Edit

Share via


DataSetOutput

The raw collected data from DCR datasets.

Table attributes

Attribute Value
Resource types -
Categories -
Solutions LogManagement
Basic log No
Ingestion-time transformation No
Sample Queries -

Columns

Column Type Description
_BilledSize real The record size in bytes
DataSetRunId string The identifier of the Data Set run for which this data was collected.
DataSetRunSeqNum int A monotonically increasing counter for each log collected during a data set collection.Enables sequential ordering of logs that may have identical timestamps and identifying lost logs within a collection instance.
DataSourceName string Data source name as provided by DCR. Example: GenerateTaskList.
_IsBillable string Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
RawData string An arbitrary string containing the collected data for this log record. The data format, encoding, etc. will vary by collection. Local transformation of collected data is supported. Example: 'svchost.exe','1996','0','Unknown','8,384K', '0:00:06'.
RawDataLabel string Short string that uniquely identifies the format of the collected RawData. Example: Microsoft.TaskList-csv.
_ResourceId string A unique identifier for the resource that the record is associated with
SourceSystem string The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
_SubscriptionId string A unique identifier for the subscription that the record is associated with
TenantId string The Log Analytics workspace ID
TimeGenerated datetime Date and time (UTC) when the log was generated. This column can be used to construct a time series or to filter data to a specific time window. Example: 2014-05-25T08:20:03.123456Z.
Type string The name of the table