| AACAudit |
|
| AACHttpRequest |
|
| AADDomainServicesAccountLogon |
|
| AADDomainServicesAccountManagement |
|
| AADDomainServicesDirectoryServiceAccess |
|
| AADDomainServicesLogonLogoff |
|
| AADDomainServicesPolicyChange |
|
| AADDomainServicesPrivilegeUse |
|
| AADManagedIdentitySignInLogs |
|
| AADNonInteractiveUserSignInLogs |
|
| AADProvisioningLogs |
|
| AADRiskyUsers |
|
| AADServicePrincipalSignInLogs |
|
| AADUserRiskEvents |
|
| ABAPAuditLog |
|
| ABSBotRequests |
|
| ACSAuthIncomingOperations |
|
| ACSBillingUsage |
|
| ACSChatIncomingOperations |
|
| ACSSMSIncomingOperations |
|
| ADAssessmentRecommendation |
|
| AddonAzureBackupAlerts |
|
| AddonAzureBackupJobs |
|
| AddonAzureBackupPolicy |
|
| AddonAzureBackupProtectedInstance |
|
| AddonAzureBackupStorage |
|
| ADFActivityRun |
|
| ADFAirflowSchedulerLogs |
|
| ADFAirflowTaskLogs |
|
| ADFAirflowWebLogs |
|
| ADFAirflowWorkerLogs |
|
| ADFPipelineRun |
|
| ADFSandboxActivityRun |
|
| ADFSandboxPipelineRun |
|
| ADFSSignInLogs |
|
| ADFSSISIntegrationRuntimeLogs |
|
| ADFSSISPackageEventMessageContext |
|
| ADFSSISPackageEventMessages |
|
| ADFSSISPackageExecutableStatistics |
|
| ADFSSISPackageExecutionComponentPhases |
|
| ADFSSISPackageExecutionDataStatistics |
|
| ADFTriggerRun |
|
| ADPAudit |
|
| ADPDiagnostics |
|
| ADPRequests |
|
| ADReplicationResult |
|
| ADSecurityAssessmentRecommendation |
|
| ADTDigitalTwinsOperation |
|
| ADTModelsOperation |
|
| ADTQueryOperation |
|
| ADXCommand |
|
| ADXJournal |
|
| ADXQuery |
|
| ADXTableDetails |
|
| ADXTableUsageStatistics |
|
| AegDeliveryFailureLogs |
|
| AegPublishFailureLogs |
|
| AirflowDagProcessingLogs |
|
| Alerta |
|
| AlertEvidence |
|
| AlertInfo |
|
| AmlComputeClusterEvent |
|
| AmlComputeCpuGpuUtilization |
|
| AmlComputeInstanceEvent |
|
| AmlComputeJobEvent |
|
| AmlDataLabelEvent |
|
| AmlDataSetEvent |
|
| AmlDataStoreEvent |
|
| AmlDeploymentEvent |
|
| AmlEnvironmentEvent |
|
| AmlInferencingEvent |
|
| AmlModelsEvent |
|
| AmlOnlineEndpointConsoleLog |
|
| AmlPipelineEvent |
|
| AmlRunEvent |
|
| AmlRunStatusChangedEvent |
|
| Anomalias |
|
| ApiManagementGatewayLogs |
|
| AppAvailabilityResults |
|
| AppBrowserTimings |
|
| AppCenterError |
|
| AppDependencies |
|
| AppEvents |
|
| AppExceptions |
|
| AppMetrics |
|
| AppPageViews |
|
| AppPerformanceCounters |
|
| AppPlatformIngressLogs |
|
| AppPlatformLogsforSpring |
|
| AppPlatformSystemLogs |
|
| AppRequests |
|
| AppServiceAntivirusScanAuditLogs |
|
| AppServiceAppLogs |
|
| AppServiceAuditLogs |
|
| AppServiceConsoleLogs |
|
| AppServiceEnvironmentPlatformLogs |
|
| AppServiceFileAuditLogs |
|
| AppServiceHTTPLogs |
|
| AppServiceIPSecAuditLogs |
|
| AppServicePlatformLogs |
|
| AppSystemEvents |
|
| AppTraces |
|
| ASimAuditEventLogs |
|
| ASimAuthenticationEventLogs |
|
| ASimDhcpEventLogs |
|
| ASimDnsActivityLogs |
|
| ASimDnsAuditLogs |
|
| ASimFileEventLogs |
|
| ASimNetworkSessionLogs |
|
| ASimProcessEventLogs |
|
| ASimRegistryEventLogs |
|
| ASimUserManagementActivityLogs |
|
| ASimWebSessionLogs |
|
| AuditLogs |
|
| AutoscaleEvaluationsLog |
|
| AutoscaleScaleActionsLog |
|
| AWSCloudTrail |
|
| AWSCloudWatch |
|
| AWSGuardDuty |
|
| AWSVPCFlow |
|
| AzureAssessmentRecommendation |
|
| AzureDevOpsAuditing |
|
| BehaviorAnalytics |
|
| BlockchainApplicationLog |
|
| BlockchainProxyLog |
|
| CDBCassandraRequests |
|
| CDBControlPlaneRequests |
|
| CDBDataPlaneRequests |
|
| CDBGremlinRequests |
|
| CDBMongoRequests |
|
| CDBPartitionKeyRUConsumption |
|
| CDBPartitionKeyStatistics |
|
| CDBQueryRuntimeStatistics |
|
| CloudAppEvents |
|
| CommonSecurityLog |
|
| ComputerGroup |
|
| ConfigurationChange |
|
| ConfigurationData |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| ContainerImageInventory |
|
| ContainerInventory |
|
| ContainerLog |
|
| ContainerLogV2 |
|
| ContainerNodeInventory |
|
| ContainerRegistryLoginEvents |
|
| ContainerRegistryRepositoryEvents |
|
| ContainerServiceLog |
|
| CoreAzureBackup |
|
| DatabricksAccounts |
|
| DatabricksClusters |
|
| DatabricksDBFS |
|
| DatabricksFeatureStore |
|
| DatabricksGenie |
|
| DatabricksGlobalInitScripts |
|
| DatabricksInstancePools |
|
| DatabricksJobs |
|
| DatabricksMLflowAcledArtifact |
|
| DatabricksMLflowExperiment |
|
| DatabricksNotebook |
|
| DatabricksRemoteHistoryService |
|
| DatabricksSecrets |
|
| DatabricksSQLPermissions |
|
| DatabricksSSH |
|
| DatabricksWorkspace |
|
| Atividade do Dataverse |
|
| DefenderForSqlAlerts |
|
| DefenderForSqlTelemetry |
|
| DeviceEvents |
|
| DeviceFileCertificateInfo |
|
| DeviceFileEvents |
|
| DeviceImageLoadEvents |
|
| DeviceInfo |
|
| DeviceLogonEvents |
|
| DeviceNetworkEvents |
|
| DeviceNetworkInfo |
|
| DeviceProcessEvents |
|
| DeviceRegistryEvents |
|
| DeviceTvmSecureConfigurationAssessment |
|
| DeviceTvmSecureConfigurationAssessmentKB |
|
| DeviceTvmSoftwareInventory |
|
| DeviceTvmSoftwareVulnerabilities |
|
| DeviceTvmSoftwareVulnerabilitiesKB |
|
| DnsEvents |
|
| DnsInventory |
|
| DummyHydrationFact |
|
| DynamicEventCollection |
|
| Dynamics365Activity |
|
| EmailAttachmentInfo |
|
| EmailEvents |
|
| EmailPostDeliveryEvents |
|
| EmailUrlInfo |
|
| Evento |
Suporte parcial. Os dados que chegam do agente do Log Analytics (MMA) ou do Azure Monitor Agent (AMA) são totalmente suportados. Os dados que chegam da Extensão de Diagnóstico são coletados por meio do armazenamento do Azure. Esse caminho não é suportado. |
| ExchangeAssessmentRecommendation |
|
| ExchangeOnlineAssessmentRecommendation |
|
| FailedIngestion |
|
| FunctionAppLogs |
|
| GCPAuditLogs |
|
| GoogleCloudSCC |
|
| HDInsightAmbariClusterAlerts |
|
| HDInsightAmbariSystemMetrics |
|
| HDInsightHadoopAndYarnLogs |
|
| HDInsightHadoopAndYarnMetrics |
|
| HDInsightHBaseLogs |
|
| HDInsightHBaseMetrics |
|
| HDInsightHiveAndLLAPLogs |
|
| HDInsightHiveAndLLAPMetrics |
|
| HDInsightHiveTezAppStats |
|
| HDInsightKafkaLogs |
|
| HDInsightKafkaMetrics |
|
| HDInsightOozieLogs |
|
| HDInsightSecurityLogs |
|
| HDInsightSparkApplicationEvents |
|
| HDInsightSparkBlockManagerEvents |
|
| HDInsightSparkEnvironmentEvents |
|
| HDInsightSparkExecutorEvents |
|
| HDInsightSparkJobEvents |
|
| HDInsightSparkLogs |
|
| HDInsightSparkSQLExecutionEvents |
|
| HDInsightSparkStageEvents |
|
| HDInsightSparkStageTaskAccumulables |
|
| HDInsightSparkTaskEvents |
|
| HealthStateChangeEvent |
|
| HuntingBookmark |
|
| IdentityDirectoryEvents |
|
| IdentityInfo |
|
| IdentityLogonEvents |
|
| IdentityQueryEvents |
|
| InsightsMetrics |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| IntuneAuditLogs |
|
| IntuneDevices |
|
| IntuneOperationalLogs |
|
| KubeEvents |
|
| KubeHealth |
|
| KubeMonAgentEvents |
|
| KubeNodeInventory |
|
| KubePodInventory |
|
| KubePVInventory |
|
| KubeServices |
|
| LAQueryLogs |
|
| LinuxAuditLog |
|
| McasShadowItReporting |
|
| MCCEventLogs |
|
| MicrosoftAzureBastionAuditLogs |
|
| MicrosoftDataShareReceivedSnapshotLog |
|
| MicrosoftDataShareSentSnapshotLog |
|
| MicrosoftGraphActivityLogs |
|
| MicrosoftHealthcareApisAuditLogs |
|
| MicrosoftPurviewInformationProtection |
|
| NetworkAccessTraffic |
|
| NetworkMonitoring |
|
| NTAIpDetails |
|
| NTANetAnalytics |
|
| NTATopologyDetails |
|
| NWConnectionMonitorPathResult |
|
| NWConnectionMonitorTestResult |
|
| OfficeActivity |
|
| Perf |
Suporte parcial – somente os dados de desempenho do Windows têm suporte no momento. |
| Atividade do PowerApps |
|
| PowerAutomateActivity |
|
| PowerBIActivity |
|
| PowerBIDatasetsWorkspace |
|
| PowerPlatformAdminActivity |
|
| PowerPlatformConnectorActivity |
|
| PowerPlatformDlpActivity |
|
| ProcessInvestigator |
|
| ProjectActivity |
|
| ProtectionStatus |
|
| PurviewScanStatusLogs |
|
| RomeDetectionEvent |
|
| SCCMAssessmentRecommendation |
|
| SCOMAssessmentRecommendation |
|
| SecureScoreControls |
|
| SecureScores |
|
| SecurityAlert |
|
| SecurityBaseline |
|
| SecurityBaselineSummary |
|
| SecurityDetection |
|
| SecurityEvent |
Suporte parcial – os dados que chegam do agente de Log Analytics (MMA) ou Azure Monitor Agent (AMA) têm suporte completo. Os dados que chegam via agente de Extensão de Diagnóstico são coletados pelo armazenamento enquanto esse caminho não tem suporte. |
| SecurityIncident |
|
| SecurityIoTRawEvent |
|
| SecurityNestedRecommendation |
|
| SecurityRecommendation |
|
| SecurityRegulatoryCompliance |
|
| SentinelHealth |
|
| ServiceMap |
|
| SfBAssessmentRecommendation |
|
| SfBOnlineAssessmentRecommendation |
|
| SharePointOnlineAssessmentRecommendation |
|
| SignalRServiceDiagnosticLogs |
|
| SigninLogs |
|
| SPAssessmentRecommendation |
|
| SQLAssessmentRecommendation |
|
| SqlAtpStatus |
|
| SQLSecurityAuditEvents |
|
| SqlThreatProtectionLoginAudits |
|
| SqlVulnerabilityAssessmentResult |
|
| SqlVulnerabilityAssessmentScanStatus |
|
| StorageBlobLogs |
|
| StorageFileLogs |
|
| StorageInsightsAccountPropertiesDaily |
|
| StorageInsightsDailyMetrics |
|
| StorageInsightsHourlyMetrics |
|
| StorageInsightsMonthlyMetrics |
|
| StorageInsightsWeeklyMetrics |
|
| StorageQueueLogs |
|
| StorageTableLogs |
|
| SucceededIngestion |
|
| SynapseBigDataPoolApplicationsEnded |
|
| SynapseBuiltinSqlPoolRequestsEnded |
|
| SynapseDXFailedIngestion |
|
| SynapseDXSucceededIngestion |
|
| SynapseGatewayApiRequests |
|
| SynapseIntegrationActivityRuns |
|
| SynapseIntegrationPipelineRuns |
|
| SynapseIntegrationTriggerRuns |
|
| SynapseRbacOperations |
|
| SynapseSqlPoolDmsWorkers |
|
| SynapseSqlPoolExecRequests |
|
| SynapseSqlPoolRequestSteps |
|
| SynapseSqlPoolSqlRequests |
|
| SynapseSqlPoolWaits |
|
| Syslog |
Suporte parcial – os dados que chegam do agente de Log Analytics (MMA) ou Azure Monitor Agent (AMA) têm suporte completo. Os dados que chegam via agente de Extensão de Diagnóstico são coletados pelo armazenamento enquanto esse caminho não tem suporte. |
| ThreatIntelligenceIndicator |
|
| TSIIngress |
|
| UCClient |
|
| UCClientReadinessStatus |
|
| UCClientUpdateStatus |
|
| UCDeviceAlert |
|
| UCDOAggregatedStatus |
|
| UCDOStatus |
|
| UCServiceUpdateStatus |
|
| UCUpdateAlert |
|
| Atualização |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| UpdateRunProgress |
|
| UpdateSummary |
|
| UrlClickEvents |
|
| W3CIISLog |
Suporte parcial – os dados que chegam do agente de Log Analytics (MMA) ou Azure Monitor Agent (AMA) têm suporte completo. Os dados que chegam via agente de Extensão de Diagnóstico são coletados pelo armazenamento enquanto esse caminho não tem suporte. |
| WaaSDeploymentStatus |
|
| WaaSInsiderStatus |
|
| WaaSUpdateStatus |
|
| Watchlist |
|
| WebPubSubConnectivity |
|
| WebPubSubHttpRequest |
|
| WebPubSubMessaging |
|
| WindowsClientAssessmentRecommendation |
|
| WindowsEvent |
|
| WindowsFirewall |
|
| WindowsServerAssessmentRecommendation |
|
| WireData |
Suporte parcial – alguns dos dados são ingeridos por meio de serviços internos que não têm suporte. |
| WorkloadDiagnosticLogs |
|
| WUDOAggregatedStatus |
|
| WUDOStatus |
|
| WVDAgentHealthStatus |
|
| WVDCheckpoints |
|
| WVDConnectionNetworkData |
|
| WVDConnections |
|
| WVDErrors |
|
| WVDFeeds |
|
| WVDHostRegistrations |
|
| WVDManagement |
|