Share via

Intelligence Packs - List

  • Reference
Service:
Log Analytics
API Version:
2023-09-01

Lists all the intelligence packs possible and whether they are enabled or disabled for a given workspace.

GET https://management.azure.com/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks?api-version=2023-09-01

URI Parameters

Name In Required Type Description
resourceGroupName
 path True

string

The name of the resource group. The name is case insensitive.
subscriptionId
 path True

string

The ID of the target subscription.
workspaceName
 path True

string

The name of the workspace.

Regex pattern: ^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$
api-version
 query True

string

The API version to use for this operation.

Responses

Name Type Description
200 OK

IntelligencePack[]

OK response definition.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

IntelligencePacksList

Sample request

GET https://management.azure.com/subscriptions/00000000-0000-0000-0000-00000000000/resourcegroups/rg1/providers/Microsoft.OperationalInsights/workspaces/TestLinkWS/intelligencePacks?api-version=2023-09-01

Sample response

Status code:
200 
[
  {
    "name": "CapacityPerformance",
    "enabled": false,
    "displayName": "Capacity and Performance"
  },
  {
    "name": "AzureWebAppsAnalytics",
    "enabled": false,
    "displayName": "Azure Web Apps Analytics (Preview)"
  },
  {
    "name": "Security",
    "enabled": false,
    "displayName": "Security and Audit"
  },
  {
    "name": "Updates",
    "enabled": false,
    "displayName": "Update Management"
  },
  {
    "name": "AntiMalware",
    "enabled": false,
    "displayName": "Antimalware Assessment"
  },
  {
    "name": "LogManagement",
    "enabled": true,
    "displayName": "Log Management"
  },
  {
    "name": "ChangeTracking",
    "enabled": true,
    "displayName": "Change Tracking"
  },
  {
    "name": "SQLAssessment",
    "enabled": false,
    "displayName": "SQL Assessment"
  },
  {
    "name": "SCOMAssessment",
    "enabled": false,
    "displayName": "System Center Operations Manager Assessment (Preview)"
  },
  {
    "name": "ServiceDesk",
    "enabled": false,
    "displayName": "IT Service Management Connector(Preview)"
  },
  {
    "name": "ADAssessment",
    "enabled": false,
    "displayName": "AD Assessment"
  },
  {
    "name": "AlertManagement",
    "enabled": false,
    "displayName": "Alert Management"
  },
  {
    "name": "AzureAutomation",
    "enabled": false,
    "displayName": "Azure Automation"
  },
  {
    "name": "WireData",
    "enabled": false,
    "displayName": "Wire Data"
  },
  {
    "name": "SiteRecovery",
    "enabled": true,
    "displayName": "Azure Site Recovery"
  },
  {
    "name": "Backup",
    "enabled": false,
    "displayName": "Backup"
  },
  {
    "name": "SurfaceHub",
    "enabled": false,
    "displayName": "Surface Hub"
  },
  {
    "name": "NetworkMonitoring",
    "enabled": false,
    "displayName": "Network Performance Monitor"
  },
  {
    "name": "Containers",
    "enabled": false,
    "displayName": "Container Monitoring Solution"
  },
  {
    "name": "ServiceMap",
    "enabled": false,
    "displayName": "Service Map"
  },
  {
    "name": "AzureNetworking",
    "enabled": false,
    "displayName": "Azure Networking Analytics (Deprecated)"
  },
  {
    "name": "ADReplication",
    "enabled": false,
    "displayName": "AD Replication Status"
  },
  {
    "name": "Office365",
    "enabled": false,
    "displayName": "Office 365 (Preview)"
  },
  {
    "name": "CompatibilityAssessment",
    "enabled": false,
    "displayName": "Upgrade Readiness"
  },
  {
    "name": "KeyVault",
    "enabled": false,
    "displayName": "Key Vault (Deprecated)"
  },
  {
    "name": "ServiceFabric",
    "enabled": false,
    "displayName": "Service Fabric"
  },
  {
    "name": "DnsAnalytics",
    "enabled": false,
    "displayName": "DNS Analytics (Preview)"
  },
  {
    "name": "ApplicationInsights",
    "enabled": false,
    "displayName": "Application Insights (Preview)"
  },
  {
    "name": "WireData2",
    "enabled": false,
    "displayName": "Wire Data 2.0"
  },
  {
    "name": "WaaSUpdateInsights",
    "enabled": false,
    "displayName": "Update Compliance (Preview)"
  },
  {
    "name": "AgentHealthAssessment",
    "enabled": false,
    "displayName": "Agent Health "
  },
  {
    "name": "AzureActivity",
    "enabled": false,
    "displayName": "Activity Log Analytics"
  },
  {
    "name": "HDInsight",
    "enabled": false,
    "displayName": "HDInsight HBase Monitoring (Preview)"
  },
  {
    "name": "HDInsightKafka",
    "enabled": false,
    "displayName": "HDInsight Kafka Monitoring"
  },
  {
    "name": "HDInsightSpark",
    "enabled": false,
    "displayName": "HDInsight Spark Monitoring"
  },
  {
    "name": "VMware",
    "enabled": false,
    "displayName": "VMware (Preview)"
  },
  {
    "name": "SecurityCenterFree",
    "enabled": false,
    "displayName": "Security Center Free � for Azure Resources only"
  },
  {
    "name": "LogicAppsManagement",
    "enabled": false,
    "displayName": "Logic Apps Management"
  },
  {
    "name": "LogicAppB2B",
    "enabled": false,
    "displayName": "Logic Apps B2B"
  },
  {
    "name": "AzureSQLAnalytics",
    "enabled": false,
    "displayName": "Azure SQL Analytics (Preview)"
  },
  {
    "name": "KeyVaultAnalytics",
    "enabled": false,
    "displayName": "Key Vault Analytics"
  },
  {
    "name": "AzureNSGAnalytics",
    "enabled": false,
    "displayName": "Azure Network Security Group Analytics"
  },
  {
    "name": "AzureAppGatewayAnalytics",
    "enabled": false,
    "displayName": "Azure Application Gateway Analytics"
  },
  {
    "name": "DeviceHealthProd",
    "enabled": false,
    "displayName": "Device Health (Preview)"
  },
  {
    "name": "WindowsDefenderATP",
    "enabled": false,
    "displayName": "Windows Defender ATP"
  },
  {
    "name": "ProcessInvestigator",
    "enabled": false,
    "displayName": "ProcessInvestigator"
  }
]

Definitions

IntelligencePack

Intelligence Pack containing a string name and boolean indicating if it's enabled.

Name Type Description
displayName

string

The display name of the intelligence pack.
enabled

boolean

The enabled boolean for the intelligence pack.
name

string

The name of the intelligence pack.