,10 @@ If the data export rule includes an unsupported table, the configuration will su
10551116
| SecurityRegulatoryCompliance | |
10561117
| SentinelAudit | |
10571118
| SentinelHealth | |
1119+
| ServiceFabricOperationalEvent | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
1120+
| ServiceFabricReliableActorEvent | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
1121+
| ServiceFabricReliableServiceEvent | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
1122+
| SfBAssessmentRecommendation | |
10581123
| SharePointOnlineAssessmentRecommendation | |
10591124
| SignalRServiceDiagnosticLogs | |
10601125
| SigninLogs | |
@@ -1109,8 +1174,10 @@ If the data export rule includes an unsupported table, the configuration will su
11091174
| Usage | |
11101175
| UserAccessAnalytics | |
11111176
| UserPeerAnalytics | |
1177+
| VCoreMongoRequests | |
11121178
| VIAudit | |
11131179
| VIIndexing | |
1180+
| VMConnection | Partial support. Some of the data is ingested through internal services that aren't supported in export. Currently, this portion is missing in export. |
11141181
| W3CIISLog | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
11151182
| WaaSDeploymentStatus | |
11161183
| WaaSInsiderStatus | |
@@ -1119,6 +1186,7 @@ If the data export rule includes an unsupported table, the configuration will su
11191186
| WebPubSubConnectivity | |
11201187
| WebPubSubHttpRequest | |
11211188
| WebPubSubMessaging | |
1189+
| Windows365AuditLogs | |
11221190
| WindowsClientAssessmentRecommendation | |
11231191
| WindowsEvent | |
11241192
| WindowsFirewall | |

0 commit comments

Comments
 (0)