New-AzSyslogDataSourceObject

Create an in-memory object for SyslogDataSource.

Syntax

New-AzSyslogDataSourceObject
   [-FacilityName <String[]>]
   [-LogLevel <String[]>]
   [-Name <String>]
   [-Stream <String[]>]
   [<CommonParameters>]

Description

Create an in-memory object for SyslogDataSource.

Examples

Example 1: Create a sys log data source object with cron facility

New-AzSyslogDataSourceObject -FacilityName cron -LogLevel Debug,Critical,Emergency -Name cronSyslog -Stream Microsoft-Syslog

FacilityName LogLevel                     Name       Stream
------------ --------                     ----       ------
{cron}       {Debug, Critical, Emergency} cronSyslog {Microsoft-Syslog}

This command creates a sys log data source object.

Example 2: Create a sys log data source object with sys log facility

New-AzSyslogDataSourceObject -FacilityName syslog -LogLevel Alert,Critical,Emergency -Name syslogBase -Stream Microsoft-Syslog

FacilityName LogLevel                     Name       Stream
------------ --------                     ----       ------
{syslog}     {Alert, Critical, Emergency} syslogBase {Microsoft-Syslog}

This command creates a sys log data source object.

Parameters

-FacilityName

The list of facility names.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-LogLevel

The log levels to collect.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Name

A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Stream

List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Outputs

SyslogDataSource