A GUID used to group together a set of related events.
Identity
dynamic
A JSON blob that describes the identity of the user or application that performed the operation.
_IsBillable
string
Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
OperationName
string
The operation associated with log record.
Properties
dynamic
Extended properties related to this event.
_ResourceId
string
A unique identifier for the resource that the record is associated with
SourceSystem
string
The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
_SubscriptionId
string
A unique identifier for the subscription that the record is associated with
TenantId
string
The Log Analytics workspace ID
TimeGenerated
datetime
The timestamp (UTC) of when the log was generated.