| AACAudit |
| AACHttpRequest |
| AADB2CRequestLogs |
| AADCustomSecurityAttributeAuditLogs |
| AADDomainServicesAccountLogon |
| AADDomainServicesAccountManagement |
| AADDomainServicesDirectoryServiceAccess |
| AADDomainServicesDNSAuditsDynamicUpdates |
| AADDomainServicesDNSAuditsGeneral |
| AADDomainServicesLogonLogoff |
| AADDomainServicesPolicyChange |
| AADDomainServicesPrivilegeUse |
| AADFirstPartyToFirstPartySignInLogs |
| AADGraphActivityLogs |
| AADManagedIdentitySignInLogs |
| AADNonInteractiveUserSignInLogs |
| AADProvisioningLogs |
| AADRiskyServicePrincipals |
| AADRiskyUsers |
| AADServicePrincipalRiskEvents |
| AADServicePrincipalSignInLogs |
| AADUserRiskEvents |
| ABAPAuditLog |
| ABAPAuthorizationDetails |
| ABAPChangeDocsLog |
| ABAPTableDataLog |
| ABAPUserDetails |
| ABSBotRequests |
| ACICollaborationAudit |
| ACRConnectedClientList |
| ACREntraAuthenticationAuditLog |
| ACSAdvancedMessagingOperations |
| ACSAuthIncomingOperations |
| ACSBillingUsage |
| ACSCallAutomationIncomingOperations |
| ACSCallAutomationMediaSummary |
| ACSCallAutomationStreamingUsage |
| ACSCallClientMediaStatsTimeSeries |
| ACSCallClientOperations |
| ACSCallClientServiceRequestAndOutcome |
| ACSCallClosedCaptionsSummary |
| ACSCallDiagnostics |
| ACSCallDiagnosticsUpdates |
| ACSCallingMetrics |
| ACSCallRecordingIncomingOperations |
| ACSCallRecordingSummary |
| ACSCallSummary |
| ACSCallSummaryUpdates |
| ACSCallSurvey |
| ACSChatIncomingOperations |
| ACSEmailSendMailOperational |
| ACSEmailStatusUpdateOperational |
| ACSEmailUserEngagementOperational |
| ACSJobRouterIncomingOperations |
| ACSOptOutManagementOperations |
| ACSRoomsIncomingOperations |
| ACSSMSIncomingOperations |
| ADAssessmentRecommendation |
| AddonAzureBackupAlerts |
| AddonAzureBackupJobs |
| AddonAzureBackupPolicy |
| AddonAzureBackupProtectedInstance |
| AddonAzureBackupStorage |
| ADFActivityRun |
| ADFAirflowSchedulerLogs |
| ADFAirflowTaskLogs |
| ADFAirflowWebLogs |
| ADFAirflowWorkerLogs |
| ADFPipelineRun |
| ADFSandboxActivityRun |
| ADFSandboxPipelineRun |
| ADFSSignInLogs |
| ADFSSISIntegrationRuntimeLogs |
| ADFSSISPackageEventMessageContext |
| ADFSSISPackageEventMessages |
| ADFSSISPackageExecutableStatistics |
| ADFSSISPackageExecutionComponentPhases |
| ADFSSISPackageExecutionDataStatistics |
| ADFTriggerRun |
| ADPAudit |
| ADPDiagnostics |
| ADPRequests |
| ADReplicationResult |
| ADSecurityAssessmentRecommendation |
| ADTDataHistoryOperation |
| ADTDigitalTwinsOperation |
| ADTModelsOperation |
| ADTQueryOperation |
| ADXCommand |
| ADXJournal |
| ADXQuery |
| ADXTableDetails |
| ADXTableUsageStatistics |
| AegDataPlaneRequests |
| AegDeliveryFailureLogs |
| AegPublishFailureLogs |
| AEWAssignmentBlobLogs |
| AEWAuditLogs |
| AEWComputePipelinesLogs |
| AEWExperimentAssignmentSummary |
| AEWExperimentScorecardMetricPairs |
| AEWExperimentScorecards |
| AFDAccessLog |
| AFDClassicCdnAccessLog |
| AFDHealthProbeLog |
| AFDWebApplicationFirewallLog |
| AFSAuditLogs |
| AGCAccessLogs |
| AggregatedSecurityAlert |
| AgriFoodApplicationAuditLogs |
| AgriFoodFarmManagementLogs |
| AgriFoodFarmOperationLogs |
| AgriFoodInsightLogs |
| AgriFoodJobProcessedLogs |
| AgriFoodModelInferenceLogs |
| AgriFoodProviderAuthLogs |
| AgriFoodSatelliteLogs |
| AgriFoodSensorManagementLogs |
| AgriFoodWeatherLogs |
| AGSGrafanaLoginEvents |
| AGSGrafanaUsageInsightsEvents |
| AGWAccessLogs |
| AGWFirewallLogs |
| AGWPerformanceLogs |
| AHDSDeidAuditLogs |
| AHDSDicomAuditLogs |
| AHDSDicomDiagnosticLogs |
| AHDSMedTechDiagnosticLogs |
| AirflowDagProcessingLogs |
| AKSAudit |
| AKSAuditAdmin |
| AKSControlPlane |
| ALBHealthEvent |
| Alert |
| AlertEvidence |
| AlertInfo |
| AMATelemetryEvents |
| AmlComputeClusterEvent |
| AmlComputeCpuGpuUtilization |
| AmlComputeInstanceEvent |
| AmlComputeJobEvent |
| AmlDataLabelEvent |
| AmlDataSetEvent |
| AmlDataStoreEvent |
| AmlDeploymentEvent |
| AmlEnvironmentEvent |
| AmlInferencingEvent |
| AmlModelsEvent |
| AmlOnlineEndpointConsoleLog |
| AmlOnlineEndpointEventLog |
| AmlOnlineEndpointTrafficLog |
| AmlPipelineEvent |
| AmlRegistryReadEventsLog |
| AmlRegistryWriteEventsLog |
| AmlRunEvent |
| AmlRunStatusChangedEvent |
| AMSKeyDeliveryRequests |
| AMSLiveEventOperations |
| AMSMediaAccountHealth |
| AMSStreamingEndpointRequests |
| AMWMetricsUsageDetails |
| ANFFileAccess |
| Anomalies |
| AOIDatabaseQuery |
| AOIDigestion |
| AOIStorage |
| ApiManagementGatewayLlmLog |
| ApiManagementGatewayLogs |
| APIMDevPortalAuditDiagnosticLog |
| AppAvailabilityResults |
| AppBrowserTimings |
| AppCenterError |
| AppDependencies |
| AppEnvSessionConsoleLogs |
| AppEnvSessionLifecycleLogs |
| AppEnvSessionPoolEventLogs |
| AppEnvSpringAppConsoleLogs |
| AppEvents |
| AppExceptions |
| AppMetrics |
| AppPageViews |
| AppPerformanceCounters |
| AppPlatformIngressLogs |
| AppPlatformLogsforSpring |
| AppPlatformSystemLogs |
| AppRequests |
| AppServiceAntivirusScanAuditLogs |
| AppServiceAppLogs |
| AppServiceAuditLogs |
| AppServiceAuthenticationLogs |
| AppServiceConsoleLogs |
| AppServiceEnvironmentPlatformLogs |
| AppServiceFileAuditLogs |
| AppServiceHTTPLogs |
| AppServiceIPSecAuditLogs |
| AppServicePlatformLogs |
| AppServiceServerlessSecurityPluginData |
| AppSystemEvents |
| AppTraces |
| ArcK8sAudit |
| ArcK8sAuditAdmin |
| ArcK8sControlPlane |
| ASCAuditLogs |
| ASCDeviceEvents |
| ASimAuditEventLogs |
| ASimAuthenticationEventLogs |
| ASimDhcpEventLogs |
| ASimDnsActivityLogs |
| ASimFileEventLogs |
| ASimNetworkSessionLogs |
| ASimProcessEventLogs |
| ASimRegistryEventLogs |
| ASimUserManagementActivityLogs |
| ASimWebSessionLogs |
| ASRJobs |
| ASRReplicatedItems |
| ASRv2HealthEvents |
| ASRv2JobEvents |
| ASRv2ProtectedItems |
| ASRv2ReplicationExtensions |
| ASRv2ReplicationPolicies |
| ASRv2ReplicationVaults |
| ATCExpressRouteCircuitIpfix |
| ATCMicrosoftPeeringMetadata |
| ATCPrivatePeeringMetadata |
| AuditLogs |
| AutoscaleEvaluationsLog |
| AutoscaleScaleActionsLog |
| AVNMConnectivityConfigurationChange |
| AVNMIPAMPoolAllocationChange |
| AVNMNetworkGroupMembershipChange |
| AVNMRuleCollectionChange |
| AVSEsxiFirewallSyslog |
| AVSEsxiSyslog |
| AVSNsxEdgeSyslog |
| AVSNsxManagerSyslog |
| AVSSyslog |
| AVSVcSyslog |
| AVSvSphereClient |
| AWSALBAccessLogs |
| AWSCloudTrail |
| AWSCloudWatch |
| AWSEKS |
| AWSELBFlowLogs |
| AWSGuardDuty |
| AWSNetworkFirewallAlert |
| AWSNetworkFirewallFlow |
| AWSNetworkFirewallTls |
| AWSNLBAccessLogs |
| AWSRoute53Resolver |
| AWSS3ServerAccess |
| AWSSecurityHubFindings |
| AWSVPCFlow |
| AWSWAF |
| AZFWApplicationRule |
| AZFWApplicationRuleAggregation |
| AZFWDnsQuery |
| AZFWFatFlow |
| AZFWFlowTrace |
| AZFWIdpsSignature |
| AZFWInternalFqdnResolutionFailure |
| AZFWNatRule |
| AZFWNatRuleAggregation |
| AZFWNetworkRule |
| AZFWNetworkRuleAggregation |
| AZFWThreatIntel |
| AZKVAuditLogs |
| AZKVPolicyEvaluationDetailsLogs |
| AZMSApplicationMetricLogs |
| AZMSArchiveLogs |
| AZMSAutoscaleLogs |
| AZMSCustomerManagedKeyUserLogs |
| AZMSDiagnosticErrorLogs |
| AZMSHybridConnectionsEvents |
| AZMSKafkaCoordinatorLogs |
| AZMSKafkaUserErrorLogs |
| AZMSOperationalLogs |
| AZMSRunTimeAuditLogs |
| AZMSVnetConnectionEvents |
| AzureAssessmentRecommendation |
| AzureAttestationDiagnostics |
| AzureBackupOperations |
| AzureDevOpsAuditing |
| AzureLoadTestingOperation |
| AzureLogAnalyticsIngestionDiagnosticLogs |
| AzureMetricsV2 |
| BehaviorAnalytics |
| BehaviorEntities |
| BehaviorInfo |
| BlockchainApplicationLog |
| BlockchainProxyLog |
| CampaignInfo |
| CassandraAudit |
| CassandraLogs |
| CCFApplicationLogs |
| CDBCassandraRequests |
| CDBControlPlaneRequests |
| CDBDataPlaneRequests |
| CDBGremlinRequests |
| CDBMongoRequests |
| CDBPartitionKeyRUConsumption |
| CDBPartitionKeyStatistics |
| CDBQueryRuntimeStatistics |
| CDBTableApiRequests |
| ChaosStudioExperimentEventLogs |
| CIEventsAudit |
| CIEventsOperational |
| CloudAppEvents |
| CloudHsmServiceOperationAuditLogs |
| CommonSecurityLog |
| CommunicationComplianceActivity |
| ComputerGroup |
| ConfidentialWatchlist |
| ConfigurationChange |
| ConfigurationData |
Partial support - some of the data is ingested through internal services that aren't supported. |
| ContainerAppConsoleLogs |
| ContainerAppSystemLogs |
| ContainerEvent |
| ContainerImageInventory |
| ContainerInstanceLog |
| ContainerInventory |
| ContainerLog |
| ContainerLogV2 |
| ContainerNetworkLogs |
| ContainerNodeInventory |
| ContainerRegistryLoginEvents |
| ContainerRegistryRepositoryEvents |
| ContainerServiceLog |
| CopilotActivity |
| CoreAzureBackup |
| CosmosDBPostgresLogs |
| CrowdStrikeAlerts |
| CrowdStrikeAPIActivityAudit |
| CrowdStrikeAuthActivityAudit |
| CrowdStrikeCases |
| CrowdStrikeCSPMIOAStreaming |
| CrowdStrikeCSPMSearchStreaming |
| CrowdStrikeCustomerIOC |
| CrowdStrikeDetections |
| CrowdStrikeHosts |
| CrowdStrikeIncidents |
| CrowdStrikeReconNotificationSummary |
| CrowdStrikeRemoteResponseSessionEnd |
| CrowdStrikeRemoteResponseSessionStart |
| CrowdStrikeScheduledReportNotification |
| CrowdStrikeUserActivityAudit |
| CrowdStrikeVulnerabilities |
| CSARequestResponse |
| DatabricksAccounts |
| DatabricksApps |
| DatabricksBrickStoreHttpGateway |
| DatabricksBudgetPolicyCentral |
| DatabricksCloudStorageMetadata |
| DatabricksClusterPolicies |
| DatabricksClusters |
| DatabricksDashboards |
| DatabricksDataMonitoring |
| DatabricksDataRooms |
| DatabricksDBFS |
| DatabricksFeatureStore |
| DatabricksFiles |
| DatabricksFilesystem |
| DatabricksGenie |
| DatabricksGlobalInitScripts |
| DatabricksGroups |
| DatabricksIngestion |
| DatabricksInstancePools |
| DatabricksJobs |
| DatabricksLakeviewConfig |
| DatabricksLineageTracking |
| DatabricksMarketplaceConsumer |
| DatabricksMarketplaceProvider |
| DatabricksMLflowAcledArtifact |
| DatabricksMLflowExperiment |
| DatabricksNotebook |
| DatabricksOnlineTables |
| DatabricksPredictiveOptimization |
| DatabricksRBAC |
| DatabricksRemoteHistoryService |
| DatabricksRFA |
| DatabricksSecrets |
| DatabricksSQLPermissions |
| DatabricksSSH |
| DatabricksVectorSearch |
| DatabricksWebhookNotifications |
| DatabricksWorkspace |
| DatabricksWorkspaceFiles |
| DataSetOutput |
| DataSetRuns |
| DataTransferOperations |
| DataverseActivity |
| DCPlanBillingEventLogs |
| DCRLogErrors |
| DefenderForSqlAlerts |
| DefenderForSqlTelemetry |
| DevCenterAgentHealthLogs |
| DevCenterBillingEventLogs |
| DevCenterConnectionLogs |
| DevCenterDiagnosticLogs |
| DevCenterResourceOperationLogs |
| DeviceBehaviorEntities |
| DeviceBehaviorInfo |
| DeviceCustomFileEvents |
| DeviceCustomNetworkEvents |
| DeviceCustomScriptEvents |
| DeviceEvents |
| DeviceFileCertificateInfo |
| DeviceFileEvents |
| DeviceImageLoadEvents |
| DeviceInfo |
| DeviceLogonEvents |
| DeviceNetworkEvents |
| DeviceNetworkInfo |
| DeviceProcessEvents |
| DeviceRegistryEvents |
| DeviceTvmSecureConfigurationAssessment |
| DeviceTvmSecureConfigurationAssessmentKB |
| DeviceTvmSoftwareInventory |
| DeviceTvmSoftwareVulnerabilities |
| DeviceTvmSoftwareVulnerabilitiesKB |
| DFPPurchaseLogs |
| DnsAuditEvents |
| DnsEvents |
| DnsInventory |
| DNSQueryLogs |
| DSMDataClassificationLogs |
| DSMDataLabelingLogs |
| DummyHydrationFact |
| DynamicEventCollection |
| Dynamics365Activity |
| EGNFailedHttpDataPlaneOperations |
| EGNFailedMqttConnections |
| EGNFailedMqttPublishedMessages |
| EGNFailedMqttSubscriptions |
| EGNMqttDisconnections |
| EGNSuccessfulHttpDataPlaneOperations |
| EGNSuccessfulMqttConnections |
| EmailAttachmentInfo |
| EmailEvents |
| EmailPostDeliveryEvents |
| EmailUrlInfo |
| EnrichedMicrosoft365AuditLogs |
| Event |
Partial support. Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension is collected through Azure storage. This path isn't supported. |
| ExchangeAssessmentRecommendation |
| ExchangeOnlineAssessmentRecommendation |
| FailedIngestion |
| FileMaliciousContentInfo |
| FSPGPGBouncer |
| FunctionAppLogs |
| GCPApigee |
| GCPAuditLogs |
| GCPCDN |
| GCPCloudRun |
| GCPCloudSQL |
| GCPComputeEngine |
| GCPDNS |
| GCPFirewallLogs |
| GCPIAM |
| GCPIDS |
| GCPLoadBalancer |
| GCPMonitoring |
| GCPNAT |
| GCPNATAudit |
| GCPResourceManager |
| GCPVPCFlow |
| GKEAPIServer |
| GKEApplication |
| GKEAudit |
| GKEControllerManager |
| GKEHPADecision |
| GKEScheduler |
| GoogleCloudSCC |
| GoogleWorkspaceReports |
| HDInsightAmbariClusterAlerts |
| HDInsightAmbariSystemMetrics |
| HDInsightGatewayAuditLogs |
| HDInsightHadoopAndYarnLogs |
| HDInsightHadoopAndYarnMetrics |
| HDInsightHBaseLogs |
| HDInsightHBaseMetrics |
| HDInsightHiveAndLLAPLogs |
| HDInsightHiveAndLLAPMetrics |
| HDInsightHiveTezAppStats |
| HDInsightKafkaLogs |
| HDInsightKafkaMetrics |
| HDInsightOozieLogs |
| HDInsightSecurityLogs |
| HDInsightSparkApplicationEvents |
| HDInsightSparkBlockManagerEvents |
| HDInsightSparkEnvironmentEvents |
| HDInsightSparkExecutorEvents |
| HDInsightSparkExtraEvents |
| HDInsightSparkJobEvents |
| HDInsightSparkLogs |
| HDInsightSparkSQLExecutionEvents |
| HDInsightSparkStageEvents |
| HDInsightSparkStageTaskAccumulables |
| HDInsightSparkTaskEvents |
| HDInsightStormLogs |
| HDInsightStormMetrics |
| HDInsightStormTopologyMetrics |
| HealthStateChangeEvent |
| HuntingBookmark |
| IdentityDirectoryEvents |
| IdentityInfo |
| IdentityLogonEvents |
| IdentityQueryEvents |
| IlumioInsights |
| InsightsMetrics |
Partial support - some of the data is ingested through internal services that aren't supported. |
| IntuneAuditLogs |
| IntuneDevices |
| IntuneOperationalLogs |
| KubeEvents |
| KubeHealth |
| KubeMonAgentEvents |
| KubeNodeInventory |
| KubePodInventory |
| KubePVInventory |
| KubeServices |
| LAJobLogs |
| LAQueryLogs |
| LASummaryLogs |
| LIATrackingEvents |
| LinuxAuditLog |
| LogicAppWorkflowRuntime |
| McasShadowItReporting |
| MCCEventLogs |
| MCVPAuditLogs |
| MCVPOperationLogs |
| MDCDetectionDNSEvents |
| MDCDetectionFimEvents |
| MDCDetectionGatingValidationEvents |
| MDCDetectionK8SApiEvents |
| MDCDetectionProcessV2Events |
| MDCFileIntegrityMonitoringEvents |
| MDECustomCollectionDeviceFileEvents |
| MDPResourceLog |
| MicrosoftAzureBastionAuditLogs |
| MicrosoftDataShareReceivedSnapshotLog |
| MicrosoftDataShareSentSnapshotLog |
| MicrosoftGraphActivityLogs |
| MicrosoftHealthcareApisAuditLogs |
| MicrosoftPurviewInformationProtection |
| MNFDeviceUpdates |
| MNFSystemSessionHistoryUpdates |
| MNFSystemStateMessageUpdates |
| MPCIngestionLogs |
| MPTOperation |
| MySqlAuditLogs |
| MySqlErrorLogs |
| MySqlSlowLogs |
| NatGatewayFlowlogsV1 |
| NCBMBreakGlassAuditLogs |
| NCBMSecurityDefenderLogs |
| NCBMSecurityLogs |
| NCBMSystemLogs |
| NCCKubernetesLogs |
| NCCPlatformOperationsLogs |
| NCCVMOrchestrationLogs |
| NCMClusterOperationsLogs |
| NCSStorageAlerts |
| NCSStorageAudits |
| NCSStorageLogs |
| NetworkAccessAlerts |
| NetworkAccessConnectionEvents |
| NetworkAccessTraffic |
| NetworkMonitoring |
| NetworkSessions |
| NginxUpstreamUpdateLogs |
| NGXOperationLogs |
| NGXSecurityLogs |
| NSPAccessLogs |
| NTAInsights |
| NTAIpDetails |
| NTANetAnalytics |
| NTARuleRecommendation |
| NTATopologyDetails |
| NWConnectionMonitorDNSResult |
| NWConnectionMonitorPathResult |
| NWConnectionMonitorTestResult |
| OEPAirFlowTask |
| OEPAuditLogs |
| OEPDataplaneLogs |
| OEPElasticOperator |
| OEPElasticsearch |
| OEWAuditLogs |
| OEWExperimentAssignmentSummary |
| OEWExperimentScorecardMetricPairs |
| OEWExperimentScorecards |
| OfficeActivity |
| OGOAuditLogs |
| OktaSystemLogs |
| OLPSupplyChainEntityOperations |
| OLPSupplyChainEvents |
| OTelEvents |
| OTelLogs |
| OTelResources |
| OTelSpans |
| Perf |
| PerfInsightsFindings |
| PerfInsightsImpactedResources |
| PerfInsightsRun |
| PFTitleAuditLogs |
| PGSQLAutovacuumStats |
| PGSQLDbTransactionsStats |
| PGSQLPgStatActivitySessions |
| PGSQLQueryStoreRuntime |
| PGSQLQueryStoreWaits |
| PGSQLServerLogs |
| PipelineTestVehicles |
| PipelineTestVehiclesInternalUseOnly |
| PowerAppsActivity |
| PowerAutomateActivity |
| PowerBIActivity |
| PowerBIDatasetsTenant |
| PowerBIDatasetsWorkspace |
| PowerPlatformAdminActivity |
| PowerPlatformConnectorActivity |
| PowerPlatformDlpActivity |
| ProcessInvestigator |
| ProjectActivity |
| ProtectionStatus |
| PurviewDataSensitivityLogs |
| PurviewScanStatusLogs |
| PurviewSecurityLogs |
| QualysKnowledgeBase |
| Rapid7InsightVMCloudAssets |
| Rapid7InsightVMCloudVulnerabilities |
| REDConnectionEvents |
| RemoteNetworkHealthLogs |
| ResourceManagementPublicAccessLogs |
| RetinaNetworkFlowLogs |
| RomeDetectionEvent |
| SalesforceAuditTrail |
| SalesforceLoginHistory |
| SCCMAssessmentRecommendation |
| SCGPoolExecutionLog |
| SCGPoolRequestLog |
| SCOMAssessmentRecommendation |
| SecureScoreControls |
| SecureScores |
| SecurityAlert |
| SecurityAttackPathData |
| SecurityBaseline |
| SecurityBaselineSummary |
| SecurityDetection |
| SecurityEvent |
Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. |
| SecurityIncident |
| SecurityIoTRawEvent |
| SecurityNestedRecommendation |
| SecurityRecommendation |
| SecurityRegulatoryCompliance |
| SentinelAlibabaCloudAPIGatewayLogs |
| SentinelAlibabaCloudVPCFlowLogs |
| SentinelAlibabaCloudWAFLogs |
| SentinelAudit |
| SentinelHealth |
| SentinelImpervaWAFCloudV2Logs |
| SentinelTheHiveData |
| ServiceMap |
| SfBAssessmentRecommendation |
| SfBOnlineAssessmentRecommendation |
| SharePointOnlineAssessmentRecommendation |
| SignalRServiceDiagnosticLogs |
| SigninLogs |
| SPAssessmentRecommendation |
| SQLAssessmentRecommendation |
| SqlAtpStatus |
| SQLSecurityAuditEvents |
| SqlThreatProtectionLoginAudits |
| SqlVulnerabilityAssessmentResult |
| SqlVulnerabilityAssessmentScanStatus |
| StorageBlobLogs |
| StorageCacheOperationEvents |
| StorageCacheUpgradeEvents |
| StorageCacheWarningEvents |
| StorageFileLogs |
| StorageInsightsAccountPropertiesDaily |
| StorageInsightsDailyMetrics |
| StorageInsightsHourlyMetrics |
| StorageInsightsMonthlyMetrics |
| StorageInsightsWeeklyMetrics |
| StorageMalwareScanningResults |
| StorageMoverCopyLogsFailed |
| StorageMoverCopyLogsTransferred |
| StorageMoverJobRunLogs |
| StorageQueueLogs |
| StorageTableLogs |
| SucceededIngestion |
| SVMPoolExecutionLog |
| SVMPoolRequestLog |
| SynapseBigDataPoolApplicationsEnded |
| SynapseBuiltinSqlPoolRequestsEnded |
| SynapseDXFailedIngestion |
| SynapseDXSucceededIngestion |
| SynapseGatewayApiRequests |
| SynapseIntegrationActivityRuns |
| SynapseIntegrationPipelineRuns |
| SynapseIntegrationTriggerRuns |
| SynapseLinkEvent |
| SynapseRbacOperations |
| SynapseScopePoolScopeJobsEnded |
| SynapseScopePoolScopeJobsStateChange |
| SynapseSqlPoolDmsWorkers |
| SynapseSqlPoolExecRequests |
| SynapseSqlPoolRequestSteps |
| SynapseSqlPoolSqlRequests |
| SynapseSqlPoolWaits |
| Syslog |
Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. |
| ThreatIntelIndicators |
| ThreatIntelligenceIndicator |
| ThreatIntelObjects |
| TOUserAudits |
| TOUserDiagnostics |
| TSIIngress |
| UCClient |
| UCClientReadinessStatus |
| UCClientUpdateStatus |
| UCDeviceAlert |
| UCDOAggregatedStatus |
| UCDOStatus |
| UCServiceUpdateStatus |
| UCUpdateAlert |
| Update |
Partial support - some of the data is ingested through internal services that aren't supported. |
| UpdateRunProgress |
| UpdateSummary |
| UrlClickEvents |
| VCoreMongoRequests |
| VIAudit |
| VIIndexing |
| W3CIISLog |
Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. |
| WaaSDeploymentStatus |
| WaaSInsiderStatus |
| WaaSUpdateStatus |
| Watchlist |
| WebPubSubConnectivity |
| WebPubSubHttpRequest |
| WebPubSubMessaging |
| Windows365AuditLogs |
| WindowsClientAssessmentRecommendation |
| WindowsEvent |
| WindowsFirewall |
| WindowsServerAssessmentRecommendation |
| WireData |
Partial support - some of the data is ingested through internal services that aren't supported. |
| WorkloadDiagnosticLogs |
| WOUserAudits |
| WOUserDiagnostics |
| WUDOAggregatedStatus |
| WUDOStatus |
| WVDAgentHealthStatus |
| WVDCheckpoints |
| WVDConnectionNetworkData |
| WVDConnections |
| WVDErrors |
| WVDFeeds |
| WVDHostRegistrations |
| WVDManagement |
| ZTSGraph |
| ZTSJobStatus |
| ZTSMetadata |
| ZTSRequest |
