| AACAudit |
|
| AACHttpRequest |
|
| AADDomainServicesAccountLogon |
|
| AADDomainServicesAccountManagement |
|
| AADDomainServicesDirectoryServiceAccess |
|
| AADDomainServicesLogonLogoff |
|
| AADDomainServicesPolicyChange |
|
| AADDomainServicesPrivilegeUse |
|
| AADManagedIdentitySignInLogs |
|
| AADNonInteractiveUserSignInLogs |
|
| AADProvisioningLogs |
|
| AADRiskyUsers |
|
| AADServicePrincipalSignInLogs |
|
| AADUserRiskEvents |
|
| ABAPAuditLog |
|
| ABSBotRequests |
|
| ACSAuthIncomingOperations |
|
| ACSBillingUsage |
|
| ACSChatIncomingOperations |
|
| ACSSMSIncomingOperations |
|
| ADAssessmentRecommendation |
|
| AddonAzureBackupAlerts |
|
| AddonAzureBackupJobs |
|
| AddonAzureBackupPolicy |
|
| AddonAzureBackupProtectedInstance |
|
| AddonAzureBackupStorage |
|
| ADFActivityRun |
|
| ADFAirflowSchedulerLogs |
|
| ADFAirflowTaskLogs |
|
| ADFAirflowWebLogs |
|
| ADFAirflowWorkerLogs |
|
| ADFPipelineRun |
|
| ADFSandboxActivityRun |
|
| ADFSandboxPipelineRun |
|
| ADFSSignInLogs |
|
| ADFSSISIntegrationRuntimeLogs |
|
| ADFSSISPackageEventMessageContext |
|
| ADFSSISPackageEventMessages |
|
| ADFSSISPackageExecutableStatistics |
|
| ADFSSISPackageExecutionComponentPhases |
|
| ADFSSISPackageExecutionDataStatistics |
|
| ADFTriggerRun |
|
| ADPAudit |
|
| ADPDiagnostics |
|
| ADPRequests |
|
| ADReplicationResult |
|
| ADSecurityAssessmentRecommendation |
|
| ADTDigitalTwinsOperation |
|
| ADTModelsOperation |
|
| ADTQueryOperation |
|
| ADXCommand |
|
| ADXJournal |
|
| ADXQuery |
|
| ADXTableDetails |
|
| ADXTableUsageStatistics |
|
| AegDeliveryFailureLogs |
|
| AegPublishFailureLogs |
|
| AirflowDagProcessingLogs |
|
| Alert |
|
| AlertEvidence |
|
| AlertInfo |
|
| AmlComputeClusterEvent |
|
| AmlComputeCpuGpuUtilization |
|
| AmlComputeInstanceEvent |
|
| AmlComputeJobEvent |
|
| AmlDataLabelEvent |
|
| AmlDataSetEvent |
|
| AmlDataStoreEvent |
|
| AmlDeploymentEvent |
|
| AmlEnvironmentEvent |
|
| AmlInferencingEvent |
|
| AmlModelsEvent |
|
| AmlOnlineEndpointConsoleLog |
|
| AmlPipelineEvent |
|
| AmlRunEvent |
|
| AmlRunStatusChangedEvent |
|
| Anomalies |
|
| ApiManagementGatewayLogs |
|
| AppAvailabilityResults |
|
| AppBrowserTimings |
|
| AppCenterError |
|
| AppDependencies |
|
| AppEvents |
|
| AppExceptions |
|
| AppMetrics |
|
| AppPageViews |
|
| AppPerformanceCounters |
|
| AppPlatformIngressLogs |
|
| AppPlatformLogsforSpring |
|
| AppPlatformSystemLogs |
|
| AppRequests |
|
| AppServiceAntivirusScanAuditLogs |
|
| AppServiceAppLogs |
|
| AppServiceAuditLogs |
|
| AppServiceConsoleLogs |
|
| AppServiceEnvironmentPlatformLogs |
|
| AppServiceFileAuditLogs |
|
| AppServiceHTTPLogs |
|
| AppServiceIPSecAuditLogs |
|
| AppServicePlatformLogs |
|
| AppSystemEvents |
|
| AppTraces |
|
| ASimAuditEventLogs |
|
| ASimAuthenticationEventLogs |
|
| ASimDhcpEventLogs |
|
| ASimDnsActivityLogs |
|
| ASimDnsAuditLogs |
|
| ASimFileEventLogs |
|
| ASimNetworkSessionLogs |
|
| ASimProcessEventLogs |
|
| ASimRegistryEventLogs |
|
| ASimUserManagementActivityLogs |
|
| ASimWebSessionLogs |
|
| AuditLogs |
|
| AutoscaleEvaluationsLog |
|
| AutoscaleScaleActionsLog |
|
| AWSCloudTrail |
|
| AWSCloudWatch |
|
| AWSGuardDuty |
|
| AWSVPCFlow |
|
| AzureAssessmentRecommendation |
|
| AzureDevOpsAuditing |
|
| BehaviorAnalytics |
|
| BlockchainApplicationLog |
|
| BlockchainProxyLog |
|
| CDBCassandraRequests |
|
| CDBControlPlaneRequests |
|
| CDBDataPlaneRequests |
|
| CDBGremlinRequests |
|
| CDBMongoRequests |
|
| CDBPartitionKeyRUConsumption |
|
| CDBPartitionKeyStatistics |
|
| CDBQueryRuntimeStatistics |
|
| CloudAppEvents |
|
| CommonSecurityLog |
|
| ComputerGroup |
|
| ConfigurationChange |
|
| ConfigurationData |
Prise en charge partielle : certaines données sont ingérées par le biais de services internes qui ne sont pas pris en charge. |
| ContainerImageInventory |
|
| ContainerInventory |
|
| ContainerLog |
|
| ContainerLogV2 |
|
| ContainerNodeInventory |
|
| ContainerRegistryLoginEvents |
|
| ContainerRegistryRepositoryEvents |
|
| ContainerServiceLog |
|
| CoreAzureBackup |
|
| DatabricksAccounts |
|
| DatabricksClusters |
|
| DatabricksDBFS |
|
| DatabricksFeatureStore |
|
| DatabricksGenie |
|
| DatabricksGlobalInitScripts |
|
| DatabricksInstancePools |
|
| DatabricksJobs |
|
| DatabricksMLflowAcledArtifact |
|
| DatabricksMLflowExperiment |
|
| DatabricksNotebook |
|
| DatabricksRemoteHistoryService |
|
| DatabricksSecrets |
|
| DatabricksSQLPermissions |
|
| DatabricksSSH |
|
| DatabricksWorkspace |
|
| DataverseActivity |
|
| DefenderForSqlAlerts |
|
| DefenderForSqlTelemetry |
|
| DeviceEvents |
|
| DeviceFileCertificateInfo |
|
| DeviceFileEvents |
|
| DeviceImageLoadEvents |
|
| DeviceInfo |
|
| DeviceLogonEvents |
|
| DeviceNetworkInfo |
|
| DeviceNetworkInfo |
|
| DeviceProcessEvents |
|
| DeviceRegistryEvents |
|
| DeviceTvmSecureConfigurationAssessment |
|
| DeviceTvmSecureConfigurationAssessmentKB |
|
| DeviceTvmSoftwareInventory |
|
| DeviceTvmSoftwareVulnerabilities |
|
| DeviceTvmSoftwareVulnerabilitiesKB |
|
| DnsEvents |
|
| DnsInventory |
|
| DummyHydrationFact |
|
| DynamicEventCollection |
|
| Dynamics365Activity |
|
| EmailAttachmentInfo |
|
| EmailEvents |
|
| EmailPostDeliveryEvents |
|
| EmailUrlInfo |
|
| Event |
Prise en charge partielle . Les données provenant de l’agent Log Analytics (MMA) ou de l’agent Azure Monitor (AMA) sont entièrement prises en charge. Les données provenant de l’extension Diagnostics sont collectées via le stockage Azure. Ce chemin n’est pas pris en charge. |
| ExchangeAssessmentRecommendation |
|
| ExchangeOnlineAssessmentRecommendation |
|
| FailedIngestion |
|
| FunctionAppLogs |
|
| GCPAuditLogs |
|
| GoogleCloudSCC |
|
| HDInsightAmbariClusterAlerts |
|
| HDInsightAmbariSystemMetrics |
|
| HDInsightHadoopAndYarnLogs |
|
| HDInsightHadoopAndYarnMetrics |
|
| HDInsightHBaseLogs |
|
| HDInsightHBaseMetrics |
|
| HDInsightHiveAndLLAPLogs |
|
| HDInsightHiveAndLLAPMetrics |
|
| HDInsightHiveTezAppStats |
|
| HDInsightKafkaLogs |
|
| HDInsightKafkaMetrics |
|
| HDInsightOozieLogs |
|
| HDInsightSecurityLogs |
|
| HDInsightSparkApplicationEvents |
|
| HDInsightSparkBlockManagerEvents |
|
| HDInsightSparkEnvironmentEvents |
|
| HDInsightSparkExecutorEvents |
|
| HDInsightSparkJobEvents |
|
| HDInsightSparkLogs |
|
| HDInsightSparkSQLExecutionEvents |
|
| HDInsightSparkStageEvents |
|
| HDInsightSparkStageTaskAccumulables |
|
| HDInsightSparkTaskEvents |
|
| HealthStateChangeEvent |
|
| HuntingBookmark |
|
| IdentityDirectoryEvents |
|
| IdentityInfo |
|
| IdentityLogonEvents |
|
| IdentityQueryEvents |
|
| InsightsMetrics |
Prise en charge partielle : certaines données sont ingérées par le biais de services internes qui ne sont pas pris en charge. |
| IntuneAuditLogs |
|
| IntuneDevices |
|
| IntuneOperationalLogs |
|
| KubeEvents |
|
| KubeHealth |
|
| KubeMonAgentEvents |
|
| KubeNodeInventory |
|
| KubePodInventory |
|
| KubePVInventory |
|
| KubeServices |
|
| LAQueryLogs |
|
| LinuxAuditLog |
|
| McasShadowItReporting |
|
| MCCEventLogs |
|
| MicrosoftAzureBastionAuditLogs |
|
| MicrosoftDataShareReceivedSnapshotLog |
|
| MicrosoftDataShareSentSnapshotLog |
|
| MicrosoftGraphActivityLogs |
|
| MicrosoftHealthcareApisAuditLogs |
|
| MicrosoftPurviewInformationProtection |
|
| NetworkAccessTraffic |
|
| NetworkMonitoring |
|
| NTAIpDetails |
|
| NTANetAnalytics |
|
| NTATopologyDetails |
|
| NWConnectionMonitorPathResult |
|
| NWConnectionMonitorTestResult |
|
| OfficeActivity |
|
| Perf |
Prise en charge partielle : Seules les données de performances Windows sont actuellement prises en charge. |
| PowerAppsActivity |
|
| PowerAutomateActivity |
|
| PowerBIActivity |
|
| PowerBIDatasetsWorkspace |
|
| PowerPlatformAdminActivity |
|
| PowerPlatformConnectorActivity |
|
| PowerPlatformDlpActivity |
|
| ProcessInvestigator |
|
| ProjectActivity |
|
| ProtectionStatus |
|
| PurviewScanStatusLogs |
|
| RomeDetectionEvent |
|
| SCCMAssessmentRecommendation |
|
| SCOMAssessmentRecommendation |
|
| SecureScoreControls |
|
| SecureScores |
|
| SecurityAlert |
|
| SecurityBaseline |
|
| SecurityBaselineSummary |
|
| SecurityDetection |
|
| SecurityEvent |
Prise en charge partielle : les données provenant de l’agent Microsoft Monitoring Agent (MMA) ou de l’agent Azure Monitor (AMA) sont entièrement prises en charge. Les données arrivant via l’agent Diagnostics Extension sont collectées par le biais du stockage alors que ce chemin n’est pas pris en charge. |
| SecurityIncident |
|
| SecurityIoTRawEvent |
|
| SecurityNestedRecommendation |
|
| SecurityRecommendation |
|
| SecurityRegulatoryCompliance |
|
| SentinelHealth |
|
| ServiceMap |
|
| SfBAssessmentRecommendation |
|
| SfBOnlineAssessmentRecommendation |
|
| SharePointOnlineAssessmentRecommendation |
|
| SignalRServiceDiagnosticLogs |
|
| SigninLogs |
|
| SPAssessmentRecommendation |
|
| SQLAssessmentRecommendation |
|
| SqlAtpStatus |
|
| SQLSecurityAuditEvents |
|
| SqlThreatProtectionLoginAudits |
|
| SqlVulnerabilityAssessmentResult |
|
| SqlVulnerabilityAssessmentScanStatus |
|
| StorageBlobLogs |
|
| StorageFileLogs |
|
| StorageInsightsAccountPropertiesDaily |
|
| StorageInsightsDailyMetrics |
|
| StorageInsightsHourlyMetrics |
|
| StorageInsightsMonthlyMetrics |
|
| StorageInsightsWeeklyMetrics |
|
| StorageQueueLogs |
|
| StorageTableLogs |
|
| SucceededIngestion |
|
| SynapseBigDataPoolApplicationsEnded |
|
| SynapseBuiltinSqlPoolRequestsEnded |
|
| SynapseDXFailedIngestion |
|
| SynapseDXSucceededIngestion |
|
| SynapseGatewayApiRequests |
|
| SynapseIntegrationActivityRuns |
|
| SynapseIntegrationPipelineRuns |
|
| SynapseIntegrationTriggerRuns |
|
| SynapseRbacOperations |
|
| SynapseSqlPoolDmsWorkers |
|
| SynapseSqlPoolExecRequests |
|
| SynapseSqlPoolRequestSteps |
|
| SynapseSqlPoolSqlRequests |
|
| SynapseSqlPoolWaits |
|
| Syslog |
Prise en charge partielle : les données provenant de l’agent Microsoft Monitoring Agent (MMA) ou de l’agent Azure Monitor (AMA) sont entièrement prises en charge. Les données arrivant via l’agent Diagnostics Extension sont collectées par le biais du stockage alors que ce chemin n’est pas pris en charge. |
| ThreatIntelligenceIndicator |
|
| TSIIngress |
|
| UCClient |
|
| UCClientReadinessStatus |
|
| UCClientUpdateStatus |
|
| UCDeviceAlert |
|
| UCDOAggregatedStatus |
|
| UCDOStatus |
|
| UCServiceUpdateStatus |
|
| UCUpdateAlert |
|
| Mettre à jour |
Prise en charge partielle : certaines données sont ingérées par le biais de services internes qui ne sont pas pris en charge. |
| UpdateRunProgress |
|
| UpdateSummary |
|
| UrlClickEvents |
|
| W3CIISLog |
Prise en charge partielle : les données provenant de l’agent Microsoft Monitoring Agent (MMA) ou de l’agent Azure Monitor (AMA) sont entièrement prises en charge. Les données arrivant via l’agent Diagnostics Extension sont collectées par le biais du stockage alors que ce chemin n’est pas pris en charge. |
| WaaSDeploymentStatus |
|
| WaaSInsiderStatus |
|
| WaaSUpdateStatus |
|
| Liste de surveillance |
|
| WebPubSubConnectivity |
|
| WebPubSubHttpRequest |
|
| WebPubSubMessaging |
|
| WindowsClientAssessmentRecommendation |
|
| WindowsEvent |
|
| WindowsFirewall |
|
| WindowsServerAssessmentRecommendation |
|
| WireData |
Prise en charge partielle : certaines données sont ingérées par le biais de services internes qui ne sont pas pris en charge. |
| WorkloadDiagnosticLogs |
|
| WUDOAggregatedStatus |
|
| WUDOStatus |
|
| WVDAgentHealthStatus |
|
| WVDCheckpoints |
|
| WVDConnectionNetworkData |
|
| WVDConnections |
|
| WVDErrors |
|
| WVDFeeds |
|
| WVDHostRegistrations |
|
| WVDManagement |
|