Skip to content

Commit 8ea97e1

Browse files
Merge pull request #221829 from yossi-y/main
Updated export list
2 parents f61a389 + fd49564 commit 8ea97e1

File tree

1 file changed

+86
-6
lines changed

1 file changed

+86
-6
lines changed

articles/azure-monitor/logs/logs-data-export.md

Lines changed: 86 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -642,6 +642,7 @@ All data from the table will be exported unless limitations are specified. This
642642
|:---|:---|
643643
| AACAudit | |
644644
| AACHttpRequest | |
645+
| AADB2CRequestLogs | |
645646
| AADDomainServicesAccountLogon | |
646647
| AADDomainServicesAccountManagement | |
647648
| AADDomainServicesDirectoryServiceAccess | |
@@ -657,23 +658,35 @@ All data from the table will be exported unless limitations are specified. This
657658
| AADServicePrincipalSignInLogs | |
658659
| AADUserRiskEvents | |
659660
| ABSBotRequests | |
661+
| ACICollaborationAudit | |
660662
| ACRConnectedClientList | |
661663
| ACSAuthIncomingOperations | |
662664
| ACSBillingUsage | |
665+
| ACSCallAutomationIncomingOperations | |
663666
| ACSCallDiagnostics | |
667+
| ACSCallRecordingSummary | |
664668
| ACSCallSummary | |
665669
| ACSChatIncomingOperations | |
670+
| ACSEmailSendMailOperational | |
671+
| ACSEmailStatusUpdateOperational | |
672+
| ACSEmailUserEngagementOperational | |
673+
| ACSNetworkTraversalDiagnostics | |
666674
| ACSNetworkTraversalIncomingOperations | |
675+
| ACSRoomsIncomingOperations | |
667676
| ACSSMSIncomingOperations | |
668677
| ADAssessmentRecommendation | |
669678
| ADFActivityRun | |
679+
| ADFAirflowTaskLogs | |
680+
| ADFAirflowWorkerLogs | |
670681
| ADFPipelineRun | |
671682
| ADFSSignInLogs | |
672683
| ADFTriggerRun | |
673684
| ADPAudit | |
685+
| ADPDiagnostics | |
674686
| ADPRequests | |
675687
| ADReplicationResult | |
676688
| ADSecurityAssessmentRecommendation | |
689+
| ADTDataHistoryOperation | |
677690
| ADTDigitalTwinsOperation | |
678691
| ADTEventRoutesOperation | |
679692
| ADTModelsOperation | |
@@ -684,22 +697,37 @@ All data from the table will be exported unless limitations are specified. This
684697
| AegDeliveryFailureLogs | |
685698
| AegPublishFailureLogs | |
686699
| AEWAuditLogs | |
700+
| AEWComputePipelinesLogs | |
687701
| AgriFoodApplicationAuditLogs | |
688702
| AgriFoodFarmManagementLogs | |
689703
| AgriFoodFarmOperationLogs | |
704+
| AgriFoodInsightLogs | |
690705
| AgriFoodJobProcessedLogs | |
706+
| AgriFoodModelInferenceLogs | |
707+
| AgriFoodProviderAuthLogs | |
708+
| AgriFoodSatelliteLogs | |
709+
| AgriFoodSensorManagementLogs | |
710+
| AgriFoodWeatherLogs | |
691711
| AGSGrafanaLoginEvents | |
712+
| AHDSMedTechDiagnosticLogs | |
692713
| Alert | Partial support – Data ingestion for Zabbix alerts isn't supported. |
693714
| AlertEvidence | |
694715
| AlertInfo | |
695716
| AmlOnlineEndpointConsoleLog | |
717+
| AmlOnlineEndpointEventLog | |
718+
| AmlOnlineEndpointTrafficLog | |
719+
| AMSKeyDeliveryRequests | |
720+
| AMSLiveEventOperations | |
721+
| AMSMediaAccountHealth | |
722+
| AMSStreamingEndpointRequests | |
723+
| ANFFileAccess | |
696724
| ApiManagementGatewayLogs | |
697725
| AppAvailabilityResults | |
698726
| AppBrowserTimings | |
699727
| AppCenterError | |
728+
| AppDependencies | |
700729
| AppEvents | |
701730
| AppExceptions | |
702-
| AppDependencies | |
703731
| AppMetrics | |
704732
| AppPageViews | |
705733
| AppPerformanceCounters | |
@@ -711,21 +739,39 @@ All data from the table will be exported unless limitations are specified. This
711739
| AppServiceFileAuditLogs | |
712740
| AppServiceHTTPLogs | |
713741
| AppServicePlatformLogs | |
742+
| AppServiceServerlessSecurityPluginData | |
714743
| AppSystemEvents | |
715744
| AppTraces | |
716745
| ASimDnsActivityLogs | |
746+
| ASimNetworkSessionLogs | |
717747
| ATCExpressRouteCircuitIpfix | |
718748
| AuditLogs | |
719749
| AutoscaleEvaluationsLog | |
720750
| AutoscaleScaleActionsLog | |
751+
| AVSSyslog | |
721752
| AWSCloudTrail | |
722753
| AWSGuardDuty | |
723754
| AWSVPCFlow | |
755+
| AZFWApplicationRule | |
756+
| AZFWApplicationRuleAggregation | |
757+
| AZFWDnsQuery | |
758+
| AZFWFatFlow | |
759+
| AZFWFlowTrace | |
760+
| AZFWIdpsSignature | |
761+
| AZFWInternalFqdnResolutionFailure | |
762+
| AZFWNatRule | |
763+
| AZFWNatRuleAggregation | |
764+
| AZFWNetworkRule | |
765+
| AZFWNetworkRuleAggregation | |
766+
| AZFWThreatIntel | |
724767
| AzureAssessmentRecommendation | |
725768
| AzureAttestationDiagnostics | |
726769
| AzureDevOpsAuditing | |
770+
| AzureLoadTestingOperation | |
727771
| BehaviorAnalytics | |
772+
| CassandraAudit | |
728773
| CassandraLogs | |
774+
| CCFApplicationLogs | |
729775
| CDBCassandraRequests | |
730776
| CDBControlPlaneRequests | |
731777
| CDBDataPlaneRequests | |
@@ -739,7 +785,10 @@ All data from the table will be exported unless limitations are specified. This
739785
| CloudAppEvents | |
740786
| CommonSecurityLog | |
741787
| ComputerGroup | |
788+
| ConfidentialWatchlist | |
742789
| ConfigurationData | Partial support – some of the data is ingested through internal services that aren't supported in export. This portion is missing in export currently. |
790+
| ContainerAppConsoleLogs | |
791+
| ContainerAppSystemLogs | |
743792
| ContainerImageInventory | |
744793
| ContainerInventory | |
745794
| ContainerLog | |
@@ -757,12 +806,17 @@ All data from the table will be exported unless limitations are specified. This
757806
| DatabricksSQLPermissions | |
758807
| DatabricksSSH | |
759808
| DatabricksWorkspace | |
809+
| DevCenterDiagnosticLogs | |
810+
| DeviceTvmSecureConfigurationAssessment | |
811+
| DeviceTvmSoftwareInventory | |
812+
| DeviceTvmSoftwareVulnerabilities | |
760813
| DnsEvents | |
761814
| DnsInventory | |
762815
| DSMAzureBlobStorageLogs | |
763816
| DSMDataClassificationLogs | |
764817
| DSMDataLabelingLogs | |
765818
| Dynamics365Activity | |
819+
| DynamicSummary | |
766820
| EmailAttachmentInfo | |
767821
| EmailEvents | |
768822
| EmailPostDeliveryEvents | |
@@ -771,8 +825,10 @@ All data from the table will be exported unless limitations are specified. This
771825
| ExchangeAssessmentRecommendation | |
772826
| FailedIngestion | |
773827
| FunctionAppLogs | |
828+
| GCPAuditLogs | |
774829
| HDInsightAmbariClusterAlerts | |
775830
| HDInsightAmbariSystemMetrics | |
831+
| HDInsightGatewayAuditLogs | |
776832
| HDInsightHadoopAndYarnLogs | |
777833
| HDInsightHadoopAndYarnMetrics | |
778834
| HDInsightHBaseLogs | |
@@ -781,20 +837,26 @@ All data from the table will be exported unless limitations are specified. This
781837
| HDInsightHiveAndLLAPMetrics | |
782838
| HDInsightHiveQueryAppStats | |
783839
| HDInsightHiveTezAppStats | |
840+
| HDInsightJupyterNotebookEvents | |
784841
| HDInsightKafkaLogs | |
785842
| HDInsightKafkaMetrics | |
786843
| HDInsightOozieLogs | |
844+
| HDInsightRangerAuditLogs | |
787845
| HDInsightSecurityLogs | |
788846
| HDInsightSparkApplicationEvents | |
789847
| HDInsightSparkBlockManagerEvents | |
790848
| HDInsightSparkEnvironmentEvents | |
791849
| HDInsightSparkExecutorEvents | |
850+
| HDInsightSparkExtraEvents | |
792851
| HDInsightSparkJobEvents | |
793852
| HDInsightSparkLogs | |
794853
| HDInsightSparkSQLExecutionEvents | |
795854
| HDInsightSparkStageEvents | |
796855
| HDInsightSparkStageTaskAccumulables | |
797856
| HDInsightSparkTaskEvents | |
857+
| HDInsightStormLogs | |
858+
| HDInsightStormMetrics | |
859+
| HDInsightStormTopologyMetrics | |
798860
| Heartbeat | |
799861
| HuntingBookmark | |
800862
| IdentityDirectoryEvents | |
@@ -812,24 +874,36 @@ All data from the table will be exported unless limitations are specified. This
812874
| KubeServices | |
813875
| LAQueryLogs | |
814876
| McasShadowItReporting | |
877+
| MCCEventLogs | |
815878
| MCVPAuditLogs | |
816879
| MCVPOperationLogs | |
817880
| MicrosoftAzureBastionAuditLogs | |
818881
| MicrosoftDataShareReceivedSnapshotLog | |
819882
| MicrosoftDataShareSentSnapshotLog | |
820883
| MicrosoftHealthcareApisAuditLogs | |
884+
| MicrosoftPurviewInformationProtection | |
885+
| NetworkAccessTraffic | |
886+
| NSPAccessLogs | |
821887
| NWConnectionMonitorPathResult | |
822888
| NWConnectionMonitorTestResult | |
823-
| OfficeActivity | Partial support in government clouds – some of the data to ingested via webhooks from O365 into LA. This portion is missing in export currently. |
889+
| OEPAirFlowTask | |
890+
| OEPElasticOperator | |
891+
| OEPElasticsearch | |
892+
| OfficeActivity | |
824893
| OLPSupplyChainEntityOperations | |
825894
| OLPSupplyChainEvents | |
826895
| Operation | Partial support – some of the data is ingested through internal services that aren't supported in export. This portion is missing in export currently. |
827896
| Perf | Partial support – only windows perf data is currently supported. The Linux perf data is missing in export currently. |
897+
| PFTitleAuditLogs | |
828898
| PowerBIActivity | |
899+
| PowerBIAuditTenant | |
900+
| PowerBIDatasetsTenant | |
829901
| PowerBIDatasetsWorkspace | |
902+
| PowerBIReportUsageWorkspace | |
830903
| ProjectActivity | |
831904
| PurviewDataSensitivityLogs | |
832905
| PurviewScanStatusLogs | |
906+
| PurviewSecurityLogs | |
833907
| ResourceManagementPublicAccessLogs | |
834908
| SCCMAssessmentRecommendation | |
835909
| SCOMAssessmentRecommendation | |
@@ -852,14 +926,18 @@ All data from the table will be exported unless limitations are specified. This
852926
| SPAssessmentRecommendation | |
853927
| SQLAssessmentRecommendation | |
854928
| SQLSecurityAuditEvents | |
929+
| StorageAntimalwareScanResults | |
855930
| StorageCacheOperationEvents | |
931+
| StorageCacheUpgradeEvents | |
932+
| StorageCacheWarningEvents | |
856933
| SucceededIngestion | |
857934
| SynapseBigDataPoolApplicationsEnded | |
858935
| SynapseBuiltinSqlPoolRequestsEnded | |
859936
| SynapseGatewayApiRequests | |
860937
| SynapseIntegrationActivityRuns | |
861938
| SynapseIntegrationPipelineRuns | |
862939
| SynapseIntegrationTriggerRuns | |
940+
| SynapseLinkEvent | |
863941
| SynapseRbacOperations | |
864942
| SynapseScopePoolScopeJobsEnded | |
865943
| SynapseScopePoolScopeJobsStateChange | |
@@ -871,16 +949,18 @@ All data from the table will be exported unless limitations are specified. This
871949
| Syslog | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported in export. Data arriving via Diagnostics extension agent is collected through storage while this path isn’t supported in export. |
872950
| ThreatIntelligenceIndicator | |
873951
| UCClient | |
874-
| UCClientUpdateStatus | |
875-
| UCDeviceAlert | |
876-
| UCServiceUpdateStatus | |
877-
| UCUpdateAlert | |
952+
| UCDOAggregatedStatus | |
953+
| UCDOStatus | |
878954
| Update | Partial support – some of the data is ingested through internal services that aren't supported in export. This portion is missing in export currently. |
879955
| UpdateRunProgress | |
880956
| UpdateSummary | |
957+
| UrlClickEvents | |
881958
| Usage | |
882959
| UserAccessAnalytics | |
883960
| UserPeerAnalytics | |
961+
| VIAudit | |
962+
| VIIndexing | |
963+
| W3CIISLog | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported in export. Data arriving via Diagnostics extension agent is collected through storage while this path isn’t supported in export. |
884964
| Watchlist | |
885965
| WindowsEvent | |
886966
| WindowsFirewall | |

0 commit comments

Comments
 (0)