Таблицы журналов Azure Monitor Log Analytics, упорядоченные по категориям

Applications

• ACLUserDefinedLogs
• AEWExperimentAssignmentSummary
• AEWExperimentScorecardMetricPairs
• AEWExperimentScorecards
• AppAvailabilityResults
• AppBrowserTimings
• AppDependencies
• AppEvents
• AppExceptions
• AppMetrics
• AppPageViews
• AppPerformanceCounters
• AppRequests
• AppServiceConsoleLogs
• AppSystemEvents
• AppTraces
• ContainerLog
• FunctionAppLogs
• OEWExperimentAssignmentSummary
• OEWExperimentScorecardMetricPairs
• OEWExperimentScorecards
• OTelEvents
• OTelLogs
• OTelResources
• OTelSpans
• OTelTraces
• OTelTracesAgent

Audit

• AACAudit
• AADB2CRequestLogs
• AADCustomSecurityAttributeAuditLogs
• AADGraphActivityLogs
• AADManagedIdentitySignInLogs
• AADNonInteractiveUserSignInLogs
• AADProvisioningLogs
• AADRiskyServicePrincipals
• AADRiskyUsers
• AADServicePrincipalRiskEvents
• AADServicePrincipalSignInLogs
• AADUserRiskEvents
• ACICollaborationAudit
• ACLTransactionLogs
• ACLUserDefinedLogs
• ACRConnectedClientList
• ACREntraAuthenticationAuditLog
• ADFSSignInLogs
• AEWAssignmentBlobLogs
• AEWAuditLogs
• AEWComputePipelinesLogs
• AFSAuditLogs
• AGCFirewallLogs
• AGSGrafanaLoginEvents
• AGSGrafanaUsageInsightsEvents
• AGWAccessLogs
• AGWFirewallLogs
• AGWPerformanceLogs
• AHDSDeidAuditLogs
• AHDSDicomAuditLogs
• AKSAudit
• AKSAuditAdmin
• AMSKeyDeliveryRequests
• AMSLiveEventOperations
• AMSMediaAccountHealth
• AMSStreamingEndpointRequests
• AOIDatabaseQuery
• AOIStorage
• ASCAuditLogs
• ASCDeviceEvents
• ASRJobs
• ASRReplicatedItems
• ASRv2HealthEvents
• ASRv2JobEvents
• ASRv2ProtectedItems
• ASRv2ReplicationExtensions
• ASRv2ReplicationPolicies
• ASRv2ReplicationVaults
• AVNMConnectivityConfigurationChange
• AVNMIPAMPoolAllocationChange
• AVNMNetworkGroupMembershipChange
• AVNMRuleCollectionChange
• AZKVAuditLogs
• AZKVPolicyEvaluationDetailsLogs
• AZMSApplicationMetricLogs
• AZMSArchiveLogs
• AZMSAutoscaleLogs
• AZMSCustomerManagedKeyUserLogs
• AZMSDiagnosticErrorLogs
• AZMSHybridConnectionsEvents
• AZMSKafkaCoordinatorLogs
• AZMSKafkaUserErrorLogs
• AZMSOperationalLogs
• AZMSRunTimeAuditLogs
• AZMSVnetConnectionEvents
• AegDataPlaneRequests
• AgriFoodApplicationAuditLogs
• AmlComputeInstanceEvent
• AmlDataLabelEvent
• AmlDataSetEvent
• AmlDataStoreEvent
• AmlDeploymentEvent
• AmlEnvironmentEvent
• AmlInferencingEvent
• AmlModelsEvent
• AmlOnlineEndpointConsoleLog
• AmlOnlineEndpointEventLog
• AmlOnlineEndpointTrafficLog
• AmlPipelineEvent
• AmlRegistryReadEventsLog
• AmlRegistryWriteEventsLog
• AmlRunEvent
• AppEnvSessionConsoleLogs
• AppEnvSessionLifecycleLogs
• AppEnvSessionPoolEventLogs
• AppEnvSpringAppConsoleLogs
• ArcK8sAudit
• ArcK8sAuditAdmin
• AzureActivity
• AzureBackupOperations
• AzureLoadTestingOperation
• CCFApplicationLogs
• CDBCassandraRequests
• CDBControlPlaneRequests
• CDBDataPlaneRequests
• CDBDataPlaneRequests15M
• CDBDataPlaneRequests5M
• CDBGremlinRequests
• CDBMongoRequests
• CDBPartitionKeyRUConsumption
• CDBPartitionKeyStatistics
• CDBQueryRuntimeStatistics
• CDBTableApiRequests
• CIEventsAudit
• CassandraAudit
• ChaosStudioExperimentEventLogs
• CloudHsmServiceOperationAuditLogs
• CommunicationComplianceActivity
• ContainerAppConsoleLogs
• ContainerAppSystemLogs
• ContainerEvent
• ContainerInstanceLog
• DatabricksApps
• DatabricksBrickStoreHttpGateway
• DatabricksBudgetPolicyCentral
• DatabricksCloudStorageMetadata
• DatabricksClusterPolicies
• DatabricksDashboards
• DatabricksDataMonitoring
• DatabricksDataRooms
• DatabricksFiles
• DatabricksFilesystem
• DatabricksGroups
• DatabricksIngestion
• DatabricksLakeviewConfig
• DatabricksLineageTracking
• DatabricksMarketplaceConsumer
• DatabricksMarketplaceProvider
• DatabricksOnlineTables
• DatabricksPredictiveOptimization
• DatabricksRBAC
• DatabricksRFA
• DatabricksVectorSearch
• DatabricksWebhookNotifications
• DatabricksWorkspaceFiles
• DataverseActivity
• DevCenterConnectionLogs
• DevCenterDiagnosticLogs
• EGNSuccessfulMqttConnections
• HDInsightGatewayAuditLogs
• HDInsightRangerAuditLogs
• LAQueryLogs
• LLMActivity
• MPCIngestionLogs
• MicrosoftGraphActivityLogs
• MicrosoftHealthcareApisAuditLogs
• MicrosoftPurviewInformationProtection
• MicrosoftServicePrincipalSignInLogs
• MySqlAuditLogs
• MySqlSlowLogs
• NSPAccessLogs
• OEPAuditLogs
• OEWAuditLogs
• OGOAuditLogs
• OracleCloudDatabase
• PFTitleAuditLogs
• PGSQLAutovacuumStats
• PGSQLDbTransactionsStats
• PGSQLPgBouncer
• PGSQLPgStatActivitySessions
• PGSQLQueryStoreRuntime
• PGSQLQueryStoreWaits
• PGSQLServerLogs
• PowerAppsActivity
• PowerAutomateActivity
• PowerBIActivity
• PowerPlatformAdminActivity
• PowerPlatformConnectorActivity
• PowerPlatformDlpActivity
• REDConnectionEvents
• SCGPoolExecutionLog
• SCGPoolRequestLog
• SVMPoolExecutionLog
• SVMPoolRequestLog
• SentinelAudit
• TOUserAudits
• VCoreMongoRequests
• VIAudit
• WOUserAudits
• Windows365AuditLogs

Azure Monitor

• ALBHealthEvent
• AMWMetricsUsageDetails
• Alert
• AlertHistory
• AutoscaleEvaluationsLog
• AutoscaleScaleActionsLog
• AzureMetrics
• AzureMetricsV2
• ComputerGroup
• Operation
• SCGPoolExecutionLog
• SVMPoolExecutionLog
• Usage
• WorkloadDiagnosticLogs

ресурсы Azure

• AACHttpRequest
• AADDomainServicesAccountLogon
• AADDomainServicesAccountManagement
• AADDomainServicesDirectoryServiceAccess
• AADDomainServicesLogonLogoff
• AADDomainServicesPolicyChange
• AADDomainServicesPrivilegeUse
• AADDomainServicesSystemSecurity
• ABSBotRequests
• ACICollaborationAudit
• ACLTransactionLogs
• ACLUserDefinedLogs
• ACRConnectedClientList
• ACREntraAuthenticationAuditLog
• ACSAdvancedMessagingOperations
• ACSAuthIncomingOperations
• ACSBillingUsage
• ACSCallAutomationIncomingOperations
• ACSCallAutomationMediaSummary
• ACSCallAutomationStreamingUsage
• ACSCallClientMediaStatsTimeSeries
• ACSCallClientOperations
• ACSCallClientServiceRequestAndOutcome
• ACSCallClosedCaptionsSummary
• ACSCallDiagnostics
• ACSCallDiagnosticsUpdates
• ACSCallRecordingIncomingOperations
• ACSCallRecordingSummary
• ACSCallSummary
• ACSCallSummaryUpdates
• ACSCallSurvey
• ACSCallingMetrics
• ACSChatIncomingOperations
• ACSEmailSendMailOperational
• ACSEmailStatusUpdateOperational
• ACSEmailUserEngagementOperational
• ACSJobRouterIncomingOperations
• ACSOptOutManagementOperations
• ACSRoomsIncomingOperations
• ACSSMSIncomingOperations
• ADFActivityRun
• ADFPipelineRun
• ADFSandboxActivityRun
• ADFSandboxPipelineRun
• ADFTriggerRun
• ADTDataHistoryOperation
• ADTDigitalTwinsOperation
• ADTEventRoutesOperation
• ADTModelsOperation
• ADTQueryOperation
• ADXJournal
• ADXTableDetails
• AEWAssignmentBlobLogs
• AEWAuditLogs
• AEWComputePipelinesLogs
• AFSAuditLogs
• AGCAccessLogs
• AGCFirewallLogs
• AGSGrafanaLoginEvents
• AGSGrafanaUsageInsightsEvents
• AGWAccessLogs
• AGWFirewallLogs
• AGWPerformanceLogs
• AHCIDiagnosticLogs
• AHDSDeidAuditLogs
• AHDSDicomAuditLogs
• AHDSDicomDiagnosticLogs
• AHDSMedTechDiagnosticLogs
• AKSAudit
• AKSAuditAdmin
• AKSControlPlane
• ALBHealthEvent
• AMSKeyDeliveryRequests
• AMSLiveEventOperations
• AMSMediaAccountHealth
• AMSStreamingEndpointRequests
• AMWMetricsUsageDetails
• AOIDatabaseQuery
• AOIStorage
• ASCAuditLogs
• ASCDeviceEvents
• ATCExpressRouteCircuitIpfix
• ATCMicrosoftPeeringMetadata
• ATCPrivatePeeringMetadata
• AVNMConnectivityConfigurationChange
• AVNMIPAMPoolAllocationChange
• AVNMNetworkGroupMembershipChange
• AVNMRuleCollectionChange
• AZFWFlowTrace
• AZKVAuditLogs
• AZKVPolicyEvaluationDetailsLogs
• AZMSApplicationMetricLogs
• AZMSArchiveLogs
• AZMSAutoscaleLogs
• AZMSCustomerManagedKeyUserLogs
• AZMSHybridConnectionsEvents
• AZMSKafkaCoordinatorLogs
• AZMSKafkaUserErrorLogs
• AZMSOperationalLogs
• AZMSVnetConnectionEvents
• AddonAzureBackupAlerts
• AddonAzureBackupJobs
• AddonAzureBackupPolicy
• AddonAzureBackupProtectedInstance
• AddonAzureBackupStorage
• AegDataPlaneRequests
• AegDeliveryFailureLogs
• AegPublishFailureLogs
• AgriFoodApplicationAuditLogs
• AgriFoodFarmManagementLogs
• AgriFoodFarmOperationLogs
• AgriFoodInsightLogs
• AgriFoodJobProcessedLogs
• AgriFoodModelInferenceLogs
• AgriFoodProviderAuthLogs
• AgriFoodSatelliteLogs
• AgriFoodSensorManagementLogs
• AgriFoodWeatherLogs
• AmlComputeClusterEvent
• AmlComputeClusterNodeEvent
• AmlComputeCpuGpuUtilization
• AmlComputeInstanceEvent
• AmlComputeJobEvent
• AmlDataLabelEvent
• AmlDataSetEvent
• AmlDataStoreEvent
• AmlDeploymentEvent
• AmlEnvironmentEvent
• AmlInferencingEvent
• AmlModelsEvent
• AmlOnlineEndpointConsoleLog
• AmlOnlineEndpointEventLog
• AmlOnlineEndpointTrafficLog
• AmlPipelineEvent
• AmlRegistryReadEventsLog
• AmlRegistryWriteEventsLog
• AmlRunEvent
• AmlRunStatusChangedEvent
• ApiManagementGatewayLogs
• ApiManagementWebSocketConnectionLogs
• AppEnvSessionConsoleLogs
• AppEnvSessionLifecycleLogs
• AppEnvSessionPoolEventLogs
• AppEnvSpringAppConsoleLogs
• AppPlatformContainerEventLogs
• AppPlatformIngressLogs
• AppPlatformLogsforSpring
• AppPlatformSystemLogs
• AppServiceAppLogs
• AppServiceAuditLogs
• AppServiceAuthenticationLogs
• AppServiceConsoleLogs
• AppServiceFileAuditLogs
• AppServiceHTTPLogs
• AppServicePlatformLogs
• ArcK8sAudit
• ArcK8sAuditAdmin
• ArcK8sControlPlane
• AuditLogs
• AutoscaleEvaluationsLog
• AutoscaleScaleActionsLog
• AzureActivity
• AzureAttestationDiagnostics
• AzureDiagnostics
• AzureLoadTestingOperation
• AzureMetrics
• AzureMetricsV2
• BlockchainApplicationLog
• BlockchainProxyLog
• CCFApplicationLogs
• CDBCassandraRequests
• CDBControlPlaneRequests
• CDBDataPlaneRequests
• CDBDataPlaneRequests15M
• CDBDataPlaneRequests5M
• CDBGremlinRequests
• CDBMongoRequests
• CDBPartitionKeyRUConsumption
• CDBPartitionKeyStatistics
• CDBQueryRuntimeStatistics
• CDBTableApiRequests
• CIEventsAudit
• CIEventsOperational
• ChaosStudioExperimentEventLogs
• CloudHsmServiceOperationAuditLogs
• ContainerAppConsoleLogs
• ContainerAppSystemLogs
• ContainerEvent
• ContainerInstanceLog
• CoreAzureBackup
• DCRLogErrors
• DNSQueryLogs
• DSMDataClassificationLogs
• DSMDataLabelingLogs
• DataSetOutput
• DataSetRuns
• DataTransferOperations
• DatabricksAccounts
• DatabricksApps
• DatabricksBrickStoreHttpGateway
• DatabricksBudgetPolicyCentral
• DatabricksCloudStorageMetadata
• DatabricksClusterPolicies
• DatabricksClusters
• DatabricksDBFS
• DatabricksDashboards
• DatabricksDataMonitoring
• DatabricksDataRooms
• DatabricksDatabricksSQL
• DatabricksFeatureStore
• DatabricksFiles
• DatabricksFilesystem
• DatabricksGenie
• DatabricksGitCredentials
• DatabricksGlobalInitScripts
• DatabricksGroups
• DatabricksIAMRole
• DatabricksIngestion
• DatabricksInstancePools
• DatabricksJobs
• DatabricksLakeviewConfig
• DatabricksLineageTracking
• DatabricksMLflowAcledArtifact
• DatabricksMLflowExperiment
• DatabricksMarketplaceConsumer
• DatabricksMarketplaceProvider
• DatabricksNotebook
• DatabricksOnlineTables
• DatabricksPredictiveOptimization
• DatabricksRBAC
• DatabricksRFA
• DatabricksRemoteHistoryService
• DatabricksSQLPermissions
• DatabricksSSH
• DatabricksSecrets
• DatabricksTables
• DatabricksVectorSearch
• DatabricksWebTerminal
• DatabricksWebhookNotifications
• DatabricksWorkspace
• DatabricksWorkspaceFiles
• DevCenterAgentHealthLogs
• DevCenterBillingEventLogs
• DevCenterConnectionLogs
• DevCenterDiagnosticLogs
• DevCenterResourceOperationLogs
• EGNFailedHttpDataPlaneOperations
• EGNFailedMqttConnections
• EGNFailedMqttPublishedMessages
• EGNFailedMqttSubscriptions
• EGNMqttDisconnections
• EGNSuccessfulHttpDataPlaneOperations
• EGNSuccessfulMqttConnections
• FailedIngestion
• FunctionAppLogs
• HDInsightAmbariClusterAlerts
• HDInsightAmbariSystemMetrics
• HDInsightGatewayAuditLogs
• HDInsightHBaseLogs
• HDInsightHBaseMetrics
• HDInsightHadoopAndYarnLogs
• HDInsightHadoopAndYarnMetrics
• HDInsightHiveAndLLAPLogs
• HDInsightHiveAndLLAPMetrics
• HDInsightHiveQueryAppStats
• HDInsightHiveTezAppStats
• HDInsightJupyterNotebookEvents
• HDInsightKafkaLogs
• HDInsightKafkaMetrics
• HDInsightOozieLogs
• HDInsightRangerAuditLogs
• HDInsightSecurityLogs
• HDInsightSparkApplicationEvents
• HDInsightSparkBlockManagerEvents
• HDInsightSparkEnvironmentEvents
• HDInsightSparkExecutorEvents
• HDInsightSparkExtraEvents
• HDInsightSparkJobEvents
• HDInsightSparkLogs
• HDInsightSparkSQLExecutionEvents
• HDInsightSparkStageEvents
• HDInsightSparkStageTaskAccumulables
• HDInsightSparkTaskEvents
• HDInsightStormLogs
• HDInsightStormMetrics
• HDInsightStormTopologyMetrics
• InsightsMetrics
• LAJobLogs
• LASummaryLogs
• LIATrackingEvents
• LogicAppWorkflowRuntime
• MCCEventLogs
• MCVPAuditLogs
• MCVPOperationLogs
• MDPResourceLog
• MeshControlPlane
• MicrosoftAzureBastionAuditLogs
• MicrosoftDataShareReceivedSnapshotLog
• MicrosoftDataShareSentSnapshotLog
• MicrosoftHealthcareApisAuditLogs
• MySqlAuditLogs
• MySqlSlowLogs
• NCBMBreakGlassAuditLogs
• NCBMSecurityDefenderLogs
• NCBMSecurityLogs
• NCBMSystemLogs
• NCCIDRACLogs
• NCCKubernetesLogs
• NCCPlatformOperationsLogs
• NCCVMOrchestrationLogs
• NCMClusterOperationsLogs
• NCSStorageAlerts
• NCSStorageAudits
• NCSStorageLogs
• NGXOperationLogs
• NGXSecurityLogs
• NSPAccessLogs
• NginxUpstreamUpdateLogs
• OEPAirFlowTask
• OEPAuditLogs
• OEPDataplaneLogs
• OEPElasticOperator
• OEPElasticsearch
• OEWAuditLogs
• OLPSupplyChainEntityOperations
• OLPSupplyChainEvents
• PFTitleAuditLogs
• PGSQLAutovacuumStats
• PGSQLDbTransactionsStats
• PGSQLPgBouncer
• PGSQLPgStatActivitySessions
• PGSQLQueryStoreRuntime
• PGSQLQueryStoreWaits
• PGSQLServerLogs
• PerfInsightsFindings
• PerfInsightsImpactedResources
• PerfInsightsRun
• PowerBIDatasetsTenant
• PowerBIDatasetsWorkspace
• PurviewDataSensitivityLogs
• PurviewScanStatusLogs
• PurviewSecurityLogs
• REDConnectionEvents
• ResourceManagementPublicAccessLogs
• SQLSecurityAuditEvents
• ServiceFabricOperationalEvent
• ServiceFabricReliableActorEvent
• ServiceFabricReliableServiceEvent
• SignalRServiceDiagnosticLogs
• SigninLogs
• StorageBlobLogs
• StorageCacheOperationEvents
• StorageCacheUpgradeEvents
• StorageCacheWarningEvents
• StorageFileLogs
• StorageMalwareScanningResults
• StorageMoverCopyLogsFailed
• StorageMoverCopyLogsTransferred
• StorageMoverJobRunLogs
• StorageQueueLogs
• StorageTableLogs
• SucceededIngestion
• SynapseBigDataPoolApplicationsEnded
• SynapseBuiltinSqlPoolRequestsEnded
• SynapseDXCommand
• SynapseDXFailedIngestion
• SynapseDXIngestionBatching
• SynapseDXQuery
• SynapseDXSucceededIngestion
• SynapseDXTableDetails
• SynapseDXTableUsageStatistics
• SynapseGatewayApiRequests
• SynapseIntegrationActivityRuns
• SynapseIntegrationPipelineRuns
• SynapseIntegrationTriggerRuns
• SynapseLinkEvent
• SynapseRbacOperations
• SynapseScopePoolScopeJobsEnded
• SynapseScopePoolScopeJobsStateChange
• SynapseSqlPoolDmsWorkers
• SynapseSqlPoolExecRequests
• SynapseSqlPoolRequestSteps
• SynapseSqlPoolSqlRequests
• SynapseSqlPoolWaits
• TOUserAudits
• TOUserDiagnostics
• TSIIngress
• VIIndexing
• WOUserAudits
• WOUserDiagnostics
• WebPubSubConnectivity
• WebPubSubHttpRequest
• WebPubSubMessaging

Виртуальный рабочий стол Azure

• WVDAutoscaleEvaluationPooled
• WVDCheckpoints
• WVDConnectionGraphicsDataPreview
• WVDConnectionNetworkData
• WVDConnections
• WVDErrors
• WVDFeeds
• WVDHostRegistrations
• WVDManagement
• WVDSessionHostManagement

Containers

• AKSAudit
• AKSAuditAdmin
• AKSControlPlane
• ArcK8sAudit
• ArcK8sAuditAdmin
• ArcK8sControlPlane
• ContainerImageInventory
• ContainerInventory
• ContainerLog
• ContainerLogV2
• ContainerNetworkLogs
• ContainerNodeInventory
• ContainerRegistryLoginEvents
• ContainerRegistryRepositoryEvents
• ContainerServiceLog
• Heartbeat
• InsightsMetrics
• KubeEvents
• KubeMonAgentEvents
• KubeNodeInventory
• KubePVInventory
• KubePodInventory
• KubeServices
• MeshControlPlane
• Perf
• RetinaNetworkFlowLogs

Аналитика для настольных ПК

• DHAppReliability
• DHDriverReliability
• DHLogonFailures
• DHLogonMetrics
• DHOSCrashData
• DHOSReliability
• DHWipAppLearning
• MAApplication
• MAApplicationHealth
• MAApplicationHealthAlternativeVersions
• MAApplicationHealthIssues
• MAApplicationInstance
• MAApplicationInstanceReadiness
• MAApplicationReadiness
• MADeploymentPlan
• MADevice
• MADeviceNRT
• MADeviceNotEnrolled
• MADeviceReadiness
• MADriverInstanceReadiness
• MADriverReadiness
• MAOfficeAddin
• MAOfficeAddinHealthEventNRT
• MAOfficeAddinInstance
• MAOfficeAddinReadiness
• MAOfficeAppInstance
• MAOfficeAppReadiness
• MAOfficeBuildInfo
• MAOfficeCurrencyAssessment
• MAOfficeSuiteInstance
• MAProposedPilotDevices
• MAWindowsBuildInfo
• MAWindowsCurrencyAssessment
• MAWindowsCurrencyAssessmentDailyCounts
• MAWindowsDeploymentStatus
• UAApp
• UAComputer
• UAComputerRank
• UADriver
• UADriverProblemCodes
• UAFeedback
• UAIESiteDiscovery
• UAOfficeAddIn
• UAProposedActionPlan
• UASysReqIssue
• UAUpgradedComputer
• UCDOAggregatedStatus
• UCDOStatus
• WDAVStatus
• WDAVThreat
• WUDOAggregatedStatus
• WUDOStatus
• WaaSDeploymentStatus
• WaaSInsiderStatus
• WaaSUpdateStatus

ИТ и средства управления

• AddonAzureBackupAlerts
• AddonAzureBackupJobs
• AddonAzureBackupPolicy
• AddonAzureBackupProtectedInstance
• AddonAzureBackupStorage
• ComputerGroup
• ConfigurationChange
• ConfigurationData
• CoreAzureBackup
• EnrichedMicrosoft365AuditLogs
• Heartbeat
• IntuneAuditLogs
• IntuneDeviceComplianceOrg
• IntuneDevices
• IntuneOperationalLogs
• NetworkAccessAlerts
• NetworkAccessConnectionEvents
• NetworkAccessGenerativeAIInsights
• NetworkAccessTraffic
• RemoteNetworkHealthLogs
• Update
• UpdateRunProgress
• W3CIISLog

Network

• AGCAccessLogs
• AGCFirewallLogs
• AGWAccessLogs
• AGWFirewallLogs
• AGWPerformanceLogs
• AVNMConnectivityConfigurationChange
• AVNMIPAMPoolAllocationChange
• AVNMNetworkGroupMembershipChange
• AVNMRuleCollectionChange
• AzureDiagnostics
• DnsEvents
• DnsInventory
• EnrichedMicrosoft365AuditLogs
• MNFDeviceUpdates
• MNFSystemSessionHistoryUpdates
• MNFSystemStateMessageUpdates
• NSPAccessLogs
• NTAInsights
• NTAIpDetails
• NTANetAnalytics
• NTARuleRecommendation
• NTATopologyDetails
• NWConnectionMonitorDNSResult
• NWConnectionMonitorPathResult
• NWConnectionMonitorTestResult
• NetworkAccessAlerts
• NetworkAccessConnectionEvents
• NetworkAccessGenerativeAIInsights
• NetworkAccessTraffic
• NetworkMonitoring
• RemoteNetworkHealthLogs

Security

• AADB2CRequestLogs
• AADCustomSecurityAttributeAuditLogs
• AADDomainServicesAccountLogon
• AADDomainServicesAccountManagement
• AADDomainServicesDirectoryServiceAccess
• AADDomainServicesLogonLogoff
• AADDomainServicesPolicyChange
• AADDomainServicesPrivilegeUse
• AADDomainServicesSystemSecurity
• AADGraphActivityLogs
• AADManagedIdentitySignInLogs
• AADNonInteractiveUserSignInLogs
• AADProvisioningLogs
• AADRiskyServicePrincipals
• AADRiskyUsers
• AADServicePrincipalRiskEvents
• AADServicePrincipalSignInLogs
• AADUserRiskEvents
• ABAPAuditLog
• ABAPAuthorizationDetails
• ABAPChangeDocsLog
• ABAPTableDataLog
• ABAPUserDetails
• ADFSSignInLogs
• ASimAuditEventLogs
• ASimAuthenticationEventLogs
• ASimDhcpEventLogs
• ASimDnsActivityLogs
• ASimFileEventLogs
• ASimNetworkSessionLogs
• ASimProcessEventLogs
• ASimRegistryEventLogs
• ASimUserManagementActivityLogs
• ASimWebSessionLogs
• AWSCloudTrail
• AWSCloudWatch
• AWSGuardDuty
• AWSNetworkFirewallAlert
• AWSNetworkFirewallFlow
• AWSNetworkFirewallTls
• AWSRoute53Resolver
• AWSS3ServerAccess
• AWSSecurityHubFindings
• AWSVPCFlow
• AWSWAF
• AZFWApplicationRule
• AZFWApplicationRuleAggregation
• AZFWDnsFlowTrace
• AZFWDnsQuery
• AZFWFatFlow
• AZFWIdpsSignature
• AZFWInternalFqdnResolutionFailure
• AZFWNatRule
• AZFWNatRuleAggregation
• AZFWNetworkRule
• AZFWNetworkRuleAggregation
• AZFWThreatIntel
• AggregatedSecurityAlert
• AlertEvidence
• AlertInfo
• Anomalies
• AppServiceServerlessSecurityPluginData
• AuditLogs
• AzureActivity
• AzureDiagnostics
• BehaviorAnalytics
• BehaviorEntities
• BehaviorInfo
• CampaignInfo
• CloudAppEvents
• CommonSecurityLog
• CommunicationComplianceActivity
• ConfidentialWatchlist
• CrowdStrikeAlerts
• CrowdStrikeDetections
• CrowdStrikeHosts
• CrowdStrikeIncidents
• CrowdStrikeVulnerabilities
• DSMDataClassificationLogs
• DSMDataLabelingLogs
• DataverseActivity
• DeviceBehaviorEntities
• DeviceBehaviorInfo
• DeviceCustomFileEvents
• DeviceCustomImageLoadEvents
• DeviceCustomNetworkEvents
• DeviceCustomProcessEvents
• DeviceCustomScriptEvents
• DeviceEvents
• DeviceFileCertificateInfo
• DeviceFileEvents
• DeviceImageLoadEvents
• DeviceInfo
• DeviceLogonEvents
• DeviceNetworkEvents
• DeviceNetworkInfo
• DeviceProcessEvents
• DeviceRegistryEvents
• DeviceTvmSecureConfigurationAssessment
• DeviceTvmSecureConfigurationAssessmentKB
• DeviceTvmSoftwareInventory
• DeviceTvmSoftwareVulnerabilities
• DeviceTvmSoftwareVulnerabilitiesKB
• DnsAuditEvents
• DynamicEventCollection
• EmailAttachmentInfo
• EmailEvents
• EmailPostDeliveryEvents
• EmailUrlInfo
• EnrichedMicrosoft365AuditLogs
• Event
• FileMaliciousContentInfo
• GCPApigee
• GCPAuditLogs
• GCPCDN
• GCPCloudRun
• GCPCloudSQL
• GCPComputeEngine
• GCPDNS
• GCPFirewallLogs
• GCPIAM
• GCPIDS
• GCPLoadBalancer
• GCPMonitoring
• GCPNAT
• GCPNATAudit
• GCPResourceManager
• GCPVPCFlow
• GKEAPIServer
• GKEApplication
• GKEAudit
• GKEControllerManager
• GKEHPADecision
• GKEScheduler
• GoogleCloudSCC
• GoogleWorkspaceReports
• HDInsightSecurityLogs
• HuntingBookmark
• IdentityDirectoryEvents
• IdentityLogonEvents
• IdentityQueryEvents
• IlumioInsights
• LLMActivity
• LinuxAuditLog
• MDCDetectionDNSEvents
• MDCDetectionFimEvents
• MDCDetectionGatingValidationEvents
• MDCDetectionK8SApiEvents
• MDCDetectionProcessV2Events
• MDCFileIntegrityMonitoringEvents
• MDECustomCollectionDeviceFileEvents
• McasShadowItReporting
• MicrosoftGraphActivityLogs
• MicrosoftPurviewInformationProtection
• MicrosoftServicePrincipalSignInLogs
• NCBMBreakGlassAuditLogs
• NCBMSecurityDefenderLogs
• NCBMSecurityLogs
• NSPAccessLogs
• NetworkAccessAlerts
• NetworkAccessConnectionEvents
• NetworkAccessGenerativeAIInsights
• NetworkAccessTraffic
• NetworkSessions
• OfficeActivity
• OktaSystemLogs
• PowerAppsActivity
• PowerAutomateActivity
• PowerBIActivity
• PowerPlatformAdminActivity
• PowerPlatformConnectorActivity
• PowerPlatformDlpActivity
• ProjectActivity
• ProtectionStatus
• PurviewDataSensitivityLogs
• RemoteNetworkHealthLogs
• SecurityAlert
• SecurityAttackPathData
• SecurityBaseline
• SecurityBaselineSummary
• SecurityDetection
• SecurityEvent
• SecurityIoTRawEvent
• SecurityRecommendation
• SentinelAudit
• SentinelBehaviorEntities
• SentinelBehaviorInfo
• SentinelHealth
• SigninLogs
• StorageMalwareScanningResults
• Syslog
• ThreatIntelExportOperation
• ThreatIntelIndicators
• ThreatIntelObjects
• ThreatIntelligenceIndicator
• Update
• UrlClickEvents
• UserAccessAnalytics
• UserPeerAnalytics
• Watchlist
• WindowsEvent
• WindowsFirewall
• WireData

Virtual Machines

• AutoscaleEvaluationsLog
• AutoscaleScaleActionsLog
• ComputerGroup
• DataSetOutput
• DataSetRuns
• ETWEvent
• Event
• Heartbeat
• InsightsMetrics
• Perf
• PerfInsightsFindings
• PerfInsightsImpactedResources
• PerfInsightsRun
• Syslog
• UpdateSummary
• VMBoundPort
• VMComputer
• VMConnection
• VMProcess
• W3CIISLog
• WVDAgentHealthStatus
• WireData

Workloads

• ADAssessmentRecommendation
• ADReplicationResult
• ADSecurityAssessmentRecommendation
• AzureAssessmentRecommendation
• DeviceAppCrash
• DeviceAppLaunch
• DeviceCalendar
• DeviceCleanup
• DeviceConnectSession
• DeviceEtw
• DeviceHardwareHealth
• DeviceHealth
• DeviceHeartbeat
• DeviceSkypeHeartbeat
• DeviceSkypeSignIn
• ExchangeAssessmentRecommendation
• ExchangeOnlineAssessmentRecommendation
• SCCMAssessmentRecommendation
• SCOMAssessmentRecommendation
• SPAssessmentRecommendation
• SQLAssessmentRecommendation
• SfBAssessmentRecommendation
• SfBOnlineAssessmentRecommendation
• SharePointOnlineAssessmentRecommendation
• SqlVulnerabilityAssessmentResult
• WindowsClientAssessmentRecommendation
• WindowsServerAssessmentRecommendation
• WorkloadDiagnosticLogs
• WorkloadMonitoringPerf