AACAudit |
|
AACHttpRequest |
|
AADDomainServicesAccountLogon |
|
AADDomainServicesAccountManagement |
|
AADDomainServicesDirectoryServiceAccess |
|
AADDomainServicesLogonLogoff |
|
AADDomainServicesPolicyChange |
|
AADDomainServicesPrivilegeUse |
|
AADManagedIdentitySignInLogs |
|
AADNonInteractiveUserSignInLogs |
|
AADProvisioningLogs |
|
AADRiskyUsers |
|
AADServicePrincipalSignInLogs |
|
AADUserRiskEvents |
|
ABAPAuditLog |
|
ABSBotRequests |
|
ACSAuthIncomingOperations |
|
ACSBillingUsage |
|
ACSChatIncomingOperations |
|
ACSSMSIncomingOperations |
|
ADAssessmentRecommendation |
|
AddonAzureBackupAlerts |
|
AddonAzureBackupJobs |
|
AddonAzureBackupPolicy |
|
AddonAzureBackupProtectedInstance |
|
AddonAzureBackupStorage |
|
ADFActivityRun |
|
ADFAirflowSchedulerLogs |
|
ADFAirflowTaskLogs |
|
ADFAirflowWebLogs |
|
ADFAirflowWorkerLogs |
|
ADFPipelineRun |
|
ADFSandboxActivityRun |
|
ADFSandboxPipelineRun |
|
ADFSSignInLogs |
|
ADFSSISIntegrationRuntimeLogs |
|
ADFSSISPackageEventMessageContext |
|
ADFSSISPackageEventMessages |
|
ADFSSISPackageExecutableStatistics |
|
ADFSSISPackageExecutionComponentPhases |
|
ADFSSISPackageExecutionDataStatistics |
|
ADFTriggerRun |
|
ADPAudit |
|
ADPDiagnostics |
|
ADPRequests |
|
ADReplicationResult |
|
ADSecurityAssessmentRecommendation |
|
ADTDigitalTwinsOperation |
|
ADTModelsOperation |
|
ADTQueryOperation |
|
ADXCommand |
|
ADXJournal |
|
ADXQuery |
|
ADXTableDetails |
|
ADXTableUsageStatistics |
|
AegDeliveryFailureLogs |
|
AegPublishFailureLogs |
|
AirflowDagProcessingLogs |
|
Alert |
|
AlertEvidence |
|
AlertInfo |
|
AmlComputeClusterEvent |
|
AmlComputeCpuGpuUtilization |
|
AmlComputeInstanceEvent |
|
AmlComputeJobEvent |
|
AmlDataLabelEvent |
|
AmlDataSetEvent |
|
AmlDataStoreEvent |
|
AmlDeploymentEvent |
|
AmlEnvironmentEvent |
|
AmlInferencingEvent |
|
AmlModelsEvent |
|
AmlOnlineEndpointConsoleLog |
|
AmlPipelineEvent |
|
AmlRunEvent |
|
AmlRunStatusChangedEvent |
|
異常 |
|
ApiManagementGatewayLogs |
|
AppAvailabilityResults |
|
AppBrowserTimings |
|
AppCenterError |
|
AppDependencies |
|
AppEvents |
|
AppExceptions |
|
AppMetrics |
|
AppPageViews |
|
AppPerformanceCounters |
|
AppPlatformIngressLogs |
|
AppPlatformLogsforSpring |
|
AppPlatformSystemLogs |
|
AppRequests |
|
AppServiceAntivirusScanAuditLogs |
|
AppServiceAppLogs |
|
AppServiceAuditLogs |
|
AppServiceConsoleLogs |
|
AppServiceEnvironmentPlatformLogs |
|
AppServiceFileAuditLogs |
|
AppServiceHTTPLogs |
|
AppServiceIPSecAuditLogs |
|
AppServicePlatformLogs |
|
AppSystemEvents |
|
AppTraces |
|
ASimAuditEventLogs |
|
ASimAuthenticationEventLogs |
|
ASimDhcpEventLogs |
|
ASimDnsActivityLogs |
|
ASimDnsAuditLogs |
|
ASimFileEventLogs |
|
ASimNetworkSessionLogs |
|
ASimProcessEventLogs |
|
ASimRegistryEventLogs |
|
ASimUserManagementActivityLogs |
|
ASimWebSessionLogs |
|
AuditLogs |
|
AutoscaleEvaluationsLog |
|
AutoscaleScaleActionsLog |
|
AWSCloudTrail |
|
AWSCloudWatch |
|
AWSGuardDuty |
|
AWSVPCFlow |
|
AzureAssessmentRecommendation |
|
AzureDevOpsAuditing |
|
BehaviorAnalytics |
|
BlockchainApplicationLog |
|
BlockchainProxyLog |
|
CDBCassandraRequests |
|
CDBControlPlaneRequests |
|
CDBDataPlaneRequests |
|
CDBGremlinRequests |
|
CDBMongoRequests |
|
CDBPartitionKeyRUConsumption |
|
CDBPartitionKeyStatistics |
|
CDBQueryRuntimeStatistics |
|
CloudAppEvents |
|
CommonSecurityLog |
|
ComputerGroup |
|
ConfigurationChange |
|
ConfigurationData |
部分支援 – 部分數據會透過不支援的內部服務內嵌。 |
ContainerImageInventory |
|
ContainerInventory |
|
ContainerLog |
|
ContainerLogV2 |
|
ContainerNodeInventory |
|
ContainerRegistryLoginEvents |
|
ContainerRegistryRepositoryEvents |
|
ContainerServiceLog |
|
CoreAzureBackup |
|
DatabricksAccounts |
|
DatabricksClusters |
|
DatabricksDBFS |
|
DatabricksFeatureStore |
|
DatabricksGenie |
|
DatabricksGlobalInitScripts |
|
DatabricksInstancePools |
|
DatabricksJobs |
|
DatabricksMLflowAcledArtifact |
|
DatabricksMLflowExperiment |
|
DatabricksNotebook |
|
DatabricksRemoteHistoryService |
|
DatabricksSecrets |
|
DatabricksSQLPermissions |
|
DatabricksSSH |
|
DatabricksWorkspace |
|
DataverseActivity |
|
DefenderForSqlAlerts |
|
DefenderForSqlTelemetry |
|
DeviceEvents |
|
DeviceFileCertificateInfo |
|
DeviceFileEvents |
|
DeviceImageLoadEvents |
|
DeviceInfo |
|
DeviceLogonEvents |
|
DeviceNetworkEvents |
|
DeviceNetworkInfo |
|
DeviceProcessEvents |
|
DeviceRegistryEvents |
|
DeviceTvmSecureConfigurationAssessment |
|
DeviceTvmSecureConfigurationAssessmentKB |
|
DeviceTvmSoftwareInventory |
|
DeviceTvmSoftwareVulnerabilities |
|
DeviceTvmSoftwareVulnerabilitiesKB |
|
DnsEvents |
|
DnsInventory |
|
DummyHydrationFact |
|
DynamicEventCollection |
|
Dynamics365Activity |
|
EmailAttachmentInfo |
|
EmailEvents |
|
EmailPostDeliveryEvents |
|
EmailUrlInfo |
|
事件 |
部分支援。 完全支援從 Log Analytics 代理程式 (MMA) 或 Azure 監視器代理程式 (AMA) 抵達的數據。 從診斷擴充功能抵達的數據會透過 Azure 記憶體收集。 不支援此路徑。 |
ExchangeAssessmentRecommendation |
|
ExchangeOnlineAssessmentRecommendation |
|
FailedIngestion |
|
FunctionAppLogs |
|
GCPAuditLogs |
|
GoogleCloudSCC |
|
HDInsightAmbariClusterAlerts |
|
HDInsightAmbariSystemMetrics |
|
HDInsightHadoopAndYarnLogs |
|
HDInsightHadoopAndYarnMetrics |
|
HDInsightHBaseLogs |
|
HDInsightHBaseMetrics |
|
HDInsightHiveAndLLAPLogs |
|
HDInsightHiveAndLLAPMetrics |
|
HDInsightHiveTezAppStats |
|
HDInsightKafkaLogs |
|
HDInsightKafkaMetrics |
|
HDInsightOozieLogs |
|
HDInsightSecurityLogs |
|
HDInsightSparkApplicationEvents |
|
HDInsightSparkBlockManagerEvents |
|
HDInsightSparkEnvironmentEvents |
|
HDInsightSparkExecutorEvents |
|
HDInsightSparkJobEvents |
|
HDInsightSparkLogs |
|
HDInsightSparkSQLExecutionEvents |
|
HDInsightSparkStageEvents |
|
HDInsightSparkStageTaskAccumulables |
|
HDInsightSparkTaskEvents |
|
HealthStateChangeEvent |
|
HuntingBookmark |
|
IdentityDirectoryEvents |
|
IdentityInfo |
|
IdentityLogonEvents |
|
IdentityQueryEvents |
|
InsightsMetrics |
部分支援 – 部分數據會透過不支援的內部服務內嵌。 |
IntuneAuditLogs |
|
IntuneDevices |
|
IntuneOperationalLogs |
|
KubeEvents |
|
KubeHealth |
|
KubeMonAgentEvents |
|
KubeNodeInventory |
|
KubePodInventory |
|
KubePVInventory |
|
KubeServices |
|
LAQueryLogs |
|
LinuxAuditLog |
|
McasShadowItReporting |
|
MCCEventLogs |
|
MicrosoftAzureBastionAuditLogs |
|
MicrosoftDataShareReceivedSnapshotLog |
|
MicrosoftDataShareSentSnapshotLog |
|
MicrosoftGraphActivityLogs |
|
MicrosoftHealthcareApisAuditLogs |
|
MicrosoftPurviewInformationProtection |
|
NetworkAccessTraffic |
|
NetworkMonitoring |
|
NTAIpDetails |
|
NTANetAnalytics |
|
NTATopologyDetails |
|
NWConnectionMonitorPathResult |
|
NWConnectionMonitorTestResult |
|
OfficeActivity |
|
Perf |
部分支援 – 目前僅支援 Windows 效能數據。 |
PowerAppsActivity |
|
PowerAutomateActivity |
|
PowerBIActivity |
|
PowerBIDatasetsWorkspace |
|
PowerPlatformAdminActivity |
|
PowerPlatformConnectorActivity |
|
PowerPlatformDlpActivity |
|
ProcessInvestigator |
|
ProjectActivity |
|
ProtectionStatus |
|
PurviewScanStatusLogs |
|
RomeDetectionEvent |
|
SCCMAssessmentRecommendation |
|
SCOMAssessmentRecommendation |
|
SecureScoreControls |
|
SecureScores |
|
SecurityAlert |
|
SecurityBaseline |
|
SecurityBaselineSummary |
|
SecurityDetection |
|
SecurityEvent |
部分支援 – 完全支援來自 Log Analytics 代理程式 (MMA) 或 Azure 監視器代理程式 (AMA) 的數據。 透過診斷擴充功能代理程式抵達的數據會透過記憶體收集,但不支援此路徑。 |
SecurityIncident |
|
SecurityIoTRawEvent |
|
SecurityNestedRecommendation |
|
SecurityRecommendation |
|
SecurityRegulatoryCompliance |
|
SentinelHealth |
|
ServiceMap |
|
SfBAssessmentRecommendation |
|
SfBOnlineAssessmentRecommendation |
|
SharePointOnlineAssessmentRecommendation |
|
SignalRServiceDiagnosticLogs |
|
SigninLogs |
|
SPAssessmentRecommendation |
|
SQLAssessmentRecommendation |
|
SqlAtpStatus |
|
SQLSecurityAuditEvents |
|
SqlThreatProtectionLoginAudits |
|
SqlVulnerabilityAssessmentResult |
|
SqlVulnerabilityAssessmentScanStatus |
|
StorageBlobLogs |
|
StorageFileLogs |
|
StorageInsightsAccountPropertiesDaily |
|
StorageInsightsDailyMetrics |
|
StorageInsightsHourlyMetrics |
|
StorageInsightsMonthlyMetrics |
|
StorageInsightsWeeklyMetrics |
|
StorageQueueLogs |
|
StorageTableLogs |
|
SucceededIngestion |
|
SynapseBigDataPoolApplicationsEnded |
|
SynapseBuiltinSqlPoolRequestsEnded |
|
SynapseDXFailedIngestion |
|
SynapseDXSucceededIngestion |
|
SynapseGatewayApiRequests |
|
SynapseIntegrationActivityRuns |
|
SynapseIntegrationPipelineRuns |
|
SynapseIntegrationTriggerRuns |
|
SynapseRbacOperations |
|
SynapseSqlPoolDmsWorkers |
|
SynapseSqlPoolExecRequests |
|
SynapseSqlPoolRequestSteps |
|
SynapseSqlPoolSqlRequests |
|
SynapseSqlPoolWaits |
|
Syslog |
部分支援 – 完全支援來自 Log Analytics 代理程式 (MMA) 或 Azure 監視器代理程式 (AMA) 的數據。 透過診斷擴充功能代理程式抵達的數據會透過記憶體收集,但不支援此路徑。 |
ThreatIntelligenceIndicator |
|
TSIIngress |
|
UCClient |
|
UCClientReadinessStatus |
|
UCClientUpdateStatus |
|
UCDeviceAlert |
|
UCDOAggregatedStatus |
|
UCDOStatus |
|
UCServiceUpdateStatus |
|
UCUpdateAlert |
|
更新 |
部分支援 – 部分數據會透過不支援的內部服務內嵌。 |
UpdateRunProgress |
|
UpdateSummary |
|
UrlClickEvents |
|
W3CIISLog |
部分支援 – 完全支援來自 Log Analytics 代理程式 (MMA) 或 Azure 監視器代理程式 (AMA) 的數據。 透過診斷擴充功能代理程式抵達的數據會透過記憶體收集,但不支援此路徑。 |
WaaSDeploymentStatus |
|
WaaSInsiderStatus |
|
WaaSUpdateStatus |
|
關注清單 |
|
WebPubSubConnectivity |
|
WebPubSubHttpRequest |
|
WebPubSubMessaging |
|
WindowsClientAssessmentRecommendation |
|
WindowsEvent |
|
WindowsFirewall |
|
WindowsServerAssessmentRecommendation |
|
WireData |
部分支援 – 部分數據會透過不支援的內部服務內嵌。 |
WorkloadDiagnosticLogs |
|
WUDOAggregatedStatus |
|
WUDOStatus |
|
WVDAgentHealthStatus |
|
WVDCheckpoints |
|
WVDConnectionNetworkData |
|
WVDConnections |
|
WVDErrors |
|
WVDFeeds |
|
WVDHostRegistrations |
|
WVDManagement |
|