Skip to content

Commit 9e1cef4

Browse files
Merge pull request #267162 from ivkhrul/ivankh-ingestion-table-list-update
updates to the list of tables allowing ingestion time transforms
2 parents 3e38e1f + ae31a7c commit 9e1cef4

File tree

2 files changed

+205
-153
lines changed

2 files changed

+205
-153
lines changed

articles/azure-monitor/logs/logs-ingestion-api-overview.md

Lines changed: 52 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,58 @@ Data sent to the ingestion API can be sent to the following tables:
2525
| Tables | Description |
2626
|:---|:---|
2727
| Custom tables | Any custom table that you create in your Log Analytics workspace. The target table must exist before you can send data to it. Custom tables must have the `_CL` suffix. |
28-
| Azure tables | The following Azure tables are currently supported. Other tables may be added to this list as support for them is implemented.<br><br>- [CommonSecurityLog](/azure/azure-monitor/reference/tables/commonsecuritylog)<br>- [SecurityEvents](/azure/azure-monitor/reference/tables/securityevent)<br>- [Syslog](/azure/azure-monitor/reference/tables/syslog)<br>- [WindowsEvents](/azure/azure-monitor/reference/tables/windowsevent)
28+
| Azure tables | The following Azure tables are currently supported. Other tables may be added to this list as support for them is implemented.<br><br>
29+
- [ADAssessmentRecommendation](/azure/azure-monitor/reference/tables/adassessmentrecommendation)<br>
30+
- [ADSecurityAssessmentRecommendation](/azure/azure-monitor/reference/tables/adsecurityassessmentrecommendation)<br>
31+
- [ASimAuditEventLogs](/azure/azure-monitor/reference/tables/asimauditeventlogs)<br>
32+
- [ASimAuthenticationEventLogs](/azure/azure-monitor/reference/tables/asimauthenticationeventlogs)<br>
33+
- [ASimDhcpEventLogs](/azure/azure-monitor/reference/tables/asimdhcpeventlogs)<br>
34+
- [ASimDnsActivityLogs](/azure/azure-monitor/reference/tables/asimdnsactivitylogs)<br>
35+
- ASimDnsAuditLogs<br>
36+
- [ASimFileEventLogs](/azure/azure-monitor/reference/tables/asimfileeventlogs)<br>
37+
- [ASimNetworkSessionLogs](/azure/azure-monitor/reference/tables/asimnetworksessionlogs)<br>
38+
- [ASimProcessEventLogs](/azure/azure-monitor/reference/tables/asimprocesseventlogs)<br>
39+
- [ASimRegistryEventLogs](/azure/azure-monitor/reference/tables/asimregistryeventlogs)<br>
40+
- [ASimUserManagementActivityLogs](/azure/azure-monitor/reference/tables/asimusermanagementactivitylogs)<br>
41+
- [ASimWebSessionLogs](/azure/azure-monitor/reference/tables/asimwebsessionlogs)<br>
42+
- [AWSCloudTrail](/azure/azure-monitor/reference/tables/awscloudtrail)<br>
43+
- [AWSCloudWatch](/azure/azure-monitor/reference/tables/awscloudwatch)<br>
44+
- [AWSGuardDuty](/azure/azure-monitor/reference/tables/awsguardduty)<br>
45+
- [AWSVPCFlow](/azure/azure-monitor/reference/tables/awsvpcflow)<br>
46+
- [AzureAssessmentRecommendation](/azure/azure-monitor/reference/tables/azureassessmentrecommendation)<br>
47+
- [CommonSecurityLog](/azure/azure-monitor/reference/tables/commonsecuritylog)<br>
48+
- [DeviceTvmSecureConfigurationAssessmentKB](/azure/azure-monitor/reference/tables/devicetvmsecureconfigurationassessmentkb)<br>
49+
- [DeviceTvmSoftwareVulnerabilitiesKB](/azure/azure-monitor/reference/tables/devicetvmsoftwarevulnerabilitieskb)<br>
50+
- [ExchangeAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeassessmentrecommendation)<br>
51+
- [ExchangeOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeonlineassessmentrecommendation)<br>
52+
- [GCPAuditLogs](/azure/azure-monitor/reference/tables/gcpauditlogs)<br>
53+
- [GoogleCloudSCC](/azure/azure-monitor/reference/tables/googlecloudscc)<br>
54+
- [SCCMAssessmentRecommendation](/azure/azure-monitor/reference/tables/sccmassessmentrecommendation)<br>
55+
- [SCOMAssessmentRecommendation](/azure/azure-monitor/reference/tables/scomassessmentrecommendation)<br>
56+
- [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent)<br>
57+
- [SfBAssessmentRecommendation](/azure/azure-monitor/reference/tables/sfbassessmentrecommendation)<br>
58+
- [SfBOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/sfbonlineassessmentrecommendation)<br>
59+
- [SharePointOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/sharepointonlineassessmentrecommendation)<br>
60+
- [SPAssessmentRecommendation](/azure/azure-monitor/reference/tables/spassessmentrecommendation)<br>
61+
- [SQLAssessmentRecommendation](/azure/azure-monitor/reference/tables/sqlassessmentrecommendation)<br>
62+
- StorageInsightsAccountPropertiesDaily<br>
63+
- StorageInsightsDailyMetrics<br>
64+
- StorageInsightsHourlyMetrics<br>
65+
- StorageInsightsMonthlyMetrics<br>
66+
- StorageInsightsWeeklyMetrics<br>
67+
- [Syslog](/azure/azure-monitor/reference/tables/syslog)<br>
68+
- [UCClient](/azure/azure-monitor/reference/tables/ucclient)<br>
69+
- [UCClientReadinessStatus](/azure/azure-monitor/reference/tables/ucclientreadinessstatus)<br>
70+
- [UCClientUpdateStatus](/azure/azure-monitor/reference/tables/ucclientupdatestatus)<br>
71+
- [UCDeviceAlert](/azure/azure-monitor/reference/tables/ucdevicealert)<br>
72+
- [UCDOAggregatedStatus](/azure/azure-monitor/reference/tables/ucdoaggregatedstatus)<br>
73+
- [UCDOStatus](/azure/azure-monitor/reference/tables/ucdostatus)<br>
74+
- [UCServiceUpdateStatus](/azure/azure-monitor/reference/tables/ucserviceupdatestatus)<br>
75+
- [UCUpdateAlert](/azure/azure-monitor/reference/tables/ucupdatealert)<br>
76+
- [WindowsClientAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsclientassessmentrecommendation)<br>
77+
- [WindowsEvent](/azure/azure-monitor/reference/tables/windowsevent)<br>
78+
- [WindowsServerAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsserverassessmentrecommendation)<br>
79+
2980

3081
> [!NOTE]
3182
> Column names must start with a letter and can consist of up to 45 alphanumeric characters and underscores (`_`). `_ResourceId`, `id`, `_ResourceId`, `_SubscriptionId`, `TenantId`, `Type`, `UniqueId`, and `Title` are reserved column names. Custom columns you add to an Azure table must have the suffix `_CF`.

0 commit comments

Comments
 (0)