New-AzOperationalInsightsAzureActivityLogDataSource
Сбор журнала действий Azure из данной подписки.
Синтаксис
New-AzOperationalInsightsAzureActivityLogDataSource
[-ResourceGroupName] <String>
[-WorkspaceName] <String>
[-Name] <String>
[-SubscriptionId] <String>
[-BackfillStartTime <DateTimeOffset>]
[-Force]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-AzOperationalInsightsAzureActivityLogDataSource
[-Workspace] <PSWorkspace>
[-Name] <String>
[-SubscriptionId] <String>
[-BackfillStartTime <DateTimeOffset>]
[-Force]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Описание
Командлет New-AzOperational Аналитика AzureActivityLogDataSource позволяет Log Analytics собирать журнал действий Azure из данной подписки.
Примеры
Пример 1
New-AzOperationalInsightsAzureActivityLogDataSource -ResourceGroupName testrg -WorkspaceName LogAnalyticsworkspace -Name test -SubscriptionId 0b1f6471-1bf0-4dda-aec3-cb9272f09590
Name : test
ResourceGroupName : testrg
WorkspaceName : LogAnalyticsworkspace
ResourceId : /subscriptions/0b1f6471-1bf0-4dda-aec3-cb9272f09590/resourceGroups/testrg/providers/Microsoft.OperationalInsights/workspaces/LogAnalyticsworkspace/datasources/test
Kind : AzureActivityLog
Properties : {"linkedResourceId":"/subscriptions/0b1f6471-1bf0-4dda-aec3-cb9272f09590/providers/microsoft.insights/eventtypes/management","backfillStartTime":"0001-01-01T00:00:00+00:00"}
Эта команда позволяет Log Analytics собирать журнал действий Azure из данной подписки.
Параметры
-BackfillStartTime
Вы можете выбрать резервное заполнение журналов за неделю назад.
Type: DateTimeOffset
Position: Named
Default value: None
Required: False
Accept pipeline input: True
Accept wildcard characters: False
-Confirm
Запрос подтверждения перед выполнением командлета.
Type: SwitchParameter
Aliases: cf
Position: Named
Default value: None
Required: False
Accept pipeline input: False
Accept wildcard characters: False
-DefaultProfile
Учетные данные, учетная запись, клиент и подписка, используемые для обмена данными с Azure
Type: IAzureContextContainer
Aliases: AzContext, AzureRmContext, AzureCredential
Position: Named
Default value: None
Required: False
Accept pipeline input: False
Accept wildcard characters: False
-Force
Type: SwitchParameter
Position: Named
Default value: None
Required: False
Accept pipeline input: False
Accept wildcard characters: False
-Name
Type: String
Position: 3
Default value: None
Required: True
Accept pipeline input: True
Accept wildcard characters: False
-ResourceGroupName
Type: String
Position: 1
Default value: None
Required: True
Accept pipeline input: True
Accept wildcard characters: False
-SubscriptionId
Type: String
Position: 4
Default value: None
Required: True
Accept pipeline input: True
Accept wildcard characters: False
-WhatIf
Type: SwitchParameter
Aliases: wi
Position: Named
Default value: None
Required: False
Accept pipeline input: False
Accept wildcard characters: False
-Workspace
Type: PSWorkspace
Position: 0
Default value: None
Required: True
Accept pipeline input: True
Accept wildcard characters: False
-WorkspaceName
Type: String
Position: 2
Default value: None
Required: True
Accept pipeline input: True
Accept wildcard characters: False
PSWorkspace
String
DateTimeOffset
Выходные данные
PSDataSource