Operation

Operational log of important activities affecting workspace. Includes both user-initiated activities and notifications from Log Analytics workspace services such as data-capping.

Table attributes

Attribute	Value
Resource types	-
Categories	Azure Monitor
Solutions	LogManagement
Basic log	No
Ingestion-time transformation	No
Sample Queries	-

Columns

Column	Type	Description
_BilledSize	real	The record size in bytes
Computer	string	Name of a physical or virtual machine having membership with Log Analytics agent.
CorrelationId	string	GUID that is shared with telemetry belonging to the same uber action.
Detail	string	User friendly string that describes further details about the operation
ErrorId	string	Deprecated.
HelpLink	string	Reference URL for additional contextual information.
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
ManagementGroupName	string	Name of the Operations Manager management group for System Center Operations Manager agents.
OperationCategory	string	Name of the area that produced the record.
OperationKey	string	Operation ID. Can be a GUID or string.
OperationStatus	string	Operation status description. Ccommon values include Warning Succeeded Failed Error.
_ResourceId	string	A unique identifier for the resource that the record is associated with
Solution	string	Name of the managed solution that produced the record. Can also include other sources such as RestAPI.
SourceComputerId	string	Unique GUID identifier for a computer.
SourceSystem	string	The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TimeGenerated	datetime	Date and time that the record was created.
Type	string	The name of the table