Azure Native v2.47.1, Jun 24 24

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.47.1 published on Monday, Jun 24, 2024 by Pulumi

pulumi/pulumi-azure-native

azure-native.insights.DataCollectionRule

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.47.1 published on Monday, Jun 24, 2024 by Pulumi

pulumi/pulumi-azure-native

Example Usage

Create or update data collection rule

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var dataCollectionRule = new AzureNative.Insights.DataCollectionRule("dataCollectionRule", new()
    {
        DataCollectionRuleName = "myCollectionRule",
        DataFlows = new[]
        {
            new AzureNative.Insights.Inputs.DataFlowArgs
            {
                Destinations = new[]
                {
                    "centralWorkspace",
                },
                Streams = new[]
                {
                    AzureNative.Insights.KnownDataFlowStreams.Microsoft_Perf,
                    AzureNative.Insights.KnownDataFlowStreams.Microsoft_Syslog,
                    AzureNative.Insights.KnownDataFlowStreams.Microsoft_WindowsEvent,
                },
            },
        },
        DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
        {
            PerformanceCounters = new[]
            {
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Processor(_Total)\\% Processor Time",
                        "\\Memory\\Committed Bytes",
                        "\\LogicalDisk(_Total)\\Free Megabytes",
                        "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                    },
                    Name = "cloudTeamCoreCounters",
                    SamplingFrequencyInSeconds = 15,
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf,
                    },
                },
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Process(_Total)\\Thread Count",
                    },
                    Name = "appTeamExtraCounters",
                    SamplingFrequencyInSeconds = 30,
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf,
                    },
                },
            },
            Syslog = new[]
            {
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceFacilityNames.Cron,
                    },
                    LogLevels = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Debug,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Critical,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Emergency,
                    },
                    Name = "cronSyslog",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceStreams.Microsoft_Syslog,
                    },
                },
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceFacilityNames.Syslog,
                    },
                    LogLevels = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Alert,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Critical,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Emergency,
                    },
                    Name = "syslogBase",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceStreams.Microsoft_Syslog,
                    },
                },
            },
            WindowsEventLogs = new[]
            {
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "cloudSecurityTeamEvents",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent,
                    },
                    XPathQueries = new[]
                    {
                        "Security!",
                    },
                },
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "appTeam1AppEvents",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent,
                    },
                    XPathQueries = new[]
                    {
                        "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                        "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                    },
                },
            },
        },
        Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
        {
            LogAnalytics = new[]
            {
                new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
                {
                    Name = "centralWorkspace",
                    WorkspaceResourceId = "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
                },
            },
        },
        Location = "eastus",
        ResourceGroupName = "myResourceGroup",
    });

});

package main

import (
	insights "github.com/pulumi/pulumi-azure-native-sdk/insights/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := insights.NewDataCollectionRule(ctx, "dataCollectionRule", &insights.DataCollectionRuleArgs{
			DataCollectionRuleName: pulumi.String("myCollectionRule"),
			DataFlows: insights.DataFlowArray{
				&insights.DataFlowArgs{
					Destinations: pulumi.StringArray{
						pulumi.String("centralWorkspace"),
					},
					Streams: pulumi.StringArray{
						pulumi.String(insights.KnownDataFlowStreams_Microsoft_Perf),
						pulumi.String(insights.KnownDataFlowStreams_Microsoft_Syslog),
						pulumi.String(insights.KnownDataFlowStreams_Microsoft_WindowsEvent),
					},
				},
			},
			DataSources: &insights.DataCollectionRuleDataSourcesArgs{
				PerformanceCounters: insights.PerfCounterDataSourceArray{
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Processor(_Total)\\% Processor Time"),
							pulumi.String("\\Memory\\Committed Bytes"),
							pulumi.String("\\LogicalDisk(_Total)\\Free Megabytes"),
							pulumi.String("\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
						},
						Name:                       pulumi.String("cloudTeamCoreCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(15),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownPerfCounterDataSourceStreams_Microsoft_Perf),
						},
					},
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Process(_Total)\\Thread Count"),
						},
						Name:                       pulumi.String("appTeamExtraCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(30),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownPerfCounterDataSourceStreams_Microsoft_Perf),
						},
					},
				},
				Syslog: insights.SyslogDataSourceArray{
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceFacilityNamesCron),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsDebug),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsCritical),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsEmergency),
						},
						Name: pulumi.String("cronSyslog"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceStreams_Microsoft_Syslog),
						},
					},
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceFacilityNamesSyslog),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsAlert),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsCritical),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsEmergency),
						},
						Name: pulumi.String("syslogBase"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceStreams_Microsoft_Syslog),
						},
					},
				},
				WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("cloudSecurityTeamEvents"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("Security!"),
						},
					},
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("appTeam1AppEvents"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("System![System[(Level = 1 or Level = 2 or Level = 3)]]"),
							pulumi.String("Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]"),
						},
					},
				},
			},
			Destinations: &insights.DataCollectionRuleDestinationsArgs{
				LogAnalytics: insights.LogAnalyticsDestinationArray{
					&insights.LogAnalyticsDestinationArgs{
						Name:                pulumi.String("centralWorkspace"),
						WorkspaceResourceId: pulumi.String("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace"),
					},
				},
			},
			Location:          pulumi.String("eastus"),
			ResourceGroupName: pulumi.String("myResourceGroup"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.insights.DataCollectionRule;
import com.pulumi.azurenative.insights.DataCollectionRuleArgs;
import com.pulumi.azurenative.insights.inputs.DataFlowArgs;
import com.pulumi.azurenative.insights.inputs.DataCollectionRuleDataSourcesArgs;
import com.pulumi.azurenative.insights.inputs.DataCollectionRuleDestinationsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var dataCollectionRule = new DataCollectionRule("dataCollectionRule", DataCollectionRuleArgs.builder()
            .dataCollectionRuleName("myCollectionRule")
            .dataFlows(DataFlowArgs.builder()
                .destinations("centralWorkspace")
                .streams(                
                    "Microsoft-Perf",
                    "Microsoft-Syslog",
                    "Microsoft-WindowsEvent")
                .build())
            .dataSources(DataCollectionRuleDataSourcesArgs.builder()
                .performanceCounters(                
                    PerfCounterDataSourceArgs.builder()
                        .counterSpecifiers(                        
                            "\\Processor(_Total)\\% Processor Time",
                            "\\Memory\\Committed Bytes",
                            "\\LogicalDisk(_Total)\\Free Megabytes",
                            "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length")
                        .name("cloudTeamCoreCounters")
                        .samplingFrequencyInSeconds(15)
                        .streams("Microsoft-Perf")
                        .build(),
                    PerfCounterDataSourceArgs.builder()
                        .counterSpecifiers("\\Process(_Total)\\Thread Count")
                        .name("appTeamExtraCounters")
                        .samplingFrequencyInSeconds(30)
                        .streams("Microsoft-Perf")
                        .build())
                .syslog(                
                    SyslogDataSourceArgs.builder()
                        .facilityNames("cron")
                        .logLevels(                        
                            "Debug",
                            "Critical",
                            "Emergency")
                        .name("cronSyslog")
                        .streams("Microsoft-Syslog")
                        .build(),
                    SyslogDataSourceArgs.builder()
                        .facilityNames("syslog")
                        .logLevels(                        
                            "Alert",
                            "Critical",
                            "Emergency")
                        .name("syslogBase")
                        .streams("Microsoft-Syslog")
                        .build())
                .windowsEventLogs(                
                    WindowsEventLogDataSourceArgs.builder()
                        .name("cloudSecurityTeamEvents")
                        .streams("Microsoft-WindowsEvent")
                        .xPathQueries("Security!")
                        .build(),
                    WindowsEventLogDataSourceArgs.builder()
                        .name("appTeam1AppEvents")
                        .streams("Microsoft-WindowsEvent")
                        .xPathQueries(                        
                            "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                            "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]")
                        .build())
                .build())
            .destinations(DataCollectionRuleDestinationsArgs.builder()
                .logAnalytics(LogAnalyticsDestinationArgs.builder()
                    .name("centralWorkspace")
                    .workspaceResourceId("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace")
                    .build())
                .build())
            .location("eastus")
            .resourceGroupName("myResourceGroup")
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

data_collection_rule = azure_native.insights.DataCollectionRule("dataCollectionRule",
    data_collection_rule_name="myCollectionRule",
    data_flows=[azure_native.insights.DataFlowArgs(
        destinations=["centralWorkspace"],
        streams=[
            azure_native.insights.KnownDataFlowStreams.MICROSOFT_PERF,
            azure_native.insights.KnownDataFlowStreams.MICROSOFT_SYSLOG,
            azure_native.insights.KnownDataFlowStreams.MICROSOFT_WINDOWS_EVENT,
        ],
    )],
    data_sources=azure_native.insights.DataCollectionRuleDataSourcesArgs(
        performance_counters=[
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=[
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name="cloudTeamCoreCounters",
                sampling_frequency_in_seconds=15,
                streams=[azure_native.insights.KnownPerfCounterDataSourceStreams.MICROSOFT_PERF],
            ),
            azure_native.insights.PerfCounterDataSourceArgs(
                counter_specifiers=["\\Process(_Total)\\Thread Count"],
                name="appTeamExtraCounters",
                sampling_frequency_in_seconds=30,
                streams=[azure_native.insights.KnownPerfCounterDataSourceStreams.MICROSOFT_PERF],
            ),
        ],
        syslog=[
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=[azure_native.insights.KnownSyslogDataSourceFacilityNames.CRON],
                log_levels=[
                    azure_native.insights.KnownSyslogDataSourceLogLevels.DEBUG,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.CRITICAL,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.EMERGENCY,
                ],
                name="cronSyslog",
                streams=[azure_native.insights.KnownSyslogDataSourceStreams.MICROSOFT_SYSLOG],
            ),
            azure_native.insights.SyslogDataSourceArgs(
                facility_names=[azure_native.insights.KnownSyslogDataSourceFacilityNames.SYSLOG],
                log_levels=[
                    azure_native.insights.KnownSyslogDataSourceLogLevels.ALERT,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.CRITICAL,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.EMERGENCY,
                ],
                name="syslogBase",
                streams=[azure_native.insights.KnownSyslogDataSourceStreams.MICROSOFT_SYSLOG],
            ),
        ],
        windows_event_logs=[
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="cloudSecurityTeamEvents",
                streams=[azure_native.insights.KnownWindowsEventLogDataSourceStreams.MICROSOFT_WINDOWS_EVENT],
                x_path_queries=["Security!"],
            ),
            azure_native.insights.WindowsEventLogDataSourceArgs(
                name="appTeam1AppEvents",
                streams=[azure_native.insights.KnownWindowsEventLogDataSourceStreams.MICROSOFT_WINDOWS_EVENT],
                x_path_queries=[
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            ),
        ],
    ),
    destinations=azure_native.insights.DataCollectionRuleDestinationsArgs(
        log_analytics=[azure_native.insights.LogAnalyticsDestinationArgs(
            name="centralWorkspace",
            workspace_resource_id="/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        )],
    ),
    location="eastus",
    resource_group_name="myResourceGroup")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const dataCollectionRule = new azure_native.insights.DataCollectionRule("dataCollectionRule", {
    dataCollectionRuleName: "myCollectionRule",
    dataFlows: [{
        destinations: ["centralWorkspace"],
        streams: [
            azure_native.insights.KnownDataFlowStreams.Microsoft_Perf,
            azure_native.insights.KnownDataFlowStreams.Microsoft_Syslog,
            azure_native.insights.KnownDataFlowStreams.Microsoft_WindowsEvent,
        ],
    }],
    dataSources: {
        performanceCounters: [
            {
                counterSpecifiers: [
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name: "cloudTeamCoreCounters",
                samplingFrequencyInSeconds: 15,
                streams: [azure_native.insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf],
            },
            {
                counterSpecifiers: ["\\Process(_Total)\\Thread Count"],
                name: "appTeamExtraCounters",
                samplingFrequencyInSeconds: 30,
                streams: [azure_native.insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf],
            },
        ],
        syslog: [
            {
                facilityNames: [azure_native.insights.KnownSyslogDataSourceFacilityNames.Cron],
                logLevels: [
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Debug,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Critical,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Emergency,
                ],
                name: "cronSyslog",
                streams: [azure_native.insights.KnownSyslogDataSourceStreams.Microsoft_Syslog],
            },
            {
                facilityNames: [azure_native.insights.KnownSyslogDataSourceFacilityNames.Syslog],
                logLevels: [
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Alert,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Critical,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Emergency,
                ],
                name: "syslogBase",
                streams: [azure_native.insights.KnownSyslogDataSourceStreams.Microsoft_Syslog],
            },
        ],
        windowsEventLogs: [
            {
                name: "cloudSecurityTeamEvents",
                streams: [azure_native.insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent],
                xPathQueries: ["Security!"],
            },
            {
                name: "appTeam1AppEvents",
                streams: [azure_native.insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent],
                xPathQueries: [
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            },
        ],
    },
    destinations: {
        logAnalytics: [{
            name: "centralWorkspace",
            workspaceResourceId: "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        }],
    },
    location: "eastus",
    resourceGroupName: "myResourceGroup",
});

resources:
  dataCollectionRule:
    type: azure-native:insights:DataCollectionRule
    properties:
      dataCollectionRuleName: myCollectionRule
      dataFlows:
        - destinations:
            - centralWorkspace
          streams:
            - Microsoft-Perf
            - Microsoft-Syslog
            - Microsoft-WindowsEvent
      dataSources:
        performanceCounters:
          - counterSpecifiers:
              - \Processor(_Total)\% Processor Time
              - \Memory\Committed Bytes
              - \LogicalDisk(_Total)\Free Megabytes
              - \PhysicalDisk(_Total)\Avg. Disk Queue Length
            name: cloudTeamCoreCounters
            samplingFrequencyInSeconds: 15
            streams:
              - Microsoft-Perf
          - counterSpecifiers:
              - \Process(_Total)\Thread Count
            name: appTeamExtraCounters
            samplingFrequencyInSeconds: 30
            streams:
              - Microsoft-Perf
        syslog:
          - facilityNames:
              - cron
            logLevels:
              - Debug
              - Critical
              - Emergency
            name: cronSyslog
            streams:
              - Microsoft-Syslog
          - facilityNames:
              - syslog
            logLevels:
              - Alert
              - Critical
              - Emergency
            name: syslogBase
            streams:
              - Microsoft-Syslog
        windowsEventLogs:
          - name: cloudSecurityTeamEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - Security!
          - name: appTeam1AppEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - System![System[(Level = 1 or Level = 2 or Level = 3)]]
              - Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]
      destinations:
        logAnalytics:
          - name: centralWorkspace
            workspaceResourceId: /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace
      location: eastus
      resourceGroupName: myResourceGroup

Create DataCollectionRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);

@overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       resource_group_name: Optional[str] = None,
                       data_collection_endpoint_id: Optional[str] = None,
                       data_collection_rule_name: Optional[str] = None,
                       data_flows: Optional[Sequence[DataFlowArgs]] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       identity: Optional[DataCollectionRuleResourceIdentityArgs] = None,
                       kind: Optional[Union[str, KnownDataCollectionRuleResourceKind]] = None,
                       location: Optional[str] = None,
                       stream_declarations: Optional[Mapping[str, StreamDeclarationArgs]] = None,
                       tags: Optional[Mapping[str, str]] = None)

func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)

public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)

public DataCollectionRule(String name, DataCollectionRuleArgs args)
public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)

type: azure-native:insights:DataCollectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args DataCollectionRuleArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var dataCollectionRuleResource = new AzureNative.Insights.DataCollectionRule("dataCollectionRuleResource", new()
{
    ResourceGroupName = "string",
    DataCollectionEndpointId = "string",
    DataCollectionRuleName = "string",
    DataFlows = new[]
    {
        new AzureNative.Insights.Inputs.DataFlowArgs
        {
            BuiltInTransform = "string",
            Destinations = new[]
            {
                "string",
            },
            OutputStream = "string",
            Streams = new[]
            {
                "string",
            },
            TransformKql = "string",
        },
    },
    DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
    {
        DataImports = new AzureNative.Insights.Inputs.DataSourcesSpecDataImportsArgs
        {
            EventHub = new AzureNative.Insights.Inputs.DataImportSourcesEventHubArgs
            {
                ConsumerGroup = "string",
                Name = "string",
                Stream = "string",
            },
        },
        Extensions = new[]
        {
            new AzureNative.Insights.Inputs.ExtensionDataSourceArgs
            {
                ExtensionName = "string",
                ExtensionSettings = "any",
                InputDataSources = new[]
                {
                    "string",
                },
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
            },
        },
        IisLogs = new[]
        {
            new AzureNative.Insights.Inputs.IisLogsDataSourceArgs
            {
                Streams = new[]
                {
                    "string",
                },
                LogDirectories = new[]
                {
                    "string",
                },
                Name = "string",
            },
        },
        LogFiles = new[]
        {
            new AzureNative.Insights.Inputs.LogFilesDataSourceArgs
            {
                FilePatterns = new[]
                {
                    "string",
                },
                Format = "string",
                Streams = new[]
                {
                    "string",
                },
                Name = "string",
                Settings = new AzureNative.Insights.Inputs.LogFilesDataSourceSettingsArgs
                {
                    Text = new AzureNative.Insights.Inputs.LogFileSettingsTextArgs
                    {
                        RecordStartTimestampFormat = "string",
                    },
                },
            },
        },
        PerformanceCounters = new[]
        {
            new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
            {
                CounterSpecifiers = new[]
                {
                    "string",
                },
                Name = "string",
                SamplingFrequencyInSeconds = 0,
                Streams = new[]
                {
                    "string",
                },
            },
        },
        PlatformTelemetry = new[]
        {
            new AzureNative.Insights.Inputs.PlatformTelemetryDataSourceArgs
            {
                Streams = new[]
                {
                    "string",
                },
                Name = "string",
            },
        },
        PrometheusForwarder = new[]
        {
            new AzureNative.Insights.Inputs.PrometheusForwarderDataSourceArgs
            {
                LabelIncludeFilter = 
                {
                    { "string", "string" },
                },
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
            },
        },
        Syslog = new[]
        {
            new AzureNative.Insights.Inputs.SyslogDataSourceArgs
            {
                FacilityNames = new[]
                {
                    "string",
                },
                LogLevels = new[]
                {
                    "string",
                },
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
            },
        },
        WindowsEventLogs = new[]
        {
            new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
            {
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
                XPathQueries = new[]
                {
                    "string",
                },
            },
        },
        WindowsFirewallLogs = new[]
        {
            new AzureNative.Insights.Inputs.WindowsFirewallLogsDataSourceArgs
            {
                Streams = new[]
                {
                    "string",
                },
                Name = "string",
            },
        },
    },
    Description = "string",
    Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
    {
        AzureMonitorMetrics = new AzureNative.Insights.Inputs.DestinationsSpecAzureMonitorMetricsArgs
        {
            Name = "string",
        },
        EventHubs = new[]
        {
            new AzureNative.Insights.Inputs.EventHubDestinationArgs
            {
                EventHubResourceId = "string",
                Name = "string",
            },
        },
        EventHubsDirect = new[]
        {
            new AzureNative.Insights.Inputs.EventHubDirectDestinationArgs
            {
                EventHubResourceId = "string",
                Name = "string",
            },
        },
        LogAnalytics = new[]
        {
            new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
            {
                Name = "string",
                WorkspaceResourceId = "string",
            },
        },
        MonitoringAccounts = new[]
        {
            new AzureNative.Insights.Inputs.MonitoringAccountDestinationArgs
            {
                AccountResourceId = "string",
                Name = "string",
            },
        },
        StorageAccounts = new[]
        {
            new AzureNative.Insights.Inputs.StorageBlobDestinationArgs
            {
                ContainerName = "string",
                Name = "string",
                StorageAccountResourceId = "string",
            },
        },
        StorageBlobsDirect = new[]
        {
            new AzureNative.Insights.Inputs.StorageBlobDestinationArgs
            {
                ContainerName = "string",
                Name = "string",
                StorageAccountResourceId = "string",
            },
        },
        StorageTablesDirect = new[]
        {
            new AzureNative.Insights.Inputs.StorageTableDestinationArgs
            {
                Name = "string",
                StorageAccountResourceId = "string",
                TableName = "string",
            },
        },
    },
    Identity = new AzureNative.Insights.Inputs.DataCollectionRuleResourceIdentityArgs
    {
        Type = "string",
        UserAssignedIdentities = new[]
        {
            "string",
        },
    },
    Kind = "string",
    Location = "string",
    StreamDeclarations = 
    {
        { "string", new AzureNative.Insights.Inputs.StreamDeclarationArgs
        {
            Columns = new[]
            {
                new AzureNative.Insights.Inputs.ColumnDefinitionArgs
                {
                    Name = "string",
                    Type = AzureNative.Insights.KnownColumnDefinitionType.@String,
                },
            },
        } },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

example, err := insights.NewDataCollectionRule(ctx, "dataCollectionRuleResource", &insights.DataCollectionRuleArgs{
ResourceGroupName: pulumi.String("string"),
DataCollectionEndpointId: pulumi.String("string"),
DataCollectionRuleName: pulumi.String("string"),
DataFlows: insights.DataFlowArray{
&insights.DataFlowArgs{
BuiltInTransform: pulumi.String("string"),
Destinations: pulumi.StringArray{
pulumi.String("string"),
},
OutputStream: pulumi.String("string"),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
TransformKql: pulumi.String("string"),
},
},
DataSources: &insights.DataCollectionRuleDataSourcesArgs{
DataImports: &insights.DataSourcesSpecDataImportsArgs{
EventHub: &insights.DataImportSourcesEventHubArgs{
ConsumerGroup: pulumi.String("string"),
Name: pulumi.String("string"),
Stream: pulumi.String("string"),
},
},
Extensions: insights.ExtensionDataSourceArray{
&insights.ExtensionDataSourceArgs{
ExtensionName: pulumi.String("string"),
ExtensionSettings: pulumi.Any("any"),
InputDataSources: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
IisLogs: insights.IisLogsDataSourceArray{
&insights.IisLogsDataSourceArgs{
Streams: pulumi.StringArray{
pulumi.String("string"),
},
LogDirectories: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
LogFiles: insights.LogFilesDataSourceArray{
&insights.LogFilesDataSourceArgs{
FilePatterns: pulumi.StringArray{
pulumi.String("string"),
},
Format: pulumi.String("string"),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
Settings: &insights.LogFilesDataSourceSettingsArgs{
Text: &insights.LogFileSettingsTextArgs{
RecordStartTimestampFormat: pulumi.String("string"),
},
},
},
},
PerformanceCounters: insights.PerfCounterDataSourceArray{
&insights.PerfCounterDataSourceArgs{
CounterSpecifiers: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
SamplingFrequencyInSeconds: pulumi.Int(0),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
PlatformTelemetry: insights.PlatformTelemetryDataSourceArray{
&insights.PlatformTelemetryDataSourceArgs{
Streams: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
PrometheusForwarder: insights.PrometheusForwarderDataSourceArray{
&insights.PrometheusForwarderDataSourceArgs{
LabelIncludeFilter: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Syslog: insights.SyslogDataSourceArray{
&insights.SyslogDataSourceArgs{
FacilityNames: pulumi.StringArray{
pulumi.String("string"),
},
LogLevels: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
&insights.WindowsEventLogDataSourceArgs{
Name: pulumi.String("string"),
Streams: pulumi.StringArray{
pulumi.String("string"),
},
XPathQueries: pulumi.StringArray{
pulumi.String("string"),
},
},
},
WindowsFirewallLogs: insights.WindowsFirewallLogsDataSourceArray{
&insights.WindowsFirewallLogsDataSourceArgs{
Streams: pulumi.StringArray{
pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
},
Description: pulumi.String("string"),
Destinations: &insights.DataCollectionRuleDestinationsArgs{
AzureMonitorMetrics: &insights.DestinationsSpecAzureMonitorMetricsArgs{
Name: pulumi.String("string"),
},
EventHubs: insights.EventHubDestinationArray{
&insights.EventHubDestinationArgs{
EventHubResourceId: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
EventHubsDirect: insights.EventHubDirectDestinationArray{
&insights.EventHubDirectDestinationArgs{
EventHubResourceId: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
LogAnalytics: insights.LogAnalyticsDestinationArray{
&insights.LogAnalyticsDestinationArgs{
Name: pulumi.String("string"),
WorkspaceResourceId: pulumi.String("string"),
},
},
MonitoringAccounts: insights.MonitoringAccountDestinationArray{
&insights.MonitoringAccountDestinationArgs{
AccountResourceId: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
StorageAccounts: insights.StorageBlobDestinationArray{
&insights.StorageBlobDestinationArgs{
ContainerName: pulumi.String("string"),
Name: pulumi.String("string"),
StorageAccountResourceId: pulumi.String("string"),
},
},
StorageBlobsDirect: insights.StorageBlobDestinationArray{
&insights.StorageBlobDestinationArgs{
ContainerName: pulumi.String("string"),
Name: pulumi.String("string"),
StorageAccountResourceId: pulumi.String("string"),
},
},
StorageTablesDirect: insights.StorageTableDestinationArray{
&insights.StorageTableDestinationArgs{
Name: pulumi.String("string"),
StorageAccountResourceId: pulumi.String("string"),
TableName: pulumi.String("string"),
},
},
},
Identity: &insights.DataCollectionRuleResourceIdentityArgs{
Type: pulumi.String("string"),
UserAssignedIdentities: pulumi.StringArray{
pulumi.String("string"),
},
},
Kind: pulumi.String("string"),
Location: pulumi.String("string"),
StreamDeclarations: insights.StreamDeclarationMap{
"string": &insights.StreamDeclarationArgs{
Columns: insights.ColumnDefinitionArray{
&insights.ColumnDefinitionArgs{
Name: pulumi.String("string"),
Type: pulumi.String(insights.KnownColumnDefinitionTypeString),
},
},
},
},
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
})

var dataCollectionRuleResource = new DataCollectionRule("dataCollectionRuleResource", DataCollectionRuleArgs.builder()
    .resourceGroupName("string")
    .dataCollectionEndpointId("string")
    .dataCollectionRuleName("string")
    .dataFlows(DataFlowArgs.builder()
        .builtInTransform("string")
        .destinations("string")
        .outputStream("string")
        .streams("string")
        .transformKql("string")
        .build())
    .dataSources(DataCollectionRuleDataSourcesArgs.builder()
        .dataImports(DataSourcesSpecDataImportsArgs.builder()
            .eventHub(DataImportSourcesEventHubArgs.builder()
                .consumerGroup("string")
                .name("string")
                .stream("string")
                .build())
            .build())
        .extensions(ExtensionDataSourceArgs.builder()
            .extensionName("string")
            .extensionSettings("any")
            .inputDataSources("string")
            .name("string")
            .streams("string")
            .build())
        .iisLogs(IisLogsDataSourceArgs.builder()
            .streams("string")
            .logDirectories("string")
            .name("string")
            .build())
        .logFiles(LogFilesDataSourceArgs.builder()
            .filePatterns("string")
            .format("string")
            .streams("string")
            .name("string")
            .settings(LogFilesDataSourceSettingsArgs.builder()
                .text(LogFileSettingsTextArgs.builder()
                    .recordStartTimestampFormat("string")
                    .build())
                .build())
            .build())
        .performanceCounters(PerfCounterDataSourceArgs.builder()
            .counterSpecifiers("string")
            .name("string")
            .samplingFrequencyInSeconds(0)
            .streams("string")
            .build())
        .platformTelemetry(PlatformTelemetryDataSourceArgs.builder()
            .streams("string")
            .name("string")
            .build())
        .prometheusForwarder(PrometheusForwarderDataSourceArgs.builder()
            .labelIncludeFilter(Map.of("string", "string"))
            .name("string")
            .streams("string")
            .build())
        .syslog(SyslogDataSourceArgs.builder()
            .facilityNames("string")
            .logLevels("string")
            .name("string")
            .streams("string")
            .build())
        .windowsEventLogs(WindowsEventLogDataSourceArgs.builder()
            .name("string")
            .streams("string")
            .xPathQueries("string")
            .build())
        .windowsFirewallLogs(WindowsFirewallLogsDataSourceArgs.builder()
            .streams("string")
            .name("string")
            .build())
        .build())
    .description("string")
    .destinations(DataCollectionRuleDestinationsArgs.builder()
        .azureMonitorMetrics(DestinationsSpecAzureMonitorMetricsArgs.builder()
            .name("string")
            .build())
        .eventHubs(EventHubDestinationArgs.builder()
            .eventHubResourceId("string")
            .name("string")
            .build())
        .eventHubsDirect(EventHubDirectDestinationArgs.builder()
            .eventHubResourceId("string")
            .name("string")
            .build())
        .logAnalytics(LogAnalyticsDestinationArgs.builder()
            .name("string")
            .workspaceResourceId("string")
            .build())
        .monitoringAccounts(MonitoringAccountDestinationArgs.builder()
            .accountResourceId("string")
            .name("string")
            .build())
        .storageAccounts(StorageBlobDestinationArgs.builder()
            .containerName("string")
            .name("string")
            .storageAccountResourceId("string")
            .build())
        .storageBlobsDirect(StorageBlobDestinationArgs.builder()
            .containerName("string")
            .name("string")
            .storageAccountResourceId("string")
            .build())
        .storageTablesDirect(StorageTableDestinationArgs.builder()
            .name("string")
            .storageAccountResourceId("string")
            .tableName("string")
            .build())
        .build())
    .identity(DataCollectionRuleResourceIdentityArgs.builder()
        .type("string")
        .userAssignedIdentities("string")
        .build())
    .kind("string")
    .location("string")
    .streamDeclarations(Map.of("string", Map.of("columns", Map.ofEntries(
        Map.entry("name", "string"),
        Map.entry("type", "string")
    ))))
    .tags(Map.of("string", "string"))
    .build());

data_collection_rule_resource = azure_native.insights.DataCollectionRule("dataCollectionRuleResource",
    resource_group_name="string",
    data_collection_endpoint_id="string",
    data_collection_rule_name="string",
    data_flows=[azure_native.insights.DataFlowArgs(
        built_in_transform="string",
        destinations=["string"],
        output_stream="string",
        streams=["string"],
        transform_kql="string",
    )],
    data_sources=azure_native.insights.DataCollectionRuleDataSourcesArgs(
        data_imports=azure_native.insights.DataSourcesSpecDataImportsArgs(
            event_hub=azure_native.insights.DataImportSourcesEventHubArgs(
                consumer_group="string",
                name="string",
                stream="string",
            ),
        ),
        extensions=[azure_native.insights.ExtensionDataSourceArgs(
            extension_name="string",
            extension_settings="any",
            input_data_sources=["string"],
            name="string",
            streams=["string"],
        )],
        iis_logs=[azure_native.insights.IisLogsDataSourceArgs(
            streams=["string"],
            log_directories=["string"],
            name="string",
        )],
        log_files=[azure_native.insights.LogFilesDataSourceArgs(
            file_patterns=["string"],
            format="string",
            streams=["string"],
            name="string",
            settings=azure_native.insights.LogFilesDataSourceSettingsArgs(
                text=azure_native.insights.LogFileSettingsTextArgs(
                    record_start_timestamp_format="string",
                ),
            ),
        )],
        performance_counters=[azure_native.insights.PerfCounterDataSourceArgs(
            counter_specifiers=["string"],
            name="string",
            sampling_frequency_in_seconds=0,
            streams=["string"],
        )],
        platform_telemetry=[azure_native.insights.PlatformTelemetryDataSourceArgs(
            streams=["string"],
            name="string",
        )],
        prometheus_forwarder=[azure_native.insights.PrometheusForwarderDataSourceArgs(
            label_include_filter={
                "string": "string",
            },
            name="string",
            streams=["string"],
        )],
        syslog=[azure_native.insights.SyslogDataSourceArgs(
            facility_names=["string"],
            log_levels=["string"],
            name="string",
            streams=["string"],
        )],
        windows_event_logs=[azure_native.insights.WindowsEventLogDataSourceArgs(
            name="string",
            streams=["string"],
            x_path_queries=["string"],
        )],
        windows_firewall_logs=[azure_native.insights.WindowsFirewallLogsDataSourceArgs(
            streams=["string"],
            name="string",
        )],
    ),
    description="string",
    destinations=azure_native.insights.DataCollectionRuleDestinationsArgs(
        azure_monitor_metrics=azure_native.insights.DestinationsSpecAzureMonitorMetricsArgs(
            name="string",
        ),
        event_hubs=[azure_native.insights.EventHubDestinationArgs(
            event_hub_resource_id="string",
            name="string",
        )],
        event_hubs_direct=[azure_native.insights.EventHubDirectDestinationArgs(
            event_hub_resource_id="string",
            name="string",
        )],
        log_analytics=[azure_native.insights.LogAnalyticsDestinationArgs(
            name="string",
            workspace_resource_id="string",
        )],
        monitoring_accounts=[azure_native.insights.MonitoringAccountDestinationArgs(
            account_resource_id="string",
            name="string",
        )],
        storage_accounts=[azure_native.insights.StorageBlobDestinationArgs(
            container_name="string",
            name="string",
            storage_account_resource_id="string",
        )],
        storage_blobs_direct=[azure_native.insights.StorageBlobDestinationArgs(
            container_name="string",
            name="string",
            storage_account_resource_id="string",
        )],
        storage_tables_direct=[azure_native.insights.StorageTableDestinationArgs(
            name="string",
            storage_account_resource_id="string",
            table_name="string",
        )],
    ),
    identity=azure_native.insights.DataCollectionRuleResourceIdentityArgs(
        type="string",
        user_assigned_identities=["string"],
    ),
    kind="string",
    location="string",
    stream_declarations={
        "string": azure_native.insights.StreamDeclarationArgs(
            columns=[azure_native.insights.ColumnDefinitionArgs(
                name="string",
                type=azure_native.insights.KnownColumnDefinitionType.STRING,
            )],
        ),
    },
    tags={
        "string": "string",
    })

const dataCollectionRuleResource = new azure_native.insights.DataCollectionRule("dataCollectionRuleResource", {
    resourceGroupName: "string",
    dataCollectionEndpointId: "string",
    dataCollectionRuleName: "string",
    dataFlows: [{
        builtInTransform: "string",
        destinations: ["string"],
        outputStream: "string",
        streams: ["string"],
        transformKql: "string",
    }],
    dataSources: {
        dataImports: {
            eventHub: {
                consumerGroup: "string",
                name: "string",
                stream: "string",
            },
        },
        extensions: [{
            extensionName: "string",
            extensionSettings: "any",
            inputDataSources: ["string"],
            name: "string",
            streams: ["string"],
        }],
        iisLogs: [{
            streams: ["string"],
            logDirectories: ["string"],
            name: "string",
        }],
        logFiles: [{
            filePatterns: ["string"],
            format: "string",
            streams: ["string"],
            name: "string",
            settings: {
                text: {
                    recordStartTimestampFormat: "string",
                },
            },
        }],
        performanceCounters: [{
            counterSpecifiers: ["string"],
            name: "string",
            samplingFrequencyInSeconds: 0,
            streams: ["string"],
        }],
        platformTelemetry: [{
            streams: ["string"],
            name: "string",
        }],
        prometheusForwarder: [{
            labelIncludeFilter: {
                string: "string",
            },
            name: "string",
            streams: ["string"],
        }],
        syslog: [{
            facilityNames: ["string"],
            logLevels: ["string"],
            name: "string",
            streams: ["string"],
        }],
        windowsEventLogs: [{
            name: "string",
            streams: ["string"],
            xPathQueries: ["string"],
        }],
        windowsFirewallLogs: [{
            streams: ["string"],
            name: "string",
        }],
    },
    description: "string",
    destinations: {
        azureMonitorMetrics: {
            name: "string",
        },
        eventHubs: [{
            eventHubResourceId: "string",
            name: "string",
        }],
        eventHubsDirect: [{
            eventHubResourceId: "string",
            name: "string",
        }],
        logAnalytics: [{
            name: "string",
            workspaceResourceId: "string",
        }],
        monitoringAccounts: [{
            accountResourceId: "string",
            name: "string",
        }],
        storageAccounts: [{
            containerName: "string",
            name: "string",
            storageAccountResourceId: "string",
        }],
        storageBlobsDirect: [{
            containerName: "string",
            name: "string",
            storageAccountResourceId: "string",
        }],
        storageTablesDirect: [{
            name: "string",
            storageAccountResourceId: "string",
            tableName: "string",
        }],
    },
    identity: {
        type: "string",
        userAssignedIdentities: ["string"],
    },
    kind: "string",
    location: "string",
    streamDeclarations: {
        string: {
            columns: [{
                name: "string",
                type: azure_native.insights.KnownColumnDefinitionType.String,
            }],
        },
    },
    tags: {
        string: "string",
    },
});

type: azure-native:insights:DataCollectionRule
properties:
    dataCollectionEndpointId: string
    dataCollectionRuleName: string
    dataFlows:
        - builtInTransform: string
          destinations:
            - string
          outputStream: string
          streams:
            - string
          transformKql: string
    dataSources:
        dataImports:
            eventHub:
                consumerGroup: string
                name: string
                stream: string
        extensions:
            - extensionName: string
              extensionSettings: any
              inputDataSources:
                - string
              name: string
              streams:
                - string
        iisLogs:
            - logDirectories:
                - string
              name: string
              streams:
                - string
        logFiles:
            - filePatterns:
                - string
              format: string
              name: string
              settings:
                text:
                    recordStartTimestampFormat: string
              streams:
                - string
        performanceCounters:
            - counterSpecifiers:
                - string
              name: string
              samplingFrequencyInSeconds: 0
              streams:
                - string
        platformTelemetry:
            - name: string
              streams:
                - string
        prometheusForwarder:
            - labelIncludeFilter:
                string: string
              name: string
              streams:
                - string
        syslog:
            - facilityNames:
                - string
              logLevels:
                - string
              name: string
              streams:
                - string
        windowsEventLogs:
            - name: string
              streams:
                - string
              xPathQueries:
                - string
        windowsFirewallLogs:
            - name: string
              streams:
                - string
    description: string
    destinations:
        azureMonitorMetrics:
            name: string
        eventHubs:
            - eventHubResourceId: string
              name: string
        eventHubsDirect:
            - eventHubResourceId: string
              name: string
        logAnalytics:
            - name: string
              workspaceResourceId: string
        monitoringAccounts:
            - accountResourceId: string
              name: string
        storageAccounts:
            - containerName: string
              name: string
              storageAccountResourceId: string
        storageBlobsDirect:
            - containerName: string
              name: string
              storageAccountResourceId: string
        storageTablesDirect:
            - name: string
              storageAccountResourceId: string
              tableName: string
    identity:
        type: string
        userAssignedIdentities:
            - string
    kind: string
    location: string
    resourceGroupName: string
    streamDeclarations:
        string:
            columns:
                - name: string
                  type: string
    tags:
        string: string

DataCollectionRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The DataCollectionRule resource accepts the following input properties:

ResourceGroupName string: The name of the resource group. The name is case insensitive.
DataCollectionEndpointId string: The resource ID of the data collection endpoint that this rule can be used with.
DataCollectionRuleName string: The name of the data collection rule. The name is case insensitive.
DataFlows List<Pulumi.AzureNative.Insights.Inputs.DataFlow>: The specification of data flows.
DataSources Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDataSources: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
Description string: Description of the data collection rule.
Destinations Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDestinations: The specification of destinations.
Identity Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleResourceIdentity: Managed service identity of the resource.
Kind string | Pulumi.AzureNative.Insights.KnownDataCollectionRuleResourceKind: The kind of the resource.
Location string: The geo-location where the resource lives.
StreamDeclarations Dictionary<string, Pulumi.AzureNative.Insights.Inputs.StreamDeclarationArgs>: Declaration of custom streams used in this rule.
Tags Dictionary<string, string>: Resource tags.

ResourceGroupName string: The name of the resource group. The name is case insensitive.
DataCollectionEndpointId string: The resource ID of the data collection endpoint that this rule can be used with.
DataCollectionRuleName string: The name of the data collection rule. The name is case insensitive.
DataFlows []DataFlowArgs: The specification of data flows.
DataSources DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
Description string: Description of the data collection rule.
Destinations DataCollectionRuleDestinationsArgs: The specification of destinations.
Identity DataCollectionRuleResourceIdentityArgs: Managed service identity of the resource.
Kind string | KnownDataCollectionRuleResourceKind: The kind of the resource.
Location string: The geo-location where the resource lives.
StreamDeclarations map[string]StreamDeclarationArgs: Declaration of custom streams used in this rule.
Tags map[string]string: Resource tags.

resourceGroupName String: The name of the resource group. The name is case insensitive.
dataCollectionEndpointId String: The resource ID of the data collection endpoint that this rule can be used with.
dataCollectionRuleName String: The name of the data collection rule. The name is case insensitive.
dataFlows List<DataFlow>: The specification of data flows.
dataSources DataCollectionRuleDataSources: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description String: Description of the data collection rule.
destinations DataCollectionRuleDestinations: The specification of destinations.
identity DataCollectionRuleResourceIdentity: Managed service identity of the resource.
kind String | KnownDataCollectionRuleResourceKind: The kind of the resource.
location String: The geo-location where the resource lives.
streamDeclarations Map<String,StreamDeclarationArgs>: Declaration of custom streams used in this rule.
tags Map<String,String>: Resource tags.

resourceGroupName string: The name of the resource group. The name is case insensitive.
dataCollectionEndpointId string: The resource ID of the data collection endpoint that this rule can be used with.
dataCollectionRuleName string: The name of the data collection rule. The name is case insensitive.
dataFlows DataFlow[]: The specification of data flows.
dataSources DataCollectionRuleDataSources: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description string: Description of the data collection rule.
destinations DataCollectionRuleDestinations: The specification of destinations.
identity DataCollectionRuleResourceIdentity: Managed service identity of the resource.
kind string | KnownDataCollectionRuleResourceKind: The kind of the resource.
location string: The geo-location where the resource lives.
streamDeclarations {[key: string]: StreamDeclarationArgs}: Declaration of custom streams used in this rule.
tags {[key: string]: string}: Resource tags.

resource_group_name str: The name of the resource group. The name is case insensitive.
data_collection_endpoint_id str: The resource ID of the data collection endpoint that this rule can be used with.
data_collection_rule_name str: The name of the data collection rule. The name is case insensitive.
data_flows Sequence[DataFlowArgs]: The specification of data flows.
data_sources DataCollectionRuleDataSourcesArgs: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description str: Description of the data collection rule.
destinations DataCollectionRuleDestinationsArgs: The specification of destinations.
identity DataCollectionRuleResourceIdentityArgs: Managed service identity of the resource.
kind str | KnownDataCollectionRuleResourceKind: The kind of the resource.
location str: The geo-location where the resource lives.
stream_declarations Mapping[str, StreamDeclarationArgs]: Declaration of custom streams used in this rule.
tags Mapping[str, str]: Resource tags.

resourceGroupName String: The name of the resource group. The name is case insensitive.
dataCollectionEndpointId String: The resource ID of the data collection endpoint that this rule can be used with.
dataCollectionRuleName String: The name of the data collection rule. The name is case insensitive.
dataFlows List<Property Map>: The specification of data flows.
dataSources Property Map: The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
description String: Description of the data collection rule.
destinations Property Map: The specification of destinations.
identity Property Map: Managed service identity of the resource.
kind String | "Linux" | "Windows": The kind of the resource.
location String: The geo-location where the resource lives.
streamDeclarations Map<Property Map>: Declaration of custom streams used in this rule.
tags Map<String>: Resource tags.

Outputs

All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

Etag string: Resource entity tag (ETag).
Id string: The provider-assigned unique ID for this managed resource.
ImmutableId string: The immutable ID of this data collection rule. This property is READ-ONLY.
Metadata Pulumi.AzureNative.Insights.Outputs.DataCollectionRuleResponseMetadata: Metadata about the resource
Name string: The name of the resource.
ProvisioningState string: The resource provisioning state.
SystemData Pulumi.AzureNative.Insights.Outputs.DataCollectionRuleResourceResponseSystemData: Metadata pertaining to creation and last modification of the resource.
Type string: The type of the resource.

Etag string: Resource entity tag (ETag).
Id string: The provider-assigned unique ID for this managed resource.
ImmutableId string: The immutable ID of this data collection rule. This property is READ-ONLY.
Metadata DataCollectionRuleResponseMetadata: Metadata about the resource
Name string: The name of the resource.
ProvisioningState string: The resource provisioning state.
SystemData DataCollectionRuleResourceResponseSystemData: Metadata pertaining to creation and last modification of the resource.
Type string: The type of the resource.

etag String: Resource entity tag (ETag).
id String: The provider-assigned unique ID for this managed resource.
immutableId String: The immutable ID of this data collection rule. This property is READ-ONLY.
metadata DataCollectionRuleResponseMetadata: Metadata about the resource
name String: The name of the resource.
provisioningState String: The resource provisioning state.
systemData DataCollectionRuleResourceResponseSystemData: Metadata pertaining to creation and last modification of the resource.
type String: The type of the resource.

etag string: Resource entity tag (ETag).
id string: The provider-assigned unique ID for this managed resource.
immutableId string: The immutable ID of this data collection rule. This property is READ-ONLY.
metadata DataCollectionRuleResponseMetadata: Metadata about the resource
name string: The name of the resource.
provisioningState string: The resource provisioning state.
systemData DataCollectionRuleResourceResponseSystemData: Metadata pertaining to creation and last modification of the resource.
type string: The type of the resource.

etag str: Resource entity tag (ETag).
id str: The provider-assigned unique ID for this managed resource.
immutable_id str: The immutable ID of this data collection rule. This property is READ-ONLY.
metadata DataCollectionRuleResponseMetadata: Metadata about the resource
name str: The name of the resource.
provisioning_state str: The resource provisioning state.
system_data DataCollectionRuleResourceResponseSystemData: Metadata pertaining to creation and last modification of the resource.
type str: The type of the resource.

etag String: Resource entity tag (ETag).
id String: The provider-assigned unique ID for this managed resource.
immutableId String: The immutable ID of this data collection rule. This property is READ-ONLY.
metadata Property Map: Metadata about the resource
name String: The name of the resource.
provisioningState String: The resource provisioning state.
systemData Property Map: Metadata pertaining to creation and last modification of the resource.
type String: The type of the resource.

Supporting Types

ColumnDefinition, ColumnDefinitionArgs

Name string: The name of the column.
Type string | Pulumi.AzureNative.Insights.KnownColumnDefinitionType: The type of the column data.

Name string: The name of the column.
Type string | KnownColumnDefinitionType: The type of the column data.

name String: The name of the column.
type String | KnownColumnDefinitionType: The type of the column data.

name string: The name of the column.
type string | KnownColumnDefinitionType: The type of the column data.

name str: The name of the column.
type str | KnownColumnDefinitionType: The type of the column data.

name String: The name of the column.
type String | "string" | "int" | "long" | "real" | "boolean" | "datetime" | "dynamic": The type of the column data.

ColumnDefinitionResponse, ColumnDefinitionResponseArgs

Name string: The name of the column.
Type string: The type of the column data.

Name string: The name of the column.
Type string: The type of the column data.

name String: The name of the column.
type String: The type of the column data.

name string: The name of the column.
type string: The type of the column data.

name str: The name of the column.
type str: The type of the column data.

name String: The name of the column.
type String: The type of the column data.

DataCollectionRuleDataSources, DataCollectionRuleDataSourcesArgs

DataImports Pulumi.AzureNative.Insights.Inputs.DataSourcesSpecDataImports: Specifications of pull based data sources
Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSource>: The list of Azure VM extension data source configurations.
IisLogs List<Pulumi.AzureNative.Insights.Inputs.IisLogsDataSource>: The list of IIS logs source configurations.
LogFiles List<Pulumi.AzureNative.Insights.Inputs.LogFilesDataSource>: The list of Log files source configurations.
PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSource>: The list of performance counter data source configurations.
PlatformTelemetry List<Pulumi.AzureNative.Insights.Inputs.PlatformTelemetryDataSource>: The list of platform telemetry configurations
PrometheusForwarder List<Pulumi.AzureNative.Insights.Inputs.PrometheusForwarderDataSource>: The list of Prometheus forwarder data source configurations.
Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSource>: The list of Syslog data source configurations.
WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSource>: The list of Windows Event Log data source configurations.
WindowsFirewallLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsFirewallLogsDataSource>: The list of Windows Firewall logs source configurations.

DataImports DataSourcesSpecDataImports: Specifications of pull based data sources
Extensions []ExtensionDataSource: The list of Azure VM extension data source configurations.
IisLogs []IisLogsDataSource: The list of IIS logs source configurations.
LogFiles []LogFilesDataSource: The list of Log files source configurations.
PerformanceCounters []PerfCounterDataSource: The list of performance counter data source configurations.
PlatformTelemetry []PlatformTelemetryDataSource: The list of platform telemetry configurations
PrometheusForwarder []PrometheusForwarderDataSource: The list of Prometheus forwarder data source configurations.
Syslog []SyslogDataSource: The list of Syslog data source configurations.
WindowsEventLogs []WindowsEventLogDataSource: The list of Windows Event Log data source configurations.
WindowsFirewallLogs []WindowsFirewallLogsDataSource: The list of Windows Firewall logs source configurations.

dataImports DataSourcesSpecDataImports: Specifications of pull based data sources
extensions List<ExtensionDataSource>: The list of Azure VM extension data source configurations.
iisLogs List<IisLogsDataSource>: The list of IIS logs source configurations.
logFiles List<LogFilesDataSource>: The list of Log files source configurations.
performanceCounters List<PerfCounterDataSource>: The list of performance counter data source configurations.
platformTelemetry List<PlatformTelemetryDataSource>: The list of platform telemetry configurations
prometheusForwarder List<PrometheusForwarderDataSource>: The list of Prometheus forwarder data source configurations.
syslog List<SyslogDataSource>: The list of Syslog data source configurations.
windowsEventLogs List<WindowsEventLogDataSource>: The list of Windows Event Log data source configurations.
windowsFirewallLogs List<WindowsFirewallLogsDataSource>: The list of Windows Firewall logs source configurations.

dataImports DataSourcesSpecDataImports: Specifications of pull based data sources
extensions ExtensionDataSource[]: The list of Azure VM extension data source configurations.
iisLogs IisLogsDataSource[]: The list of IIS logs source configurations.
logFiles LogFilesDataSource[]: The list of Log files source configurations.
performanceCounters PerfCounterDataSource[]: The list of performance counter data source configurations.
platformTelemetry PlatformTelemetryDataSource[]: The list of platform telemetry configurations
prometheusForwarder PrometheusForwarderDataSource[]: The list of Prometheus forwarder data source configurations.
syslog SyslogDataSource[]: The list of Syslog data source configurations.
windowsEventLogs WindowsEventLogDataSource[]: The list of Windows Event Log data source configurations.
windowsFirewallLogs WindowsFirewallLogsDataSource[]: The list of Windows Firewall logs source configurations.

data_imports DataSourcesSpecDataImports: Specifications of pull based data sources
extensions Sequence[ExtensionDataSource]: The list of Azure VM extension data source configurations.
iis_logs Sequence[IisLogsDataSource]: The list of IIS logs source configurations.
log_files Sequence[LogFilesDataSource]: The list of Log files source configurations.
performance_counters Sequence[PerfCounterDataSource]: The list of performance counter data source configurations.
platform_telemetry Sequence[PlatformTelemetryDataSource]: The list of platform telemetry configurations
prometheus_forwarder Sequence[PrometheusForwarderDataSource]: The list of Prometheus forwarder data source configurations.
syslog Sequence[SyslogDataSource]: The list of Syslog data source configurations.
windows_event_logs Sequence[WindowsEventLogDataSource]: The list of Windows Event Log data source configurations.
windows_firewall_logs Sequence[WindowsFirewallLogsDataSource]: The list of Windows Firewall logs source configurations.

dataImports Property Map: Specifications of pull based data sources
extensions List<Property Map>: The list of Azure VM extension data source configurations.
iisLogs List<Property Map>: The list of IIS logs source configurations.
logFiles List<Property Map>: The list of Log files source configurations.
performanceCounters List<Property Map>: The list of performance counter data source configurations.
platformTelemetry List<Property Map>: The list of platform telemetry configurations
prometheusForwarder List<Property Map>: The list of Prometheus forwarder data source configurations.
syslog List<Property Map>: The list of Syslog data source configurations.
windowsEventLogs List<Property Map>: The list of Windows Event Log data source configurations.
windowsFirewallLogs List<Property Map>: The list of Windows Firewall logs source configurations.

DataCollectionRuleDestinations, DataCollectionRuleDestinationsArgs

AzureMonitorMetrics Pulumi.AzureNative.Insights.Inputs.DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
EventHubs List<Pulumi.AzureNative.Insights.Inputs.EventHubDestination>: List of Event Hubs destinations.
EventHubsDirect List<Pulumi.AzureNative.Insights.Inputs.EventHubDirectDestination>: List of Event Hubs Direct destinations.
LogAnalytics List<Pulumi.AzureNative.Insights.Inputs.LogAnalyticsDestination>: List of Log Analytics destinations.
MonitoringAccounts List<Pulumi.AzureNative.Insights.Inputs.MonitoringAccountDestination>: List of monitoring account destinations.
StorageAccounts List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestination>: List of storage accounts destinations.
StorageBlobsDirect List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestination>: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
StorageTablesDirect List<Pulumi.AzureNative.Insights.Inputs.StorageTableDestination>: List of Storage Table Direct destinations.

AzureMonitorMetrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
EventHubs []EventHubDestination: List of Event Hubs destinations.
EventHubsDirect []EventHubDirectDestination: List of Event Hubs Direct destinations.
LogAnalytics []LogAnalyticsDestination: List of Log Analytics destinations.
MonitoringAccounts []MonitoringAccountDestination: List of monitoring account destinations.
StorageAccounts []StorageBlobDestination: List of storage accounts destinations.
StorageBlobsDirect []StorageBlobDestination: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
StorageTablesDirect []StorageTableDestination: List of Storage Table Direct destinations.

azureMonitorMetrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
eventHubs List<EventHubDestination>: List of Event Hubs destinations.
eventHubsDirect List<EventHubDirectDestination>: List of Event Hubs Direct destinations.
logAnalytics List<LogAnalyticsDestination>: List of Log Analytics destinations.
monitoringAccounts List<MonitoringAccountDestination>: List of monitoring account destinations.
storageAccounts List<StorageBlobDestination>: List of storage accounts destinations.
storageBlobsDirect List<StorageBlobDestination>: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storageTablesDirect List<StorageTableDestination>: List of Storage Table Direct destinations.

azureMonitorMetrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
eventHubs EventHubDestination[]: List of Event Hubs destinations.
eventHubsDirect EventHubDirectDestination[]: List of Event Hubs Direct destinations.
logAnalytics LogAnalyticsDestination[]: List of Log Analytics destinations.
monitoringAccounts MonitoringAccountDestination[]: List of monitoring account destinations.
storageAccounts StorageBlobDestination[]: List of storage accounts destinations.
storageBlobsDirect StorageBlobDestination[]: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storageTablesDirect StorageTableDestination[]: List of Storage Table Direct destinations.

azure_monitor_metrics DestinationsSpecAzureMonitorMetrics: Azure Monitor Metrics destination.
event_hubs Sequence[EventHubDestination]: List of Event Hubs destinations.
event_hubs_direct Sequence[EventHubDirectDestination]: List of Event Hubs Direct destinations.
log_analytics Sequence[LogAnalyticsDestination]: List of Log Analytics destinations.
monitoring_accounts Sequence[MonitoringAccountDestination]: List of monitoring account destinations.
storage_accounts Sequence[StorageBlobDestination]: List of storage accounts destinations.
storage_blobs_direct Sequence[StorageBlobDestination]: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storage_tables_direct Sequence[StorageTableDestination]: List of Storage Table Direct destinations.

azureMonitorMetrics Property Map: Azure Monitor Metrics destination.
eventHubs List<Property Map>: List of Event Hubs destinations.
eventHubsDirect List<Property Map>: List of Event Hubs Direct destinations.
logAnalytics List<Property Map>: List of Log Analytics destinations.
monitoringAccounts List<Property Map>: List of monitoring account destinations.
storageAccounts List<Property Map>: List of storage accounts destinations.
storageBlobsDirect List<Property Map>: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storageTablesDirect List<Property Map>: List of Storage Table Direct destinations.

DataCollectionRuleResourceIdentity, DataCollectionRuleResourceIdentityArgs

Type string | Pulumi.AzureNative.Insights.ManagedServiceIdentityType: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
UserAssignedIdentities List<string>: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

Type string | ManagedServiceIdentityType: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
UserAssignedIdentities []string: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

type String | ManagedServiceIdentityType: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
userAssignedIdentities List<String>: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

type string | ManagedServiceIdentityType: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
userAssignedIdentities string[]: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

type str | ManagedServiceIdentityType: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
user_assigned_identities Sequence[str]: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

type String | "None" | "SystemAssigned" | "UserAssigned" | "SystemAssigned,UserAssigned": Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
userAssignedIdentities List<String>: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

DataCollectionRuleResourceResponseIdentity, DataCollectionRuleResourceResponseIdentityArgs

PrincipalId string: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
TenantId string: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
Type string: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Insights.Inputs.UserAssignedIdentityResponse>: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

PrincipalId string: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
TenantId string: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
Type string: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
UserAssignedIdentities map[string]UserAssignedIdentityResponse: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

principalId String: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
tenantId String: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
type String: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
userAssignedIdentities Map<String,UserAssignedIdentityResponse>: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

principalId string: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
tenantId string: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
type string: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
userAssignedIdentities {[key: string]: UserAssignedIdentityResponse}: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

principal_id str: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
tenant_id str: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
type str: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
user_assigned_identities Mapping[str, UserAssignedIdentityResponse]: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

principalId String: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
tenantId String: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
type String: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
userAssignedIdentities Map<Property Map>: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

DataCollectionRuleResourceResponseSystemData, DataCollectionRuleResourceResponseSystemDataArgs

CreatedAt string: The timestamp of resource creation (UTC).
CreatedBy string: The identity that created the resource.
CreatedByType string: The type of identity that created the resource.
LastModifiedAt string: The timestamp of resource last modification (UTC)
LastModifiedBy string: The identity that last modified the resource.
LastModifiedByType string: The type of identity that last modified the resource.

CreatedAt string: The timestamp of resource creation (UTC).
CreatedBy string: The identity that created the resource.
CreatedByType string: The type of identity that created the resource.
LastModifiedAt string: The timestamp of resource last modification (UTC)
LastModifiedBy string: The identity that last modified the resource.
LastModifiedByType string: The type of identity that last modified the resource.

createdAt String: The timestamp of resource creation (UTC).
createdBy String: The identity that created the resource.
createdByType String: The type of identity that created the resource.
lastModifiedAt String: The timestamp of resource last modification (UTC)
lastModifiedBy String: The identity that last modified the resource.
lastModifiedByType String: The type of identity that last modified the resource.

createdAt string: The timestamp of resource creation (UTC).
createdBy string: The identity that created the resource.
createdByType string: The type of identity that created the resource.
lastModifiedAt string: The timestamp of resource last modification (UTC)
lastModifiedBy string: The identity that last modified the resource.
lastModifiedByType string: The type of identity that last modified the resource.

created_at str: The timestamp of resource creation (UTC).
created_by str: The identity that created the resource.
created_by_type str: The type of identity that created the resource.
last_modified_at str: The timestamp of resource last modification (UTC)
last_modified_by str: The identity that last modified the resource.
last_modified_by_type str: The type of identity that last modified the resource.

createdAt String: The timestamp of resource creation (UTC).
createdBy String: The identity that created the resource.
createdByType String: The type of identity that created the resource.
lastModifiedAt String: The timestamp of resource last modification (UTC)
lastModifiedBy String: The identity that last modified the resource.
lastModifiedByType String: The type of identity that last modified the resource.

DataCollectionRuleResponseDataSources, DataCollectionRuleResponseDataSourcesArgs

DataImports Pulumi.AzureNative.Insights.Inputs.DataSourcesSpecResponseDataImports: Specifications of pull based data sources
Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSourceResponse>: The list of Azure VM extension data source configurations.
IisLogs List<Pulumi.AzureNative.Insights.Inputs.IisLogsDataSourceResponse>: The list of IIS logs source configurations.
LogFiles List<Pulumi.AzureNative.Insights.Inputs.LogFilesDataSourceResponse>: The list of Log files source configurations.
PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSourceResponse>: The list of performance counter data source configurations.
PlatformTelemetry List<Pulumi.AzureNative.Insights.Inputs.PlatformTelemetryDataSourceResponse>: The list of platform telemetry configurations
PrometheusForwarder List<Pulumi.AzureNative.Insights.Inputs.PrometheusForwarderDataSourceResponse>: The list of Prometheus forwarder data source configurations.
Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSourceResponse>: The list of Syslog data source configurations.
WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSourceResponse>: The list of Windows Event Log data source configurations.
WindowsFirewallLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsFirewallLogsDataSourceResponse>: The list of Windows Firewall logs source configurations.

DataImports DataSourcesSpecResponseDataImports: Specifications of pull based data sources
Extensions []ExtensionDataSourceResponse: The list of Azure VM extension data source configurations.
IisLogs []IisLogsDataSourceResponse: The list of IIS logs source configurations.
LogFiles []LogFilesDataSourceResponse: The list of Log files source configurations.
PerformanceCounters []PerfCounterDataSourceResponse: The list of performance counter data source configurations.
PlatformTelemetry []PlatformTelemetryDataSourceResponse: The list of platform telemetry configurations
PrometheusForwarder []PrometheusForwarderDataSourceResponse: The list of Prometheus forwarder data source configurations.
Syslog []SyslogDataSourceResponse: The list of Syslog data source configurations.
WindowsEventLogs []WindowsEventLogDataSourceResponse: The list of Windows Event Log data source configurations.
WindowsFirewallLogs []WindowsFirewallLogsDataSourceResponse: The list of Windows Firewall logs source configurations.

dataImports DataSourcesSpecResponseDataImports: Specifications of pull based data sources
extensions List<ExtensionDataSourceResponse>: The list of Azure VM extension data source configurations.
iisLogs List<IisLogsDataSourceResponse>: The list of IIS logs source configurations.
logFiles List<LogFilesDataSourceResponse>: The list of Log files source configurations.
performanceCounters List<PerfCounterDataSourceResponse>: The list of performance counter data source configurations.
platformTelemetry List<PlatformTelemetryDataSourceResponse>: The list of platform telemetry configurations
prometheusForwarder List<PrometheusForwarderDataSourceResponse>: The list of Prometheus forwarder data source configurations.
syslog List<SyslogDataSourceResponse>: The list of Syslog data source configurations.
windowsEventLogs List<WindowsEventLogDataSourceResponse>: The list of Windows Event Log data source configurations.
windowsFirewallLogs List<WindowsFirewallLogsDataSourceResponse>: The list of Windows Firewall logs source configurations.

dataImports DataSourcesSpecResponseDataImports: Specifications of pull based data sources
extensions ExtensionDataSourceResponse[]: The list of Azure VM extension data source configurations.
iisLogs IisLogsDataSourceResponse[]: The list of IIS logs source configurations.
logFiles LogFilesDataSourceResponse[]: The list of Log files source configurations.
performanceCounters PerfCounterDataSourceResponse[]: The list of performance counter data source configurations.
platformTelemetry PlatformTelemetryDataSourceResponse[]: The list of platform telemetry configurations
prometheusForwarder PrometheusForwarderDataSourceResponse[]: The list of Prometheus forwarder data source configurations.
syslog SyslogDataSourceResponse[]: The list of Syslog data source configurations.
windowsEventLogs WindowsEventLogDataSourceResponse[]: The list of Windows Event Log data source configurations.
windowsFirewallLogs WindowsFirewallLogsDataSourceResponse[]: The list of Windows Firewall logs source configurations.

data_imports DataSourcesSpecResponseDataImports: Specifications of pull based data sources
extensions Sequence[ExtensionDataSourceResponse]: The list of Azure VM extension data source configurations.
iis_logs Sequence[IisLogsDataSourceResponse]: The list of IIS logs source configurations.
log_files Sequence[LogFilesDataSourceResponse]: The list of Log files source configurations.
performance_counters Sequence[PerfCounterDataSourceResponse]: The list of performance counter data source configurations.
platform_telemetry Sequence[PlatformTelemetryDataSourceResponse]: The list of platform telemetry configurations
prometheus_forwarder Sequence[PrometheusForwarderDataSourceResponse]: The list of Prometheus forwarder data source configurations.
syslog Sequence[SyslogDataSourceResponse]: The list of Syslog data source configurations.
windows_event_logs Sequence[WindowsEventLogDataSourceResponse]: The list of Windows Event Log data source configurations.
windows_firewall_logs Sequence[WindowsFirewallLogsDataSourceResponse]: The list of Windows Firewall logs source configurations.

dataImports Property Map: Specifications of pull based data sources
extensions List<Property Map>: The list of Azure VM extension data source configurations.
iisLogs List<Property Map>: The list of IIS logs source configurations.
logFiles List<Property Map>: The list of Log files source configurations.
performanceCounters List<Property Map>: The list of performance counter data source configurations.
platformTelemetry List<Property Map>: The list of platform telemetry configurations
prometheusForwarder List<Property Map>: The list of Prometheus forwarder data source configurations.
syslog List<Property Map>: The list of Syslog data source configurations.
windowsEventLogs List<Property Map>: The list of Windows Event Log data source configurations.
windowsFirewallLogs List<Property Map>: The list of Windows Firewall logs source configurations.

DataCollectionRuleResponseDestinations, DataCollectionRuleResponseDestinationsArgs

AzureMonitorMetrics Pulumi.AzureNative.Insights.Inputs.DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
EventHubs List<Pulumi.AzureNative.Insights.Inputs.EventHubDestinationResponse>: List of Event Hubs destinations.
EventHubsDirect List<Pulumi.AzureNative.Insights.Inputs.EventHubDirectDestinationResponse>: List of Event Hubs Direct destinations.
LogAnalytics List<Pulumi.AzureNative.Insights.Inputs.LogAnalyticsDestinationResponse>: List of Log Analytics destinations.
MonitoringAccounts List<Pulumi.AzureNative.Insights.Inputs.MonitoringAccountDestinationResponse>: List of monitoring account destinations.
StorageAccounts List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestinationResponse>: List of storage accounts destinations.
StorageBlobsDirect List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestinationResponse>: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
StorageTablesDirect List<Pulumi.AzureNative.Insights.Inputs.StorageTableDestinationResponse>: List of Storage Table Direct destinations.

AzureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
EventHubs []EventHubDestinationResponse: List of Event Hubs destinations.
EventHubsDirect []EventHubDirectDestinationResponse: List of Event Hubs Direct destinations.
LogAnalytics []LogAnalyticsDestinationResponse: List of Log Analytics destinations.
MonitoringAccounts []MonitoringAccountDestinationResponse: List of monitoring account destinations.
StorageAccounts []StorageBlobDestinationResponse: List of storage accounts destinations.
StorageBlobsDirect []StorageBlobDestinationResponse: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
StorageTablesDirect []StorageTableDestinationResponse: List of Storage Table Direct destinations.

azureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
eventHubs List<EventHubDestinationResponse>: List of Event Hubs destinations.
eventHubsDirect List<EventHubDirectDestinationResponse>: List of Event Hubs Direct destinations.
logAnalytics List<LogAnalyticsDestinationResponse>: List of Log Analytics destinations.
monitoringAccounts List<MonitoringAccountDestinationResponse>: List of monitoring account destinations.
storageAccounts List<StorageBlobDestinationResponse>: List of storage accounts destinations.
storageBlobsDirect List<StorageBlobDestinationResponse>: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storageTablesDirect List<StorageTableDestinationResponse>: List of Storage Table Direct destinations.

azureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
eventHubs EventHubDestinationResponse[]: List of Event Hubs destinations.
eventHubsDirect EventHubDirectDestinationResponse[]: List of Event Hubs Direct destinations.
logAnalytics LogAnalyticsDestinationResponse[]: List of Log Analytics destinations.
monitoringAccounts MonitoringAccountDestinationResponse[]: List of monitoring account destinations.
storageAccounts StorageBlobDestinationResponse[]: List of storage accounts destinations.
storageBlobsDirect StorageBlobDestinationResponse[]: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storageTablesDirect StorageTableDestinationResponse[]: List of Storage Table Direct destinations.

azure_monitor_metrics DestinationsSpecResponseAzureMonitorMetrics: Azure Monitor Metrics destination.
event_hubs Sequence[EventHubDestinationResponse]: List of Event Hubs destinations.
event_hubs_direct Sequence[EventHubDirectDestinationResponse]: List of Event Hubs Direct destinations.
log_analytics Sequence[LogAnalyticsDestinationResponse]: List of Log Analytics destinations.
monitoring_accounts Sequence[MonitoringAccountDestinationResponse]: List of monitoring account destinations.
storage_accounts Sequence[StorageBlobDestinationResponse]: List of storage accounts destinations.
storage_blobs_direct Sequence[StorageBlobDestinationResponse]: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storage_tables_direct Sequence[StorageTableDestinationResponse]: List of Storage Table Direct destinations.

azureMonitorMetrics Property Map: Azure Monitor Metrics destination.
eventHubs List<Property Map>: List of Event Hubs destinations.
eventHubsDirect List<Property Map>: List of Event Hubs Direct destinations.
logAnalytics List<Property Map>: List of Log Analytics destinations.
monitoringAccounts List<Property Map>: List of monitoring account destinations.
storageAccounts List<Property Map>: List of storage accounts destinations.
storageBlobsDirect List<Property Map>: List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
storageTablesDirect List<Property Map>: List of Storage Table Direct destinations.

DataCollectionRuleResponseMetadata, DataCollectionRuleResponseMetadataArgs

ProvisionedBy string: Azure offering managing this resource on-behalf-of customer.
ProvisionedByResourceId string: Resource Id of azure offering managing this resource on-behalf-of customer.

ProvisionedBy string: Azure offering managing this resource on-behalf-of customer.
ProvisionedByResourceId string: Resource Id of azure offering managing this resource on-behalf-of customer.

provisionedBy String: Azure offering managing this resource on-behalf-of customer.
provisionedByResourceId String: Resource Id of azure offering managing this resource on-behalf-of customer.

provisionedBy string: Azure offering managing this resource on-behalf-of customer.
provisionedByResourceId string: Resource Id of azure offering managing this resource on-behalf-of customer.

provisioned_by str: Azure offering managing this resource on-behalf-of customer.
provisioned_by_resource_id str: Resource Id of azure offering managing this resource on-behalf-of customer.

provisionedBy String: Azure offering managing this resource on-behalf-of customer.
provisionedByResourceId String: Resource Id of azure offering managing this resource on-behalf-of customer.

DataFlow, DataFlowArgs

BuiltInTransform string: The builtIn transform to transform stream data
Destinations List<string>: List of destinations for this data flow.
OutputStream string: The output stream of the transform. Only required if the transform changes data to a different stream.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownDataFlowStreams>>: List of streams for this data flow.
TransformKql string: The KQL query to transform stream data.

BuiltInTransform string: The builtIn transform to transform stream data
Destinations []string: List of destinations for this data flow.
OutputStream string: The output stream of the transform. Only required if the transform changes data to a different stream.
Streams []string: List of streams for this data flow.
TransformKql string: The KQL query to transform stream data.

builtInTransform String: The builtIn transform to transform stream data
destinations List<String>: List of destinations for this data flow.
outputStream String: The output stream of the transform. Only required if the transform changes data to a different stream.
streams List<Either<String,KnownDataFlowStreams>>: List of streams for this data flow.
transformKql String: The KQL query to transform stream data.

builtInTransform string: The builtIn transform to transform stream data
destinations string[]: List of destinations for this data flow.
outputStream string: The output stream of the transform. Only required if the transform changes data to a different stream.
streams (string | KnownDataFlowStreams)[]: List of streams for this data flow.
transformKql string: The KQL query to transform stream data.

built_in_transform str: The builtIn transform to transform stream data
destinations Sequence[str]: List of destinations for this data flow.
output_stream str: The output stream of the transform. Only required if the transform changes data to a different stream.
streams Sequence[Union[str, KnownDataFlowStreams]]: List of streams for this data flow.
transform_kql str: The KQL query to transform stream data.

builtInTransform String: The builtIn transform to transform stream data
destinations List<String>: List of destinations for this data flow.
outputStream String: The output stream of the transform. Only required if the transform changes data to a different stream.
streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">: List of streams for this data flow.
transformKql String: The KQL query to transform stream data.

DataFlowResponse, DataFlowResponseArgs

BuiltInTransform string: The builtIn transform to transform stream data
Destinations List<string>: List of destinations for this data flow.
OutputStream string: The output stream of the transform. Only required if the transform changes data to a different stream.
Streams List<string>: List of streams for this data flow.
TransformKql string: The KQL query to transform stream data.

BuiltInTransform string: The builtIn transform to transform stream data
Destinations []string: List of destinations for this data flow.
OutputStream string: The output stream of the transform. Only required if the transform changes data to a different stream.
Streams []string: List of streams for this data flow.
TransformKql string: The KQL query to transform stream data.

builtInTransform String: The builtIn transform to transform stream data
destinations List<String>: List of destinations for this data flow.
outputStream String: The output stream of the transform. Only required if the transform changes data to a different stream.
streams List<String>: List of streams for this data flow.
transformKql String: The KQL query to transform stream data.

builtInTransform string: The builtIn transform to transform stream data
destinations string[]: List of destinations for this data flow.
outputStream string: The output stream of the transform. Only required if the transform changes data to a different stream.
streams string[]: List of streams for this data flow.
transformKql string: The KQL query to transform stream data.

built_in_transform str: The builtIn transform to transform stream data
destinations Sequence[str]: List of destinations for this data flow.
output_stream str: The output stream of the transform. Only required if the transform changes data to a different stream.
streams Sequence[str]: List of streams for this data flow.
transform_kql str: The KQL query to transform stream data.

builtInTransform String: The builtIn transform to transform stream data
destinations List<String>: List of destinations for this data flow.
outputStream String: The output stream of the transform. Only required if the transform changes data to a different stream.
streams List<String>: List of streams for this data flow.
transformKql String: The KQL query to transform stream data.

DataImportSourcesEventHub, DataImportSourcesEventHubArgs

ConsumerGroup string: Event Hub consumer group name
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Stream string: The stream to collect from EventHub

ConsumerGroup string: Event Hub consumer group name
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Stream string: The stream to collect from EventHub

consumerGroup String: Event Hub consumer group name
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream String: The stream to collect from EventHub

consumerGroup string: Event Hub consumer group name
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream string: The stream to collect from EventHub

consumer_group str: Event Hub consumer group name
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream str: The stream to collect from EventHub

consumerGroup String: Event Hub consumer group name
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream String: The stream to collect from EventHub

DataImportSourcesResponseEventHub, DataImportSourcesResponseEventHubArgs

ConsumerGroup string: Event Hub consumer group name
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Stream string: The stream to collect from EventHub

ConsumerGroup string: Event Hub consumer group name
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Stream string: The stream to collect from EventHub

consumerGroup String: Event Hub consumer group name
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream String: The stream to collect from EventHub

consumerGroup string: Event Hub consumer group name
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream string: The stream to collect from EventHub

consumer_group str: Event Hub consumer group name
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream str: The stream to collect from EventHub

consumerGroup String: Event Hub consumer group name
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
stream String: The stream to collect from EventHub

DataSourcesSpecDataImports, DataSourcesSpecDataImportsArgs

EventHub Pulumi.AzureNative.Insights.Inputs.DataImportSourcesEventHub: Definition of Event Hub configuration.

EventHub DataImportSourcesEventHub: Definition of Event Hub configuration.

eventHub DataImportSourcesEventHub: Definition of Event Hub configuration.

eventHub DataImportSourcesEventHub: Definition of Event Hub configuration.

event_hub DataImportSourcesEventHub: Definition of Event Hub configuration.

eventHub Property Map: Definition of Event Hub configuration.

DataSourcesSpecResponseDataImports, DataSourcesSpecResponseDataImportsArgs

EventHub Pulumi.AzureNative.Insights.Inputs.DataImportSourcesResponseEventHub: Definition of Event Hub configuration.

EventHub DataImportSourcesResponseEventHub: Definition of Event Hub configuration.

eventHub DataImportSourcesResponseEventHub: Definition of Event Hub configuration.

eventHub DataImportSourcesResponseEventHub: Definition of Event Hub configuration.

event_hub DataImportSourcesResponseEventHub: Definition of Event Hub configuration.

eventHub Property Map: Definition of Event Hub configuration.

DestinationsSpecAzureMonitorMetrics, DestinationsSpecAzureMonitorMetricsArgs

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

DestinationsSpecResponseAzureMonitorMetrics, DestinationsSpecResponseAzureMonitorMetricsArgs

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubDestination, EventHubDestinationArgs

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId string: The resource ID of the event hub.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

event_hub_resource_id str: The resource ID of the event hub.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubDestinationResponse, EventHubDestinationResponseArgs

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId string: The resource ID of the event hub.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

event_hub_resource_id str: The resource ID of the event hub.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubDirectDestination, EventHubDirectDestinationArgs

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId string: The resource ID of the event hub.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

event_hub_resource_id str: The resource ID of the event hub.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubDirectDestinationResponse, EventHubDirectDestinationResponseArgs

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

EventHubResourceId string: The resource ID of the event hub.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId string: The resource ID of the event hub.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

event_hub_resource_id str: The resource ID of the event hub.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

eventHubResourceId String: The resource ID of the event hub.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

ExtensionDataSource, ExtensionDataSourceArgs

ExtensionName string: The name of the VM extension.
ExtensionSettings object: The extension settings. The format is specific for particular extension.
InputDataSources List<string>: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownExtensionDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionName string: The name of the VM extension.
ExtensionSettings interface{}: The extension settings. The format is specific for particular extension.
InputDataSources []string: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Object: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownExtensionDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName string: The name of the VM extension.
extensionSettings any: The extension settings. The format is specific for particular extension.
inputDataSources string[]: The list of data sources this extension needs data from.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownExtensionDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extension_name str: The name of the VM extension.
extension_settings Any: The extension settings. The format is specific for particular extension.
input_data_sources Sequence[str]: The list of data sources this extension needs data from.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownExtensionDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Any: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionDataSourceResponse, ExtensionDataSourceResponseArgs

ExtensionName string: The name of the VM extension.
ExtensionSettings object: The extension settings. The format is specific for particular extension.
InputDataSources List<string>: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

ExtensionName string: The name of the VM extension.
ExtensionSettings interface{}: The extension settings. The format is specific for particular extension.
InputDataSources []string: The list of data sources this extension needs data from.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Object: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName string: The name of the VM extension.
extensionSettings any: The extension settings. The format is specific for particular extension.
inputDataSources string[]: The list of data sources this extension needs data from.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extension_name str: The name of the VM extension.
extension_settings Any: The extension settings. The format is specific for particular extension.
input_data_sources Sequence[str]: The list of data sources this extension needs data from.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

extensionName String: The name of the VM extension.
extensionSettings Any: The extension settings. The format is specific for particular extension.
inputDataSources List<String>: The list of data sources this extension needs data from.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

IisLogsDataSource, IisLogsDataSourceArgs

Streams List<string>: IIS streams
LogDirectories List<string>: Absolute paths file location
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string: IIS streams
LogDirectories []string: Absolute paths file location
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: IIS streams
logDirectories List<String>: Absolute paths file location
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]: IIS streams
logDirectories string[]: Absolute paths file location
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]: IIS streams
log_directories Sequence[str]: Absolute paths file location
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: IIS streams
logDirectories List<String>: Absolute paths file location
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

IisLogsDataSourceResponse, IisLogsDataSourceResponseArgs

Streams List<string>: IIS streams
LogDirectories List<string>: Absolute paths file location
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string: IIS streams
LogDirectories []string: Absolute paths file location
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: IIS streams
logDirectories List<String>: Absolute paths file location
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]: IIS streams
logDirectories string[]: Absolute paths file location
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]: IIS streams
log_directories Sequence[str]: Absolute paths file location
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: IIS streams
logDirectories List<String>: Absolute paths file location
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

KnownColumnDefinitionType, KnownColumnDefinitionTypeArgs

@String: string
@Int: int
@Long: long
Real: real
Boolean: boolean
Datetime: datetime
@Dynamic: dynamic

KnownColumnDefinitionTypeString: string
KnownColumnDefinitionTypeInt: int
KnownColumnDefinitionTypeLong: long
KnownColumnDefinitionTypeReal: real
KnownColumnDefinitionTypeBoolean: boolean
KnownColumnDefinitionTypeDatetime: datetime
KnownColumnDefinitionTypeDynamic: dynamic

String: string
Int_: int
Long_: long
Real: real
Boolean_: boolean
Datetime: datetime
Dynamic: dynamic

String: string
Int: int
Long: long
Real: real
Boolean: boolean
Datetime: datetime
Dynamic: dynamic

STRING: string
INT: int
LONG: long
REAL: real
BOOLEAN: boolean
DATETIME: datetime
DYNAMIC: dynamic

"string": string
"int": int
"long": long
"real": real
"boolean": boolean
"datetime": datetime
"dynamic": dynamic

KnownDataCollectionRuleResourceKind, KnownDataCollectionRuleResourceKindArgs

Linux: Linux
Windows: Windows

KnownDataCollectionRuleResourceKindLinux: Linux
KnownDataCollectionRuleResourceKindWindows: Windows

Linux: Linux
Windows: Windows

Linux: Linux
Windows: Windows

LINUX: Linux
WINDOWS: Windows

"Linux": Linux
"Windows": Windows

KnownDataFlowStreams, KnownDataFlowStreamsArgs

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

KnownDataFlowStreams_Microsoft_Event: Microsoft-Event
KnownDataFlowStreams_Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
KnownDataFlowStreams_Microsoft_Perf: Microsoft-Perf
KnownDataFlowStreams_Microsoft_Syslog: Microsoft-Syslog
KnownDataFlowStreams_Microsoft_WindowsEvent: Microsoft-WindowsEvent

MicrosoftEvent: Microsoft-Event
MicrosoftInsightsMetrics: Microsoft-InsightsMetrics
MicrosoftPerf: Microsoft-Perf
MicrosoftSyslog: Microsoft-Syslog
MicrosoftWindowsEvent: Microsoft-WindowsEvent

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

MICROSOFT_EVENT: Microsoft-Event
MICROSOFT_INSIGHTS_METRICS: Microsoft-InsightsMetrics
MICROSOFT_PERF: Microsoft-Perf
MICROSOFT_SYSLOG: Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT: Microsoft-WindowsEvent

"Microsoft-Event": Microsoft-Event
"Microsoft-InsightsMetrics": Microsoft-InsightsMetrics
"Microsoft-Perf": Microsoft-Perf
"Microsoft-Syslog": Microsoft-Syslog
"Microsoft-WindowsEvent": Microsoft-WindowsEvent

KnownExtensionDataSourceStreams, KnownExtensionDataSourceStreamsArgs

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

KnownExtensionDataSourceStreams_Microsoft_Event: Microsoft-Event
KnownExtensionDataSourceStreams_Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
KnownExtensionDataSourceStreams_Microsoft_Perf: Microsoft-Perf
KnownExtensionDataSourceStreams_Microsoft_Syslog: Microsoft-Syslog
KnownExtensionDataSourceStreams_Microsoft_WindowsEvent: Microsoft-WindowsEvent

MicrosoftEvent: Microsoft-Event
MicrosoftInsightsMetrics: Microsoft-InsightsMetrics
MicrosoftPerf: Microsoft-Perf
MicrosoftSyslog: Microsoft-Syslog
MicrosoftWindowsEvent: Microsoft-WindowsEvent

Microsoft_Event: Microsoft-Event
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics
Microsoft_Perf: Microsoft-Perf
Microsoft_Syslog: Microsoft-Syslog
Microsoft_WindowsEvent: Microsoft-WindowsEvent

MICROSOFT_EVENT: Microsoft-Event
MICROSOFT_INSIGHTS_METRICS: Microsoft-InsightsMetrics
MICROSOFT_PERF: Microsoft-Perf
MICROSOFT_SYSLOG: Microsoft-Syslog
MICROSOFT_WINDOWS_EVENT: Microsoft-WindowsEvent

"Microsoft-Event": Microsoft-Event
"Microsoft-InsightsMetrics": Microsoft-InsightsMetrics
"Microsoft-Perf": Microsoft-Perf
"Microsoft-Syslog": Microsoft-Syslog
"Microsoft-WindowsEvent": Microsoft-WindowsEvent

KnownLogFileTextSettingsRecordStartTimestampFormat, KnownLogFileTextSettingsRecordStartTimestampFormatArgs

ISO_8601: ISO 8601
YYYY_MM_DD_HH_MM_SS: YYYY-MM-DD HH:MM:SS
M_D_YYYY_HH_MM_SS_AM_PM: M/D/YYYY HH:MM:SS AM/PM
Mon_DD_YYYY_HH_MM_SS: Mon DD, YYYY HH:MM:SS
YyMMdd_HH_mm_ss: yyMMdd HH:mm:ss
DdMMyy_HH_mm_ss: ddMMyy HH:mm:ss
MMM_d_hh_mm_ss: MMM d hh:mm:ss
Dd_MMM_yyyy_HH_mm_ss_zzz: dd/MMM/yyyy:HH:mm:ss zzz
Yyyy_MM_ddTHH_mm_ssK: yyyy-MM-ddTHH:mm:ssK

KnownLogFileTextSettingsRecordStartTimestampFormat_ISO_8601: ISO 8601
KnownLogFileTextSettingsRecordStartTimestampFormat_YYYY_MM_DD_HH_MM_SS: YYYY-MM-DD HH:MM:SS
KnownLogFileTextSettingsRecordStartTimestampFormat_M_D_YYYY_HH_MM_SS_AM_PM: M/D/YYYY HH:MM:SS AM/PM
KnownLogFileTextSettingsRecordStartTimestampFormat_Mon_DD_YYYY_HH_MM_SS: Mon DD, YYYY HH:MM:SS
KnownLogFileTextSettingsRecordStartTimestampFormat_YyMMdd_HH_mm_ss: yyMMdd HH:mm:ss
KnownLogFileTextSettingsRecordStartTimestampFormat_DdMMyy_HH_mm_ss: ddMMyy HH:mm:ss
KnownLogFileTextSettingsRecordStartTimestampFormat_MMM_d_hh_mm_ss: MMM d hh:mm:ss
KnownLogFileTextSettingsRecordStartTimestampFormat_Dd_MMM_yyyy_HH_mm_ss_zzz: dd/MMM/yyyy:HH:mm:ss zzz
KnownLogFileTextSettingsRecordStartTimestampFormat_Yyyy_MM_DdTHH_mm_ssK: yyyy-MM-ddTHH:mm:ssK

ISO_8601: ISO 8601
YYYYMMDD_HH_MM_SS: YYYY-MM-DD HH:MM:SS
M_D_YYYY_HH_MM_SS_AM_PM: M/D/YYYY HH:MM:SS AM/PM
Mon_DD_YYYY_HH_MM_SS: Mon DD, YYYY HH:MM:SS
YyMMdd_HH_mm_ss: yyMMdd HH:mm:ss
DdMMyy_HH_mm_ss: ddMMyy HH:mm:ss
MMM_d_hh_mm_ss: MMM d hh:mm:ss
Dd_MMM_yyyy_HH_mm_ss_zzz: dd/MMM/yyyy:HH:mm:ss zzz
YyyyMMddTHH_mm_ssK: yyyy-MM-ddTHH:mm:ssK

ISO_8601: ISO 8601
YYYY_MM_DD_HH_MM_SS: YYYY-MM-DD HH:MM:SS
M_D_YYYY_HH_MM_SS_AM_PM: M/D/YYYY HH:MM:SS AM/PM
Mon_DD_YYYY_HH_MM_SS: Mon DD, YYYY HH:MM:SS
YyMMdd_HH_mm_ss: yyMMdd HH:mm:ss
DdMMyy_HH_mm_ss: ddMMyy HH:mm:ss
MMM_d_hh_mm_ss: MMM d hh:mm:ss
Dd_MMM_yyyy_HH_mm_ss_zzz: dd/MMM/yyyy:HH:mm:ss zzz
Yyyy_MM_ddTHH_mm_ssK: yyyy-MM-ddTHH:mm:ssK

IS_O_8601: ISO 8601
YYY_Y_M_M_D_D_H_H_M_M_SS: YYYY-MM-DD HH:MM:SS
M_D_YYY_Y_H_H_M_M_S_S_A_M_PM: M/D/YYYY HH:MM:SS AM/PM
MON_D_D_YYY_Y_H_H_M_M_SS: Mon DD, YYYY HH:MM:SS
YY_M_MDD_H_H_MM_SS: yyMMdd HH:mm:ss
DD_M_MYY_H_H_MM_SS: ddMMyy HH:mm:ss
MM_M_D_HH_MM_SS: MMM d hh:mm:ss
DD_MM_M_YYYY_H_H_MM_SS_ZZZ: dd/MMM/yyyy:HH:mm:ss zzz
YYYY_M_M_DD_TH_H_MM_SS_K: yyyy-MM-ddTHH:mm:ssK

"ISO 8601": ISO 8601
"YYYY-MM-DD HH:MM:SS": YYYY-MM-DD HH:MM:SS
"M/D/YYYY HH:MM:SS AM/PM": M/D/YYYY HH:MM:SS AM/PM
"Mon DD, YYYY HH:MM:SS": Mon DD, YYYY HH:MM:SS
"yyMMdd HH:mm:ss": yyMMdd HH:mm:ss
"ddMMyy HH:mm:ss": ddMMyy HH:mm:ss
"MMM d hh:mm:ss": MMM d hh:mm:ss
"dd/MMM/yyyy:HH:mm:ss zzz": dd/MMM/yyyy:HH:mm:ss zzz
"yyyy-MM-ddTHH:mm:ssK": yyyy-MM-ddTHH:mm:ssK

KnownLogFilesDataSourceFormat, KnownLogFilesDataSourceFormatArgs

Text: text

KnownLogFilesDataSourceFormatText: text

Text: text

Text: text

TEXT: text

"text": text

KnownPerfCounterDataSourceStreams, KnownPerfCounterDataSourceStreamsArgs

Microsoft_Perf: Microsoft-Perf
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics

KnownPerfCounterDataSourceStreams_Microsoft_Perf: Microsoft-Perf
KnownPerfCounterDataSourceStreams_Microsoft_InsightsMetrics: Microsoft-InsightsMetrics

MicrosoftPerf: Microsoft-Perf
MicrosoftInsightsMetrics: Microsoft-InsightsMetrics

Microsoft_Perf: Microsoft-Perf
Microsoft_InsightsMetrics: Microsoft-InsightsMetrics

MICROSOFT_PERF: Microsoft-Perf
MICROSOFT_INSIGHTS_METRICS: Microsoft-InsightsMetrics

"Microsoft-Perf": Microsoft-Perf
"Microsoft-InsightsMetrics": Microsoft-InsightsMetrics

KnownPrometheusForwarderDataSourceStreams, KnownPrometheusForwarderDataSourceStreamsArgs

Microsoft_PrometheusMetrics: Microsoft-PrometheusMetrics

KnownPrometheusForwarderDataSourceStreams_Microsoft_PrometheusMetrics: Microsoft-PrometheusMetrics

MicrosoftPrometheusMetrics: Microsoft-PrometheusMetrics

Microsoft_PrometheusMetrics: Microsoft-PrometheusMetrics

MICROSOFT_PROMETHEUS_METRICS: Microsoft-PrometheusMetrics

"Microsoft-PrometheusMetrics": Microsoft-PrometheusMetrics

KnownSyslogDataSourceFacilityNames, KnownSyslogDataSourceFacilityNamesArgs

Alert: alert
Audit: audit
Auth: auth
Authpriv: authpriv
Clock: clock
Cron: cron
Daemon: daemon
Ftp: ftp
Kern: kern
Lpr: lpr
Mail: mail
Mark: mark
News: news
Nopri: nopri
Ntp: ntp
Syslog: syslog
User: user
Uucp: uucp
Local0: local0
Local1: local1
Local2: local2
Local3: local3
Local4: local4
Local5: local5
Local6: local6
Local7: local7
Asterisk: *

KnownSyslogDataSourceFacilityNamesAlert: alert
KnownSyslogDataSourceFacilityNamesAudit: audit
KnownSyslogDataSourceFacilityNamesAuth: auth
KnownSyslogDataSourceFacilityNamesAuthpriv: authpriv
KnownSyslogDataSourceFacilityNamesClock: clock
KnownSyslogDataSourceFacilityNamesCron: cron
KnownSyslogDataSourceFacilityNamesDaemon: daemon
KnownSyslogDataSourceFacilityNamesFtp: ftp
KnownSyslogDataSourceFacilityNamesKern: kern
KnownSyslogDataSourceFacilityNamesLpr: lpr
KnownSyslogDataSourceFacilityNamesMail: mail
KnownSyslogDataSourceFacilityNamesMark: mark
KnownSyslogDataSourceFacilityNamesNews: news
KnownSyslogDataSourceFacilityNamesNopri: nopri
KnownSyslogDataSourceFacilityNamesNtp: ntp
KnownSyslogDataSourceFacilityNamesSyslog: syslog
KnownSyslogDataSourceFacilityNamesUser: user
KnownSyslogDataSourceFacilityNamesUucp: uucp
KnownSyslogDataSourceFacilityNamesLocal0: local0
KnownSyslogDataSourceFacilityNamesLocal1: local1
KnownSyslogDataSourceFacilityNamesLocal2: local2
KnownSyslogDataSourceFacilityNamesLocal3: local3
KnownSyslogDataSourceFacilityNamesLocal4: local4
KnownSyslogDataSourceFacilityNamesLocal5: local5
KnownSyslogDataSourceFacilityNamesLocal6: local6
KnownSyslogDataSourceFacilityNamesLocal7: local7
KnownSyslogDataSourceFacilityNamesAsterisk: *

Alert: alert
Audit: audit
Auth: auth
Authpriv: authpriv
Clock: clock
Cron: cron
Daemon: daemon
Ftp: ftp
Kern: kern
Lpr: lpr
Mail: mail
Mark: mark
News: news
Nopri: nopri
Ntp: ntp
Syslog: syslog
User: user
Uucp: uucp
Local0: local0
Local1: local1
Local2: local2
Local3: local3
Local4: local4
Local5: local5
Local6: local6
Local7: local7
Asterisk: *

Alert: alert
Audit: audit
Auth: auth
Authpriv: authpriv
Clock: clock
Cron: cron
Daemon: daemon
Ftp: ftp
Kern: kern
Lpr: lpr
Mail: mail
Mark: mark
News: news
Nopri: nopri
Ntp: ntp
Syslog: syslog
User: user
Uucp: uucp
Local0: local0
Local1: local1
Local2: local2
Local3: local3
Local4: local4
Local5: local5
Local6: local6
Local7: local7
Asterisk: *

ALERT: alert
AUDIT: audit
AUTH: auth
AUTHPRIV: authpriv
CLOCK: clock
CRON: cron
DAEMON: daemon
FTP: ftp
KERN: kern
LPR: lpr
MAIL: mail
MARK: mark
NEWS: news
NOPRI: nopri
NTP: ntp
SYSLOG: syslog
USER: user
UUCP: uucp
LOCAL0: local0
LOCAL1: local1
LOCAL2: local2
LOCAL3: local3
LOCAL4: local4
LOCAL5: local5
LOCAL6: local6
LOCAL7: local7
ASTERISK: *

"alert": alert
"audit": audit
"auth": auth
"authpriv": authpriv
"clock": clock
"cron": cron
"daemon": daemon
"ftp": ftp
"kern": kern
"lpr": lpr
"mail": mail
"mark": mark
"news": news
"nopri": nopri
"ntp": ntp
"syslog": syslog
"user": user
"uucp": uucp
"local0": local0
"local1": local1
"local2": local2
"local3": local3
"local4": local4
"local5": local5
"local6": local6
"local7": local7
"*": *

KnownSyslogDataSourceLogLevels, KnownSyslogDataSourceLogLevelsArgs

Debug: Debug
Info: Info
Notice: Notice
Warning: Warning
Error: Error
Critical: Critical
Alert: Alert
Emergency: Emergency
Asterisk: *

KnownSyslogDataSourceLogLevelsDebug: Debug
KnownSyslogDataSourceLogLevelsInfo: Info
KnownSyslogDataSourceLogLevelsNotice: Notice
KnownSyslogDataSourceLogLevelsWarning: Warning
KnownSyslogDataSourceLogLevelsError: Error
KnownSyslogDataSourceLogLevelsCritical: Critical
KnownSyslogDataSourceLogLevelsAlert: Alert
KnownSyslogDataSourceLogLevelsEmergency: Emergency
KnownSyslogDataSourceLogLevelsAsterisk: *

Debug: Debug
Info: Info
Notice: Notice
Warning: Warning
Error: Error
Critical: Critical
Alert: Alert
Emergency: Emergency
Asterisk: *

Debug: Debug
Info: Info
Notice: Notice
Warning: Warning
Error: Error
Critical: Critical
Alert: Alert
Emergency: Emergency
Asterisk: *

DEBUG: Debug
INFO: Info
NOTICE: Notice
WARNING: Warning
ERROR: Error
CRITICAL: Critical
ALERT: Alert
EMERGENCY: Emergency
ASTERISK: *

"Debug": Debug
"Info": Info
"Notice": Notice
"Warning": Warning
"Error": Error
"Critical": Critical
"Alert": Alert
"Emergency": Emergency
"*": *

KnownSyslogDataSourceStreams, KnownSyslogDataSourceStreamsArgs

Microsoft_Syslog: Microsoft-Syslog

KnownSyslogDataSourceStreams_Microsoft_Syslog: Microsoft-Syslog

MicrosoftSyslog: Microsoft-Syslog

Microsoft_Syslog: Microsoft-Syslog

MICROSOFT_SYSLOG: Microsoft-Syslog

"Microsoft-Syslog": Microsoft-Syslog

KnownWindowsEventLogDataSourceStreams, KnownWindowsEventLogDataSourceStreamsArgs

Microsoft_WindowsEvent: Microsoft-WindowsEvent
Microsoft_Event: Microsoft-Event

KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent: Microsoft-WindowsEvent
KnownWindowsEventLogDataSourceStreams_Microsoft_Event: Microsoft-Event

MicrosoftWindowsEvent: Microsoft-WindowsEvent
MicrosoftEvent: Microsoft-Event

Microsoft_WindowsEvent: Microsoft-WindowsEvent
Microsoft_Event: Microsoft-Event

MICROSOFT_WINDOWS_EVENT: Microsoft-WindowsEvent
MICROSOFT_EVENT: Microsoft-Event

"Microsoft-WindowsEvent": Microsoft-WindowsEvent
"Microsoft-Event": Microsoft-Event

LogAnalyticsDestination, LogAnalyticsDestinationArgs

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId string: The resource ID of the Log Analytics workspace.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspace_resource_id str: The resource ID of the Log Analytics workspace.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

LogAnalyticsDestinationResponse, LogAnalyticsDestinationResponseArgs

WorkspaceId string: The Customer ID of the Log Analytics workspace.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

WorkspaceId string: The Customer ID of the Log Analytics workspace.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
WorkspaceResourceId string: The resource ID of the Log Analytics workspace.

workspaceId String: The Customer ID of the Log Analytics workspace.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

workspaceId string: The Customer ID of the Log Analytics workspace.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId string: The resource ID of the Log Analytics workspace.

workspace_id str: The Customer ID of the Log Analytics workspace.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspace_resource_id str: The resource ID of the Log Analytics workspace.

workspaceId String: The Customer ID of the Log Analytics workspace.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
workspaceResourceId String: The resource ID of the Log Analytics workspace.

LogFileSettingsResponseText, LogFileSettingsResponseTextArgs

RecordStartTimestampFormat string: One of the supported timestamp formats

RecordStartTimestampFormat string: One of the supported timestamp formats

recordStartTimestampFormat String: One of the supported timestamp formats

recordStartTimestampFormat string: One of the supported timestamp formats

record_start_timestamp_format str: One of the supported timestamp formats

recordStartTimestampFormat String: One of the supported timestamp formats

LogFileSettingsText, LogFileSettingsTextArgs

RecordStartTimestampFormat string | Pulumi.AzureNative.Insights.KnownLogFileTextSettingsRecordStartTimestampFormat: One of the supported timestamp formats

RecordStartTimestampFormat string | KnownLogFileTextSettingsRecordStartTimestampFormat: One of the supported timestamp formats

recordStartTimestampFormat String | KnownLogFileTextSettingsRecordStartTimestampFormat: One of the supported timestamp formats

recordStartTimestampFormat string | KnownLogFileTextSettingsRecordStartTimestampFormat: One of the supported timestamp formats

record_start_timestamp_format str | KnownLogFileTextSettingsRecordStartTimestampFormat: One of the supported timestamp formats

recordStartTimestampFormat String | "ISO 8601" | "YYYY-MM-DD HH:MM:SS" | "M/D/YYYY HH:MM:SS AM/PM" | "Mon DD, YYYY HH:MM:SS" | "yyMMdd HH:mm:ss" | "ddMMyy HH:mm:ss" | "MMM d hh:mm:ss" | "dd/MMM/yyyy:HH:mm:ss zzz" | "yyyy-MM-ddTHH:mm:ssK": One of the supported timestamp formats

LogFilesDataSource, LogFilesDataSourceArgs

FilePatterns List<string>: File Patterns where the log files are located
Format string | Pulumi.AzureNative.Insights.KnownLogFilesDataSourceFormat: The data format of the log files
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Settings Pulumi.AzureNative.Insights.Inputs.LogFilesDataSourceSettings: The log files specific settings.

FilePatterns []string: File Patterns where the log files are located
Format string | KnownLogFilesDataSourceFormat: The data format of the log files
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Settings LogFilesDataSourceSettings: The log files specific settings.

filePatterns List<String>: File Patterns where the log files are located
format String | KnownLogFilesDataSourceFormat: The data format of the log files
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings LogFilesDataSourceSettings: The log files specific settings.

filePatterns string[]: File Patterns where the log files are located
format string | KnownLogFilesDataSourceFormat: The data format of the log files
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings LogFilesDataSourceSettings: The log files specific settings.

file_patterns Sequence[str]: File Patterns where the log files are located
format str | KnownLogFilesDataSourceFormat: The data format of the log files
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings LogFilesDataSourceSettings: The log files specific settings.

filePatterns List<String>: File Patterns where the log files are located
format String | "text": The data format of the log files
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings Property Map: The log files specific settings.

LogFilesDataSourceResponse, LogFilesDataSourceResponseArgs

FilePatterns List<string>: File Patterns where the log files are located
Format string: The data format of the log files
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Settings Pulumi.AzureNative.Insights.Inputs.LogFilesDataSourceResponseSettings: The log files specific settings.

FilePatterns []string: File Patterns where the log files are located
Format string: The data format of the log files
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Settings LogFilesDataSourceResponseSettings: The log files specific settings.

filePatterns List<String>: File Patterns where the log files are located
format String: The data format of the log files
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings LogFilesDataSourceResponseSettings: The log files specific settings.

filePatterns string[]: File Patterns where the log files are located
format string: The data format of the log files
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings LogFilesDataSourceResponseSettings: The log files specific settings.

file_patterns Sequence[str]: File Patterns where the log files are located
format str: The data format of the log files
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings LogFilesDataSourceResponseSettings: The log files specific settings.

filePatterns List<String>: File Patterns where the log files are located
format String: The data format of the log files
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
settings Property Map: The log files specific settings.

LogFilesDataSourceResponseSettings, LogFilesDataSourceResponseSettingsArgs

Text Pulumi.AzureNative.Insights.Inputs.LogFileSettingsResponseText: Text settings

Text LogFileSettingsResponseText: Text settings

text LogFileSettingsResponseText: Text settings

text LogFileSettingsResponseText: Text settings

text LogFileSettingsResponseText: Text settings

text Property Map: Text settings

LogFilesDataSourceSettings, LogFilesDataSourceSettingsArgs

Text Pulumi.AzureNative.Insights.Inputs.LogFileSettingsText: Text settings

Text LogFileSettingsText: Text settings

text LogFileSettingsText: Text settings

text LogFileSettingsText: Text settings

text LogFileSettingsText: Text settings

text Property Map: Text settings

ManagedServiceIdentityType, ManagedServiceIdentityTypeArgs

None: None
SystemAssigned: SystemAssigned
UserAssigned: UserAssigned
SystemAssigned_UserAssigned: SystemAssigned,UserAssigned

ManagedServiceIdentityTypeNone: None
ManagedServiceIdentityTypeSystemAssigned: SystemAssigned
ManagedServiceIdentityTypeUserAssigned: UserAssigned
ManagedServiceIdentityType_SystemAssigned_UserAssigned: SystemAssigned,UserAssigned

None: None
SystemAssigned: SystemAssigned
UserAssigned: UserAssigned
SystemAssigned_UserAssigned: SystemAssigned,UserAssigned

None: None
SystemAssigned: SystemAssigned
UserAssigned: UserAssigned
SystemAssigned_UserAssigned: SystemAssigned,UserAssigned

NONE: None
SYSTEM_ASSIGNED: SystemAssigned
USER_ASSIGNED: UserAssigned
SYSTEM_ASSIGNED_USER_ASSIGNED: SystemAssigned,UserAssigned

"None": None
"SystemAssigned": SystemAssigned
"UserAssigned": UserAssigned
"SystemAssigned,UserAssigned": SystemAssigned,UserAssigned

MonitoringAccountDestination, MonitoringAccountDestinationArgs

AccountResourceId string: The resource ID of the monitoring account.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

AccountResourceId string: The resource ID of the monitoring account.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

accountResourceId String: The resource ID of the monitoring account.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

accountResourceId string: The resource ID of the monitoring account.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

account_resource_id str: The resource ID of the monitoring account.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

accountResourceId String: The resource ID of the monitoring account.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

MonitoringAccountDestinationResponse, MonitoringAccountDestinationResponseArgs

AccountId string: The immutable ID of the account.
AccountResourceId string: The resource ID of the monitoring account.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

AccountId string: The immutable ID of the account.
AccountResourceId string: The resource ID of the monitoring account.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

accountId String: The immutable ID of the account.
accountResourceId String: The resource ID of the monitoring account.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

accountId string: The immutable ID of the account.
accountResourceId string: The resource ID of the monitoring account.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

account_id str: The immutable ID of the account.
account_resource_id str: The resource ID of the monitoring account.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

accountId String: The immutable ID of the account.
accountResourceId String: The resource ID of the monitoring account.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

PerfCounterDataSource, PerfCounterDataSourceArgs

CounterSpecifiers List<string>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPerfCounterDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

CounterSpecifiers []string: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Integer: The number of seconds between consecutive counter measurements (samples).
streams List<Either<String,KnownPerfCounterDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers string[]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds number: The number of seconds between consecutive counter measurements (samples).
streams (string | KnownPerfCounterDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counter_specifiers Sequence[str]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
sampling_frequency_in_seconds int: The number of seconds between consecutive counter measurements (samples).
streams Sequence[Union[str, KnownPerfCounterDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Number: The number of seconds between consecutive counter measurements (samples).
streams List<String | "Microsoft-Perf" | "Microsoft-InsightsMetrics">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

PerfCounterDataSourceResponse, PerfCounterDataSourceResponseArgs

CounterSpecifiers List<string>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

CounterSpecifiers []string: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
SamplingFrequencyInSeconds int: The number of seconds between consecutive counter measurements (samples).
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Integer: The number of seconds between consecutive counter measurements (samples).
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers string[]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds number: The number of seconds between consecutive counter measurements (samples).
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counter_specifiers Sequence[str]: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
sampling_frequency_in_seconds int: The number of seconds between consecutive counter measurements (samples).
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

counterSpecifiers List<String>: A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
samplingFrequencyInSeconds Number: The number of seconds between consecutive counter measurements (samples).
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

PlatformTelemetryDataSource, PlatformTelemetryDataSourceArgs

Streams List<string>: List of platform telemetry streams to collect
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string: List of platform telemetry streams to collect
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: List of platform telemetry streams to collect
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]: List of platform telemetry streams to collect
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]: List of platform telemetry streams to collect
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: List of platform telemetry streams to collect
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

PlatformTelemetryDataSourceResponse, PlatformTelemetryDataSourceResponseArgs

Streams List<string>: List of platform telemetry streams to collect
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string: List of platform telemetry streams to collect
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: List of platform telemetry streams to collect
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]: List of platform telemetry streams to collect
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]: List of platform telemetry streams to collect
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: List of platform telemetry streams to collect
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

PrometheusForwarderDataSource, PrometheusForwarderDataSourceArgs

LabelIncludeFilter Dictionary<string, string>: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPrometheusForwarderDataSourceStreams>>: List of streams that this data source will be sent to.

LabelIncludeFilter map[string]string: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to.

labelIncludeFilter Map<String,String>: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownPrometheusForwarderDataSourceStreams>>: List of streams that this data source will be sent to.

labelIncludeFilter {[key: string]: string}: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownPrometheusForwarderDataSourceStreams)[]: List of streams that this data source will be sent to.

label_include_filter Mapping[str, str]: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownPrometheusForwarderDataSourceStreams]]: List of streams that this data source will be sent to.

labelIncludeFilter Map<String>: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-PrometheusMetrics">: List of streams that this data source will be sent to.

PrometheusForwarderDataSourceResponse, PrometheusForwarderDataSourceResponseArgs

LabelIncludeFilter Dictionary<string, string>: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to.

LabelIncludeFilter map[string]string: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to.

labelIncludeFilter Map<String,String>: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to.

labelIncludeFilter {[key: string]: string}: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to.

label_include_filter Mapping[str, str]: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to.

labelIncludeFilter Map<String>: The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to.

StorageBlobDestination, StorageBlobDestinationArgs

ContainerName string: The container name of the Storage Blob.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.

ContainerName string: The container name of the Storage Blob.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.

containerName String: The container name of the Storage Blob.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.

containerName string: The container name of the Storage Blob.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId string: The resource ID of the storage account.

container_name str: The container name of the Storage Blob.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storage_account_resource_id str: The resource ID of the storage account.

containerName String: The container name of the Storage Blob.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.

StorageBlobDestinationResponse, StorageBlobDestinationResponseArgs

ContainerName string: The container name of the Storage Blob.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.

ContainerName string: The container name of the Storage Blob.
Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.

containerName String: The container name of the Storage Blob.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.

containerName string: The container name of the Storage Blob.
name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId string: The resource ID of the storage account.

container_name str: The container name of the Storage Blob.
name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storage_account_resource_id str: The resource ID of the storage account.

containerName String: The container name of the Storage Blob.
name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.

StorageTableDestination, StorageTableDestinationArgs

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.
TableName string: The name of the Storage Table.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.
TableName string: The name of the Storage Table.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.
tableName String: The name of the Storage Table.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId string: The resource ID of the storage account.
tableName string: The name of the Storage Table.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storage_account_resource_id str: The resource ID of the storage account.
table_name str: The name of the Storage Table.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.
tableName String: The name of the Storage Table.

StorageTableDestinationResponse, StorageTableDestinationResponseArgs

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.
TableName string: The name of the Storage Table.

Name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
StorageAccountResourceId string: The resource ID of the storage account.
TableName string: The name of the Storage Table.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.
tableName String: The name of the Storage Table.

name string: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId string: The resource ID of the storage account.
tableName string: The name of the Storage Table.

name str: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storage_account_resource_id str: The resource ID of the storage account.
table_name str: The name of the Storage Table.

name String: A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
storageAccountResourceId String: The resource ID of the storage account.
tableName String: The name of the Storage Table.

StreamDeclaration, StreamDeclarationArgs

Columns List<Pulumi.AzureNative.Insights.Inputs.ColumnDefinition>: List of columns used by data in this stream.

Columns []ColumnDefinition: List of columns used by data in this stream.

columns List<ColumnDefinition>: List of columns used by data in this stream.

columns ColumnDefinition[]: List of columns used by data in this stream.

columns Sequence[ColumnDefinition]: List of columns used by data in this stream.

columns List<Property Map>: List of columns used by data in this stream.

StreamDeclarationResponse, StreamDeclarationResponseArgs

Columns List<Pulumi.AzureNative.Insights.Inputs.ColumnDefinitionResponse>: List of columns used by data in this stream.

Columns []ColumnDefinitionResponse: List of columns used by data in this stream.

columns List<ColumnDefinitionResponse>: List of columns used by data in this stream.

columns ColumnDefinitionResponse[]: List of columns used by data in this stream.

columns Sequence[ColumnDefinitionResponse]: List of columns used by data in this stream.

columns List<Property Map>: List of columns used by data in this stream.

SyslogDataSource, SyslogDataSourceArgs

FacilityNames List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceFacilityNames>>: The list of facility names.
LogLevels List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceLogLevels>>: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

FacilityNames []string: The list of facility names.
LogLevels []string: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<Either<String,KnownSyslogDataSourceFacilityNames>>: The list of facility names.
logLevels List<Either<String,KnownSyslogDataSourceLogLevels>>: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownSyslogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames (string | KnownSyslogDataSourceFacilityNames)[]: The list of facility names.
logLevels (string | KnownSyslogDataSourceLogLevels)[]: The log levels to collect.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownSyslogDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facility_names Sequence[Union[str, KnownSyslogDataSourceFacilityNames]]: The list of facility names.
log_levels Sequence[Union[str, KnownSyslogDataSourceLogLevels]]: The log levels to collect.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownSyslogDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String | "alert" | "audit" | "auth" | "authpriv" | "clock" | "cron" | "daemon" | "ftp" | "kern" | "lpr" | "mail" | "mark" | "news" | "nopri" | "ntp" | "syslog" | "user" | "uucp" | "local0" | "local1" | "local2" | "local3" | "local4" | "local5" | "local6" | "local7" | "*">: The list of facility names.
logLevels List<String | "Debug" | "Info" | "Notice" | "Warning" | "Error" | "Critical" | "Alert" | "Emergency" | "*">: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-Syslog">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

SyslogDataSourceResponse, SyslogDataSourceResponseArgs

FacilityNames List<string>: The list of facility names.
LogLevels List<string>: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

FacilityNames []string: The list of facility names.
LogLevels []string: The log levels to collect.
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String>: The list of facility names.
logLevels List<String>: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames string[]: The list of facility names.
logLevels string[]: The log levels to collect.
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facility_names Sequence[str]: The list of facility names.
log_levels Sequence[str]: The log levels to collect.
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

facilityNames List<String>: The list of facility names.
logLevels List<String>: The log levels to collect.
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

UserAssignedIdentityResponse, UserAssignedIdentityResponseArgs

ClientId string: The client ID of the assigned identity.
PrincipalId string: The principal ID of the assigned identity.

ClientId string: The client ID of the assigned identity.
PrincipalId string: The principal ID of the assigned identity.

clientId String: The client ID of the assigned identity.
principalId String: The principal ID of the assigned identity.

clientId string: The client ID of the assigned identity.
principalId string: The principal ID of the assigned identity.

client_id str: The client ID of the assigned identity.
principal_id str: The principal ID of the assigned identity.

clientId String: The client ID of the assigned identity.
principalId String: The principal ID of the assigned identity.

WindowsEventLogDataSource, WindowsEventLogDataSourceArgs

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<Union<string, Pulumi.AzureNative.Insights.KnownWindowsEventLogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries List<string>: A list of Windows Event Log queries in XPATH format.

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries []string: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<Either<String,KnownWindowsEventLogDataSourceStreams>>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams (string | KnownWindowsEventLogDataSourceStreams)[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries string[]: A list of Windows Event Log queries in XPATH format.

name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[Union[str, KnownWindowsEventLogDataSourceStreams]]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
x_path_queries Sequence[str]: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String | "Microsoft-WindowsEvent" | "Microsoft-Event">: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

WindowsEventLogDataSourceResponse, WindowsEventLogDataSourceResponseArgs

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams List<string>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries List<string>: A list of Windows Event Log queries in XPATH format.

Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
Streams []string: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
XPathQueries []string: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams string[]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries string[]: A list of Windows Event Log queries in XPATH format.

name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams Sequence[str]: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
x_path_queries Sequence[str]: A list of Windows Event Log queries in XPATH format.

name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
streams List<String>: List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
xPathQueries List<String>: A list of Windows Event Log queries in XPATH format.

WindowsFirewallLogsDataSource, WindowsFirewallLogsDataSourceArgs

Streams List<string>: Firewall logs streams
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string: Firewall logs streams
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: Firewall logs streams
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]: Firewall logs streams
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]: Firewall logs streams
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: Firewall logs streams
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

WindowsFirewallLogsDataSourceResponse, WindowsFirewallLogsDataSourceResponseArgs

Streams List<string>: Firewall logs streams
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Streams []string: Firewall logs streams
Name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: Firewall logs streams
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams string[]: Firewall logs streams
name string: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams Sequence[str]: Firewall logs streams
name str: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

streams List<String>: Firewall logs streams
name String: A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:insights:DataCollectionRule myCollectionRule /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Insights/dataCollectionRules/{dataCollectionRuleName}

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Azure Native pulumi/pulumi-azure-native
License: Apache-2.0

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.47.1 published on Monday, Jun 24, 2024 by Pulumi

pulumi/pulumi-azure-native

azure-native.insights.DataCollectionRule

On this page

On this page

Example Usage

Create or update data collection rule

Create DataCollectionRule Resource

Constructor syntax

Parameters

Constructor example

DataCollectionRule Resource Properties

Inputs

Outputs

Supporting Types

ColumnDefinition, ColumnDefinitionArgs

ColumnDefinitionResponse, ColumnDefinitionResponseArgs

DataCollectionRuleDataSources, DataCollectionRuleDataSourcesArgs

DataCollectionRuleDestinations, DataCollectionRuleDestinationsArgs

DataCollectionRuleResourceIdentity, DataCollectionRuleResourceIdentityArgs

DataCollectionRuleResourceResponseIdentity, DataCollectionRuleResourceResponseIdentityArgs

DataCollectionRuleResourceResponseSystemData, DataCollectionRuleResourceResponseSystemDataArgs

DataCollectionRuleResponseDataSources, DataCollectionRuleResponseDataSourcesArgs

DataCollectionRuleResponseDestinations, DataCollectionRuleResponseDestinationsArgs

DataCollectionRuleResponseMetadata, DataCollectionRuleResponseMetadataArgs

DataFlow, DataFlowArgs

DataFlowResponse, DataFlowResponseArgs

DataImportSourcesEventHub, DataImportSourcesEventHubArgs

DataImportSourcesResponseEventHub, DataImportSourcesResponseEventHubArgs

DataSourcesSpecDataImports, DataSourcesSpecDataImportsArgs

DataSourcesSpecResponseDataImports, DataSourcesSpecResponseDataImportsArgs

DestinationsSpecAzureMonitorMetrics, DestinationsSpecAzureMonitorMetricsArgs

DestinationsSpecResponseAzureMonitorMetrics, DestinationsSpecResponseAzureMonitorMetricsArgs

EventHubDestination, EventHubDestinationArgs

EventHubDestinationResponse, EventHubDestinationResponseArgs

EventHubDirectDestination, EventHubDirectDestinationArgs

EventHubDirectDestinationResponse, EventHubDirectDestinationResponseArgs

ExtensionDataSource, ExtensionDataSourceArgs

ExtensionDataSourceResponse, ExtensionDataSourceResponseArgs

IisLogsDataSource, IisLogsDataSourceArgs

IisLogsDataSourceResponse, IisLogsDataSourceResponseArgs

KnownColumnDefinitionType, KnownColumnDefinitionTypeArgs

KnownDataCollectionRuleResourceKind, KnownDataCollectionRuleResourceKindArgs

KnownDataFlowStreams, KnownDataFlowStreamsArgs

KnownExtensionDataSourceStreams, KnownExtensionDataSourceStreamsArgs

KnownLogFileTextSettingsRecordStartTimestampFormat, KnownLogFileTextSettingsRecordStartTimestampFormatArgs

KnownLogFilesDataSourceFormat, KnownLogFilesDataSourceFormatArgs

KnownPerfCounterDataSourceStreams, KnownPerfCounterDataSourceStreamsArgs

KnownPrometheusForwarderDataSourceStreams, KnownPrometheusForwarderDataSourceStreamsArgs

KnownSyslogDataSourceFacilityNames, KnownSyslogDataSourceFacilityNamesArgs

KnownSyslogDataSourceLogLevels, KnownSyslogDataSourceLogLevelsArgs

KnownSyslogDataSourceStreams, KnownSyslogDataSourceStreamsArgs

KnownWindowsEventLogDataSourceStreams, KnownWindowsEventLogDataSourceStreamsArgs

LogAnalyticsDestination, LogAnalyticsDestinationArgs

LogAnalyticsDestinationResponse, LogAnalyticsDestinationResponseArgs

LogFileSettingsResponseText, LogFileSettingsResponseTextArgs

LogFileSettingsText, LogFileSettingsTextArgs

LogFilesDataSource, LogFilesDataSourceArgs

LogFilesDataSourceResponse, LogFilesDataSourceResponseArgs

LogFilesDataSourceResponseSettings, LogFilesDataSourceResponseSettingsArgs

LogFilesDataSourceSettings, LogFilesDataSourceSettingsArgs

ManagedServiceIdentityType, ManagedServiceIdentityTypeArgs

MonitoringAccountDestination, MonitoringAccountDestinationArgs

MonitoringAccountDestinationResponse, MonitoringAccountDestinationResponseArgs

PerfCounterDataSource, PerfCounterDataSourceArgs

PerfCounterDataSourceResponse, PerfCounterDataSourceResponseArgs

PlatformTelemetryDataSource, PlatformTelemetryDataSourceArgs

PlatformTelemetryDataSourceResponse, PlatformTelemetryDataSourceResponseArgs

PrometheusForwarderDataSource, PrometheusForwarderDataSourceArgs

PrometheusForwarderDataSourceResponse, PrometheusForwarderDataSourceResponseArgs

StorageBlobDestination, StorageBlobDestinationArgs

StorageBlobDestinationResponse, StorageBlobDestinationResponseArgs

StorageTableDestination, StorageTableDestinationArgs

StorageTableDestinationResponse, StorageTableDestinationResponseArgs

StreamDeclaration, StreamDeclarationArgs

StreamDeclarationResponse, StreamDeclarationResponseArgs

SyslogDataSource, SyslogDataSourceArgs

SyslogDataSourceResponse, SyslogDataSourceResponseArgs

UserAssignedIdentityResponse, UserAssignedIdentityResponseArgs

WindowsEventLogDataSource, WindowsEventLogDataSourceArgs

WindowsEventLogDataSourceResponse, WindowsEventLogDataSourceResponseArgs

WindowsFirewallLogsDataSource, WindowsFirewallLogsDataSourceArgs