You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Log Analytics workspace data export in Azure Monitor
@@ -651,8 +651,7 @@ If the data export rule includes an unsupported table, the configuration will su
651
651
## Supported tables
652
652
653
653
> [!NOTE]
654
-
> We are in a process of adding support for more tables. Please check this article regularly.
655
-
> Data must be in one of these tables for it to appear in a Data Export Rule.
654
+
> We are in a process of adding support for more tables. Please check this article regularly.
656
655
657
656
| Table | Limitations |
658
657
|---|---|
@@ -733,6 +732,7 @@ If the data export rule includes an unsupported table, the configuration will su
733
732
| ADTModelsOperation ||
734
733
| ADTQueryOperation ||
735
734
| ADXCommand ||
735
+
| ADXIngestionBatching ||
736
736
| ADXJournal ||
737
737
| ADXQuery ||
738
738
| ADXTableDetails ||
@@ -766,13 +766,15 @@ If the data export rule includes an unsupported table, the configuration will su
766
766
| AKSAudit ||
767
767
| AKSAuditAdmin ||
768
768
| AKSControlPlane ||
769
+
| ALBHealthEvent ||
769
770
| Alert | Partial support. Data ingestion for Zabbix alerts isn't supported. |
770
771
| AlertEvidence ||
771
772
| AlertInfo ||
772
773
| AmlComputeClusterEvent ||
773
774
| AmlComputeCpuGpuUtilization ||
774
775
| AmlComputeInstanceEvent ||
775
776
| AmlComputeJobEvent ||
777
+
| AmlDataLabelEvent ||
776
778
| AmlDataSetEvent ||
777
779
| AmlDataStoreEvent ||
778
780
| AmlDeploymentEvent ||
@@ -791,12 +793,14 @@ If the data export rule includes an unsupported table, the configuration will su
791
793
| AMSLiveEventOperations ||
792
794
| AMSMediaAccountHealth ||
793
795
| AMSStreamingEndpointRequests ||
796
+
| AMWMetricsUsageDetails ||
794
797
| ANFFileAccess ||
795
798
| Anomalies ||
796
799
| AOIDatabaseQuery ||
797
800
| AOIDigestion ||
798
801
| AOIStorage ||
799
802
| ApiManagementGatewayLogs ||
803
+
| ApiManagementWebSocketConnectionLogs ||
800
804
| AppAvailabilityResults ||
801
805
| AppBrowserTimings ||
802
806
| AppCenterError ||
@@ -807,6 +811,8 @@ If the data export rule includes an unsupported table, the configuration will su
807
811
| AppMetrics ||
808
812
| AppPageViews ||
809
813
| AppPerformanceCounters ||
814
+
| AppPlatformBuildLogs ||
815
+
| AppPlatformContainerEventLogs ||
810
816
| AppPlatformIngressLogs ||
811
817
| AppPlatformLogsforSpring ||
812
818
| AppPlatformSystemLogs ||
@@ -872,13 +878,13 @@ If the data export rule includes an unsupported table, the configuration will su
872
878
| AZMSArchiveLogs ||
873
879
| AZMSAutoscaleLogs ||
874
880
| AZMSCustomerManagedKeyUserLogs ||
881
+
| AZMSDiagnosticErrorLogs ||
875
882
| AZMSHybridConnectionsEvents ||
876
883
| AZMSKafkaCoordinatorLogs ||
877
884
| AZMSKafkaUserErrorLogs ||
878
885
| AZMSOperationalLogs ||
879
886
| AZMSRunTimeAuditLogs ||
880
887
| AZMSVnetConnectionEvents ||
881
-
| AzureActivity | Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
882
888
| AzureAssessmentRecommendation ||
883
889
| AzureAttestationDiagnostics ||
884
890
| AzureBackupOperations ||
@@ -920,24 +926,33 @@ If the data export rule includes an unsupported table, the configuration will su
920
926
| ContainerServiceLog ||
921
927
| CoreAzureBackup ||
922
928
| DatabricksAccounts ||
929
+
| DatabricksBrickStoreHttpGateway ||
923
930
| DatabricksCapsule8Dataplane ||
924
931
| DatabricksClamAVScan ||
932
+
| DatabricksCloudStorageMetadata ||
925
933
| DatabricksClusterLibraries ||
926
934
| DatabricksClusters ||
935
+
| DatabricksDashboards ||
936
+
| DatabricksDataMonitoring ||
927
937
| DatabricksDBFS ||
928
938
| DatabricksDeltaPipelines ||
929
939
| DatabricksFeatureStore ||
940
+
| DatabricksFilesystem ||
930
941
| DatabricksGenie ||
931
942
| DatabricksGitCredentials ||
932
943
| DatabricksGlobalInitScripts ||
933
944
| DatabricksIAMRole ||
945
+
| DatabricksIngestion ||
934
946
| DatabricksInstancePools ||
935
947
| DatabricksJobs ||
948
+
| DatabricksLineageTracking ||
949
+
| DatabricksMarketplaceConsumer ||
936
950
| DatabricksMLflowAcledArtifact ||
937
951
| DatabricksMLflowExperiment ||
938
952
| DatabricksModelRegistry ||
939
953
| DatabricksNotebook ||
940
954
| DatabricksPartnerHub ||
955
+
| DatabricksPredictiveOptimization ||
941
956
| DatabricksRemoteHistoryService ||
942
957
| DatabricksRepos ||
943
958
| DatabricksSecrets ||
@@ -1036,6 +1051,7 @@ If the data export rule includes an unsupported table, the configuration will su
1036
1051
| IdentityQueryEvents ||
1037
1052
| InsightsMetrics | Partial support. Some of the data is ingested through internal services that aren't supported in export. Currently, this portion is missing in export. |
1038
1053
| IntuneAuditLogs ||
1054
+
| IntuneDeviceComplianceOrg ||
1039
1055
| IntuneDevices ||
1040
1056
| IntuneOperationalLogs ||
1041
1057
| KubeEvents ||
@@ -1053,6 +1069,8 @@ If the data export rule includes an unsupported table, the configuration will su
1053
1069
| MCCEventLogs ||
1054
1070
| MCVPAuditLogs ||
1055
1071
| MCVPOperationLogs ||
1072
+
| MDCFileIntegrityMonitoringEvents ||
1073
+
| MDECustomCollectionDeviceFileEvents ||
1056
1074
| MicrosoftAzureBastionAuditLogs ||
1057
1075
| MicrosoftDataShareReceivedSnapshotLog ||
1058
1076
| MicrosoftDataShareSentSnapshotLog ||
@@ -1061,6 +1079,7 @@ If the data export rule includes an unsupported table, the configuration will su
1061
1079
| MicrosoftHealthcareApisAuditLogs ||
1062
1080
| MicrosoftPurviewInformationProtection ||
1063
1081
| MNFDeviceUpdates ||
1082
+
| MNFSystemSessionHistoryUpdates ||
1064
1083
| MNFSystemStateMessageUpdates ||
1065
1084
| NCBMBreakGlassAuditLogs ||
1066
1085
| NCBMSecurityDefenderLogs ||
@@ -1074,10 +1093,12 @@ If the data export rule includes an unsupported table, the configuration will su
1074
1093
| NetworkMonitoring ||
1075
1094
| NGXOperationLogs ||
1076
1095
| NSPAccessLogs ||
1096
+
| NTAInsights ||
1077
1097
| NTAIpDetails ||
1078
1098
| NTANetAnalytics ||
1079
1099
| NTATopologyDetails ||
1080
1100
| NWConnectionMonitorDestinationListenerResult ||
1101
+
| NWConnectionMonitorDNSResult ||
1081
1102
| NWConnectionMonitorPathResult ||
1082
1103
| NWConnectionMonitorTestResult ||
1083
1104
| OEPAirFlowTask ||
@@ -1117,7 +1138,7 @@ If the data export rule includes an unsupported table, the configuration will su
1117
1138
| SecurityBaseline ||
1118
1139
| SecurityBaselineSummary ||
1119
1140
| SecurityDetection ||
1120
-
| SecurityEvent |Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
1141
+
| SecurityEvent ||
1121
1142
| SecurityIncident ||
1122
1143
| SecurityIoTRawEvent ||
1123
1144
| SecurityNestedRecommendation ||
@@ -1134,6 +1155,7 @@ If the data export rule includes an unsupported table, the configuration will su
1134
1155
| SigninLogs ||
1135
1156
| SPAssessmentRecommendation ||
1136
1157
| SQLAssessmentRecommendation ||
1158
+
| SqlAtpStatus ||
1137
1159
| SQLSecurityAuditEvents ||
1138
1160
| SqlVulnerabilityAssessmentScanStatus ||
1139
1161
| StorageBlobLogs ||
@@ -1150,8 +1172,13 @@ If the data export rule includes an unsupported table, the configuration will su
1150
1172
| SucceededIngestion ||
1151
1173
| SynapseBigDataPoolApplicationsEnded ||
1152
1174
| SynapseBuiltinSqlPoolRequestsEnded ||
1175
+
| SynapseDXCommand ||
1153
1176
| SynapseDXFailedIngestion ||
1177
+
| SynapseDXIngestionBatching ||
1178
+
| SynapseDXQuery ||
1154
1179
| SynapseDXSucceededIngestion ||
1180
+
| SynapseDXTableDetails ||
1181
+
| SynapseDXTableUsageStatistics ||
1155
1182
| SynapseGatewayApiRequests ||
1156
1183
| SynapseIntegrationActivityRuns ||
1157
1184
| SynapseIntegrationPipelineRuns ||
@@ -1165,7 +1192,7 @@ If the data export rule includes an unsupported table, the configuration will su
1165
1192
| SynapseSqlPoolRequestSteps ||
1166
1193
| SynapseSqlPoolSqlRequests ||
1167
1194
| SynapseSqlPoolWaits ||
1168
-
| Syslog |Partial support. Data arriving from the Log Analytics agent or Azure Monitor Agent is fully supported in export. Data arriving via the Diagnostics extension agent is collected through storage. This path isn't supported in export. |
1195
+
| Syslog ||
1169
1196
| ThreatIntelligenceIndicator ||
1170
1197
| TSIIngress ||
1171
1198
| UCClient ||
@@ -1205,13 +1232,16 @@ If the data export rule includes an unsupported table, the configuration will su
0 commit comments