Tables that support the Basic table plan in Azure Monitor Logs

All custom tables created with or migrated to the Logs ingestion API, and the Azure tables listed below support the Basic table plan.

Note

Tables created with the Data Collector API don't support the Basic table plan.

Service Table
Azure Active Directory AADDomainServicesDNSAuditsGeneral
AADDomainServicesDNSAuditsDynamicUpdates
AADServicePrincipalSignInLogs
Azure Load Balancing ALBHealthEvent
Azure Databricks DatabricksBrickStoreHttpGateway
DatabricksDataMonitoring
DatabricksFilesystem
DatabricksDashboards
DatabricksCloudStorageMetadata
DatabricksPredictiveOptimization
DatabricksIngestion
DatabricksMarketplaceConsumer
DatabricksLineageTracking
API Management ApiManagementGatewayLogs
ApiManagementWebSocketConnectionLogs
API Management Service APIMDevPortalAuditDiagnosticLog
Application Gateways AGWAccessLogs
AGWPerformanceLogs
AGWFirewallLogs
Application Gateway for Containers AGCAccessLogs
Application Insights AppTraces
Bare Metal Machines NCBMSecurityDefenderLogs
NCBMSystemLogs
NCBMSecurityLogs
NCBMBreakGlassAuditLogs
Chaos Experiments ChaosStudioExperimentEventLogs
Cloud HSM CHSMManagementAuditLogs
Container Apps ContainerAppConsoleLogs
Container Insights ContainerLogV2
Container Apps Environments AppEnvSpringAppConsoleLogs
Communication Services ACSAdvancedMessagingOperations
ACSCallAutomationIncomingOperations
ACSCallAutomationMediaSummary
ACSCallClientMediaStatsTimeSeries
ACSCallClientOperations
ACSCallRecordingIncomingOperations
ACSCallRecordingSummary
ACSCallSummary
ACSJobRouterIncomingOperations
ACSRoomsIncomingOperations
ACSCallClosedCaptionsSummary
Confidential Ledgers CCFApplicationLogs
Cosmos DB CDBDataPlaneRequests
CDBPartitionKeyStatistics
CDBPartitionKeyRUConsumption
CDBQueryRuntimeStatistics
CDBMongoRequests
CDBCassandraRequests
CDBGremlinRequests
CDBControlPlaneRequests
CDBTableApiRequests
Cosmos DB for MongoDB (vCore) VCoreMongoRequests
Kubernetes clusters - Azure Arc ArcK8sAudit
ArcK8sAuditAdmin
ArcK8sControlPlane
Data Manager for Energy OEPDataplaneLogs
Dedicated SQL Pool SynapseSqlPoolSqlRequests
SynapseSqlPoolRequestSteps
SynapseSqlPoolExecRequests
SynapseSqlPoolDmsWorkers
SynapseSqlPoolWaits
DNS Security Policies DNSQueryLogs
Dev Centers DevCenterDiagnosticLogs
DevCenterResourceOperationLogs
DevCenterBillingEventLogs
Data Transfer DataTransferOperations
Event Hubs AZMSArchiveLogs
AZMSAutoscaleLogs
AZMSCustomerManagedKeyUserLogs
AZMSKafkaCoordinatorLogs
AZMSKafkaUserErrorLogs
Firewalls AZFWFlowTrace
Health Care APIs AHDSMedTechDiagnosticLogs
AHDSDicomDiagnosticLogs
AHDSDicomAuditLogs
Key Vault AZKVAuditLogs
AZKVPolicyEvaluationDetailsLogs
Kubernetes services AKSAudit
AKSAuditAdmin
AKSControlPlane
Log Analytics LASummaryLogs
Managed Lustre AFSAuditLogs
Managed NGINX NGXOperationLogs
NGXSecurityLogs
Media Services AMSLiveEventOperations
AMSKeyDeliveryRequests
AMSMediaAccountHealth
AMSStreamingEndpointRequests
Microsoft Graph MicrosoftGraphActivityLogs
Monitor AzureMetricsV2
Network Devices (Operator Nexus) MNFDeviceUpdates
MNFSystemStateMessageUpdates
MNFSystemSessionHistoryUpdates
Network Managers AVNMConnectivityConfigurationChange
AVNMIPAMPoolAllocationChange
Nexus Clusters NCCKubernetesLogs
NCCVMOrchestrationLogs
Nexus Storage Appliances NCSStorageLogs
NCSStorageAlerts
Operator Insights – Data Products AOIDatabaseQuery
AOIDigestion
AOIStorage
Redis cache ACRConnectedClientList
Redis Cache Enterprise REDConnectionEvents
Relays AZMSHybridConnectionsEvents
Security SecurityAttackPathData
MDCFileIntegrityMonitoringEvents
Service Bus AZMSApplicationMetricLogs
AZMSOperationalLogs
AZMSRunTimeAuditLogs
AZMSVNetConnectionEvents
Sphere ASCAuditLogs
ASCDeviceEvents
Storage StorageBlobLogs
StorageFileLogs
StorageQueueLogs
StorageTableLogs
Synapse Analytics SynapseSqlPoolExecRequests
SynapseSqlPoolRequestSteps
SynapseSqlPoolDmsWorkers
SynapseSqlPoolWaits
Storage Mover StorageMoverJobRunLogs
StorageMoverCopyLogsFailed
StorageMoverCopyLogsTransferred
Virtual Network Manager AVNMNetworkGroupMembershipChange
AVNMRuleCollectionChange

Next steps