CDBDataPlaneRequests

The DataPlaneRequests table captures every data plane operation for the Cosmos DB account. Data Plane requests are operations executed to create, update, delete or retrieve data within the account.

Table attributes

Attribute	Value
Resource types	microsoft.documentdb/databaseaccounts
Categories	Azure Resources, Audit
Solutions	LogManagement
Basic log	Yes
Ingestion-time transformation	Yes
Sample Queries	-

Columns

Column	Type	Description
AadAppliedRoleAssignmentId	string	The ID of the applied role assignment for the caller issuing the data plane request.
AadPrincipalId	string	The AAD Principal ID of the caller issuing the data plane request.
AccountName	string	The name of the Cosmos DB account.
ActivityId	string	The unique identifier (GUID) for this data plane operation
AuthTokenType	string	The authorization type (System Read/Write key) for this request by the Cosmos DB Gateway service when running in Gateway mode or using the REST API.
_BilledSize	real	The record size in bytes
ClientIpAddress	string	The IP address of the client VM issuing the request.
CollectionName	string	The Cosmos DB container against which the request was issued.
ConnectionMode	string	The connection mode used by the client issuing the request – (Direct or Gateway mode).
DatabaseName	string	The Cosmos DB database against which the request was issued.
DurationMs	real	The server-side execution time (in milliseconds) for this request.
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
KeyType	string	The authorization type (Primary/Secondary Read/Write key) for this request when running in Direct mode.
OperationName	string	The specific data plane operation executed against the account.
PartitionId	string	The physical partition ID for the Cosmos DB container against which the request was issued.
RegionName	string	The Azure region to which this request was issued.
RequestCharge	real	The RUs (Request Units) consumed by this operation.
RequestLength	real	The payload size (in bytes) for the request.
RequestResourceId	string	The ID of the specific Cosmos DB resource within the account against which the data plane request was executed.
RequestResourceType	string	The Cosmos DB resource type within the account against which the data plane request was executed, can be one of Database, Collection, Document, Attachment, User, Permission, StoredProcedure, Trigger, UserDefinedFunction, Offer.
_ResourceId	string	A unique identifier for the resource that the record is associated with
ResourceTokenPermissionId	string	The ID of the resource token associated with the resource accessed by this request.
ResourceTokenPermissionMode	string	The permission mode of the resource token associated with the resource accessed by this request.
ResourceTokenUserRid	string	The user ID associated with the resource token for the resource accessed by this request.
ResponseLength	real	The payload size (in bytes) of the server response.
SourceSystem	string	The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
StatusCode	int	The HTTP status code response for the data plane request, highlighting details of the success/failure of the request.
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TenantId	string	The Log Analytics workspace ID
TimeGenerated	datetime	Timestamp (in UTC) when the data plane request was issued.
Type	string	The name of the table
UserAgent	string	The name of the user specified user agent suffix (as specified when initializing the Cosmos DB client) when running in Direct mode.