共用方式為


New-AzOperationalInsightsAzureActivityLogDataSource

從指定的訂用帳戶收集 Azure 活動記錄。

Syntax

New-AzOperationalInsightsAzureActivityLogDataSource
   [-ResourceGroupName] <String>
   [-WorkspaceName] <String>
   [-Name] <String>
   [-SubscriptionId] <String>
   [-BackfillStartTime <DateTimeOffset>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]
New-AzOperationalInsightsAzureActivityLogDataSource
   [-Workspace] <PSWorkspace>
   [-Name] <String>
   [-SubscriptionId] <String>
   [-BackfillStartTime <DateTimeOffset>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

New-AzOperationalInsightsAzureActivityLogDataSource Cmdlet 可讓 Log Analytics 從指定的訂用帳戶收集 Azure 活動記錄。

範例

範例 1

New-AzOperationalInsightsAzureActivityLogDataSource -ResourceGroupName testrg -WorkspaceName LogAnalyticsworkspace -Name test -SubscriptionId 0b1f6471-1bf0-4dda-aec3-cb9272f09590

Name              : test
ResourceGroupName : testrg
WorkspaceName     : LogAnalyticsworkspace
ResourceId        : /subscriptions/0b1f6471-1bf0-4dda-aec3-cb9272f09590/resourceGroups/testrg/providers/Microsoft.OperationalInsights/workspaces/LogAnalyticsworkspace/datasources/test
Kind              : AzureActivityLog
Properties        : {"linkedResourceId":"/subscriptions/0b1f6471-1bf0-4dda-aec3-cb9272f09590/providers/microsoft.insights/eventtypes/management","backfillStartTime":"0001-01-01T00:00:00+00:00"}

此命令可讓Log Analytics 從指定的訂用帳戶收集 Azure 活動記錄。

參數

-BackfillStartTime

您可以選擇從一周前回填記錄。

類型:DateTimeOffset
Position:Named
預設值:None
必要:False
Accept pipeline input:True
Accept wildcard characters:False

-Confirm

執行 Cmdlet 之前先提示您確認。

類型:SwitchParameter
Aliases:cf
Position:Named
預設值:None
必要:False
Accept pipeline input:False
Accept wildcard characters:False

-DefaultProfile

用於與 azure 通訊的認證、帳戶、租用戶和訂用帳戶

類型:IAzureContextContainer
Aliases:AzContext, AzureRmContext, AzureCredential
Position:Named
預設值:None
必要:False
Accept pipeline input:False
Accept wildcard characters:False

-Force

類型:SwitchParameter
Position:Named
預設值:None
必要:False
Accept pipeline input:False
Accept wildcard characters:False

-Name

類型:String
Position:3
預設值:None
必要:True
Accept pipeline input:True
Accept wildcard characters:False

-ResourceGroupName

類型:String
Position:1
預設值:None
必要:True
Accept pipeline input:True
Accept wildcard characters:False

-SubscriptionId

類型:String
Position:4
預設值:None
必要:True
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

類型:SwitchParameter
Aliases:wi
Position:Named
預設值:None
必要:False
Accept pipeline input:False
Accept wildcard characters:False

-Workspace

類型:PSWorkspace
Position:0
預設值:None
必要:True
Accept pipeline input:True
Accept wildcard characters:False

-WorkspaceName

類型:String
Position:2
預設值:None
必要:True
Accept pipeline input:True
Accept wildcard characters:False

輸入

PSWorkspace

String

DateTimeOffset

輸出

PSDataSource