| AACAudit |
|
| AACHttpRequest |
|
| AADDomainServicesAccountLogon |
|
| AADDomainServicesAccountManagement |
|
| AADDomainServicesDirectoryServiceAccess |
|
| AADDomainServicesLogonLogoff |
|
| AADDomainServicesPolicyChange |
|
| AADDomainServicesPrivilegeUse |
|
| AADManagedIdentitySignInLogs |
|
| AADNonInteractiveUserSignInLogs |
|
| AADProvisioningLogs |
|
| AADRiskyUsers |
|
| AADServicePrincipalSignInLogs |
|
| AADUserRiskEvents |
|
| ABAPAuditLog |
|
| ABSBotRequests |
|
| ACSAuthIncomingOperations |
|
| ACSBillingUsage |
|
| ACSChatIncomingOperations |
|
| ACSSMSIncomingOperations |
|
| ADAssessmentRecommendation |
|
| AddonAzureBackupAlerts |
|
| AddonAzureBackupJobs |
|
| AddonAzureBackupPolicy |
|
| AddonAzureBackupProtectedInstance |
|
| AddonAzureBackupStorage |
|
| ADFActivityRun |
|
| ADFAirflowSchedulerLogs |
|
| ADFAirflowTaskLogs |
|
| ADFAirflowWebLogs |
|
| ADFAirflowWorkerLogs |
|
| ADFPipelineRun |
|
| ADFSandboxActivityRun |
|
| ADFSandboxPipelineRun |
|
| ADFSSignInLogs |
|
| ADFSSISIntegrationRuntimeLogs |
|
| ADFSSISPackageEventMessageContext |
|
| ADFSSISPackageEventMessages |
|
| ADFSSISPackageExecutableStatistics |
|
| ADFSSISPackageExecutionComponentPhases |
|
| ADFSSISPackageExecutionDataStatistics |
|
| ADFTriggerRun |
|
| ADPAudit |
|
| ADPDiagnostics |
|
| ADPRequests |
|
| ADReplicationResult |
|
| ADSecurityAssessmentRecommendation |
|
| ADTDigitalTwinsOperation |
|
| ADTModelsOperation |
|
| ADTQueryOperation |
|
| ADXCommand |
|
| ADXJournal |
|
| ADXQuery |
|
| ADXTableDetails |
|
| ADXTableUsageStatistics |
|
| AegDeliveryFailureLogs |
|
| AegPublishFailureLogs |
|
| AirflowDagProcessingLogs |
|
| Alerta |
|
| AlertEvidence |
|
| AlertInfo |
|
| AmlComputeClusterEvent |
|
| AmlComputeCpuGpuUtilization |
|
| AmlComputeInstanceEvent |
|
| AmlComputeJobEvent |
|
| AmlDataLabelEvent |
|
| AmlDataSetEvent |
|
| AmlDataStoreEvent |
|
| AmlDeploymentEvent |
|
| AmlEnvironmentEvent |
|
| AmlInferencingEvent |
|
| AmlModelsEvent |
|
| AmlOnlineEndpointConsoleLog |
|
| AmlPipelineEvent |
|
| AmlRunEvent |
|
| AmlRunStatusChangedEvent |
|
| Anomalias |
|
| ApiManagementGatewayLogs |
|
| AppAvailabilityResults |
|
| AppBrowserTimings |
|
| AppCenterError |
|
| AppDependencies |
|
| AppEvents |
|
| AppExceptions |
|
| AppMetrics |
|
| AppPageViews |
|
| AppPerformanceCounters |
|
| AppPlatformIngressLogs |
|
| AppPlatformLogsforSpring |
|
| AppPlatformSystemLogs |
|
| AppRequests |
|
| AppServiceAntivirusScanAuditLogs |
|
| AppServiceAppLogs |
|
| AppServiceAuditLogs |
|
| AppServiceConsoleLogs |
|
| AppServiceEnvironmentPlatformLogs |
|
| AppServiceFileAuditLogs |
|
| AppServiceHTTPLogs |
|
| AppServiceIPSecAuditLogs |
|
| AppServicePlatformLogs |
|
| AppSystemEvents |
|
| AppTraces |
|
| ASimAuditEventLogs |
|
| ASimAuthenticationEventLogs |
|
| ASimDhcpEventLogs |
|
| ASimDnsActivityLogs |
|
| ASimDnsAuditLogs |
|
| ASimFileEventLogs |
|
| ASimNetworkSessionLogs |
|
| ASimProcessEventLogs |
|
| ASimRegistryEventLogs |
|
| ASimUserManagementActivityLogs |
|
| ASimWebSessionLogs |
|
| AuditLogs |
|
| AutoscaleEvaluationsLog |
|
| AutoscaleScaleActionsLog |
|
| AWSCloudTrail |
|
| AWSCloudWatch |
|
| AWSGuardDuty |
|
| AWSVPCFlow |
|
| AzureAssessmentRecommendation |
|
| AzureDevOpsAuditing |
|
| BehaviorAnalytics |
|
| BlockchainApplicationLog |
|
| BlockchainProxyLog |
|
| CDBCassandraRequests |
|
| CDBControlPlaneRequests |
|
| CDBDataPlaneRequests |
|
| CDBGremlinRequests |
|
| CDBMongoRequests |
|
| CDBPartitionKeyRUConsumption |
|
| CDBPartitionKeyStatistics |
|
| CDBQueryRuntimeStatistics |
|
| CloudAppEvents |
|
| CommonSecurityLog |
|
| ComputerGroup |
|
| ConfigurationChange |
|
| ConfigurationData |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| ContainerImageInventory |
|
| ContainerInventory |
|
| ContainerLog |
|
| ContainerLogV2 |
|
| ContainerNodeInventory |
|
| ContainerRegistryLoginEvents |
|
| ContainerRegistryRepositoryEvents |
|
| ContainerServiceLog |
|
| CoreAzureBackup |
|
| DatabricksAccounts |
|
| DatabricksClusters |
|
| DatabricksDBFS |
|
| DatabricksFeatureStore |
|
| DatabricksGenie |
|
| DatabricksGlobalInitScripts |
|
| DatabricksInstancePools |
|
| DatabricksJobs |
|
| DatabricksMLflowAcledArtifact |
|
| DatabricksMLflowExperiment |
|
| DatabricksNotebook |
|
| DatabricksRemoteHistoryService |
|
| DatabricksSecrets |
|
| DatabricksSQLPermissions |
|
| DatabricksSSH |
|
| DatabricksWorkspace |
|
| DataverseActivity |
|
| DefenderForSqlAlerts |
|
| DefenderForSqlTelemetry |
|
| DeviceEvents |
|
| DeviceFileCertificateInfo |
|
| DeviceFileEvents |
|
| DeviceImageLoadEvents |
|
| DeviceInfo |
|
| DeviceLogonEvents |
|
| DeviceNetworkEvents |
|
| DeviceNetworkInfo |
|
| DeviceProcessEvents |
|
| DeviceRegistryEvents |
|
| DeviceTvmSecureConfigurationAssessment |
|
| DeviceTvmSecureConfigurationAssessmentKB |
|
| DeviceTvmSoftwareInventory |
|
| DeviceTvmSoftwareVulnerabilities |
|
| DeviceTvmSoftwareVulnerabilitiesKB |
|
| DnsEvents |
|
| DnsInventory |
|
| DummyHydrationFact |
|
| DynamicEventCollection |
|
| Dynamics365Activity |
|
| EmailAttachmentInfo |
|
| EmailEvents |
|
| EmailPostDeliveryEvents |
|
| EmailUrlInfo |
|
| Evento |
Suporte parcial. Os dados que chegam do agente do Log Analytics (MMA) ou do Azure Monitor Agent (AMA) são totalmente suportados. Os dados que chegam da Extensão de Diagnóstico são coletados por meio do armazenamento do Azure. Esse caminho não é suportado. |
| ExchangeAssessmentRecommendation |
|
| ExchangeOnlineAssessmentRecommendation |
|
| FailedIngestion |
|
| FunctionAppLogs |
|
| GCPAuditLogs |
|
| GoogleCloudSCC |
|
| HDInsightAmbariClusterAlerts |
|
| HDInsightAmbariSystemMetrics |
|
| HDInsightHadoopAndYarnLogs |
|
| HDInsightHadoopAndYarnMetrics |
|
| HDInsightHBaseLogs |
|
| HDInsightHBaseMetrics |
|
| HDInsightHiveAndLLAPLogs |
|
| HDInsightHiveAndLLAPMetrics |
|
| HDInsightHiveTezAppStats |
|
| HDInsightKafkaLogs |
|
| HDInsightKafkaMetrics |
|
| HDInsightOozieLogs |
|
| HDInsightSecurityLogs |
|
| HDInsightSparkApplicationEvents |
|
| HDInsightSparkBlockManagerEvents |
|
| HDInsightSparkEnvironmentEvents |
|
| HDInsightSparkExecutorEvents |
|
| HDInsightSparkJobEvents |
|
| HDInsightSparkLogs |
|
| HDInsightSparkSQLExecutionEvents |
|
| HDInsightSparkStageEvents |
|
| HDInsightSparkStageTaskAccumulables |
|
| HDInsightSparkTaskEvents |
|
| HealthStateChangeEvent |
|
| HuntingBookmark |
|
| IdentityDirectoryEvents |
|
| IdentityInfo |
|
| IdentityLogonEvents |
|
| IdentityQueryEvents |
|
| InsightsMetrics |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| IntuneAuditLogs |
|
| IntuneDevices |
|
| IntuneOperationalLogs |
|
| KubeEvents |
|
| KubeHealth |
|
| KubeMonAgentEvents |
|
| KubeNodeInventory |
|
| KubePodInventory |
|
| KubePVInventory |
|
| KubeServices |
|
| LAQueryLogs |
|
| LinuxAuditLog |
|
| McasShadowItReporting |
|
| MCCEventLogs |
|
| MicrosoftAzureBastionAuditLogs |
|
| MicrosoftDataShareReceivedSnapshotLog |
|
| MicrosoftDataShareSentSnapshotLog |
|
| MicrosoftGraphActivityLogs |
|
| MicrosoftHealthcareApisAuditLogs |
|
| MicrosoftPurviewInformationProtection |
|
| NetworkAccessTraffic |
|
| NetworkMonitoring |
|
| NTAIpDetails |
|
| NTANetAnalytics |
|
| NTATopologyDetails |
|
| NWConnectionMonitorPathResult |
|
| NWConnectionMonitorTestResult |
|
| OfficeActivity |
|
| Perf |
Suporte parcial – somente os dados de desempenho do Windows têm suporte no momento. |
| PowerAppsActivity |
|
| PowerAutomateActivity |
|
| PowerBIActivity |
|
| PowerBIDatasetsWorkspace |
|
| PowerPlatformAdminActivity |
|
| PowerPlatformConnectorActivity |
|
| PowerPlatformDlpActivity |
|
| ProcessInvestigator |
|
| ProjectActivity |
|
| ProtectionStatus |
|
| PurviewScanStatusLogs |
|
| RomeDetectionEvent |
|
| SCCMAssessmentRecommendation |
|
| SCOMAssessmentRecommendation |
|
| SecureScoreControls |
|
| SecureScores |
|
| SecurityAlert |
|
| SecurityBaseline |
|
| SecurityBaselineSummary |
|
| SecurityDetection |
|
| SecurityEvent |
Suporte parcial – os dados que chegam do agente de Log Analytics (MMA) ou Azure Monitor Agent (AMA) têm suporte completo. Os dados que chegam via agente de Extensão de Diagnóstico são coletados pelo armazenamento enquanto esse caminho não tem suporte. |
| SecurityIncident |
|
| SecurityIoTRawEvent |
|
| SecurityNestedRecommendation |
|
| SecurityRecommendation |
|
| SecurityRegulatoryCompliance |
|
| SentinelHealth |
|
| ServiceMap |
|
| SfBAssessmentRecommendation |
|
| SfBOnlineAssessmentRecommendation |
|
| SharePointOnlineAssessmentRecommendation |
|
| SignalRServiceDiagnosticLogs |
|
| SigninLogs |
|
| SPAssessmentRecommendation |
|
| SQLAssessmentRecommendation |
|
| SqlAtpStatus |
|
| SQLSecurityAuditEvents |
|
| SqlThreatProtectionLoginAudits |
|
| SqlVulnerabilityAssessmentResult |
|
| SqlVulnerabilityAssessmentScanStatus |
|
| StorageBlobLogs |
|
| StorageFileLogs |
|
| StorageInsightsAccountPropertiesDaily |
|
| StorageInsightsDailyMetrics |
|
| StorageInsightsHourlyMetrics |
|
| StorageInsightsMétricas mensais |
|
| StorageInsightsMétricas semanais |
|
| StorageQueueLogs |
|
| StorageTableLogs |
|
| SucceededIngestion |
|
| SynapseBigDataPoolApplicationsEnded |
|
| SynapseBuiltinSqlPoolRequestsEnded |
|
| SynapseDXFailedIngestion |
|
| SynapseDXSucceededIngestion |
|
| SynapseGatewayApiRequests |
|
| SynapseIntegrationActivityRuns |
|
| SynapseIntegrationPipelineRuns |
|
| SynapseIntegrationTriggerRuns |
|
| SynapseRbacOperations |
|
| SynapseSqlPoolDmsWorkers |
|
| SynapseSqlPoolExecRequests |
|
| SynapseSqlPoolRequestSteps |
|
| SynapseSqlPoolSqlRequests |
|
| SynapseSqlPoolWaits |
|
| Syslog |
Suporte parcial – os dados que chegam do agente de Log Analytics (MMA) ou Azure Monitor Agent (AMA) têm suporte completo. Os dados que chegam via agente de Extensão de Diagnóstico são coletados pelo armazenamento enquanto esse caminho não tem suporte. |
| ThreatIntelligenceIndicator |
|
| TSIIngress |
|
| UCClient |
|
| UCClientReadinessStatus |
|
| UCClientUpdateStatus |
|
| UCDeviceAlert |
|
| UCDOAggregatedStatus |
|
| UCDOStatus |
|
| UCServiceUpdateStatus |
|
| UCUpdateAlert |
|
| Atualização |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| UpdateRunProgress |
|
| UpdateSummary |
|
| UrlClickEvents |
|
| W3CIISLog |
|
| WaaSDeploymentStatus |
|
| WaaSInsiderStatus |
|
| WaaSUpdateStatus |
|
| Watchlist |
|
| WebPubSubConnectivity |
|
| WebPubSubHttpRequest |
|
| WebPubSubMessaging |
|
| WindowsClientAssessmentRecommendation |
|
| WindowsEvent |
|
| WindowsFirewall |
|
| WindowsServerAssessmentRecommendation |
|
| WireData |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| WorkloadDiagnosticLogs |
|
| WUDOAggregatedStatus |
|
| WUDOStatus |
|
| WVDAgentHealthStatus |
|
| WVDCheckpoints |
|
| WVDConnectionNetworkData |
|
| WVDConnections |
|
| WVDErrors |
|
| WVDFeeds |
|
| WVDHostRegistrations |
|
| WVDManagement |
|