Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native v2
  3. API Docs
  4. insights
  5. DataCollectionRule
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native-v2.insights.DataCollectionRule

Explore with Pulumi AI

azure-native-v2 logo
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

    Definition of ARM tracked top level resource. Azure REST API version: 2022-06-01. Prior API version in Azure Native 1.x: 2019-11-01-preview.

    Other available API versions: 2023-03-11.

    Example Usage

    Create or update data collection rule

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var dataCollectionRule = new AzureNative.Insights.DataCollectionRule("dataCollectionRule", new()
    {
        DataCollectionRuleName = "myCollectionRule",
        DataFlows = new[]
        {
            new AzureNative.Insights.Inputs.DataFlowArgs
            {
                Destinations = new[]
                {
                    "centralWorkspace",
                },
                Streams = new[]
                {
                    AzureNative.Insights.KnownDataFlowStreams.Microsoft_Perf,
                    AzureNative.Insights.KnownDataFlowStreams.Microsoft_Syslog,
                    AzureNative.Insights.KnownDataFlowStreams.Microsoft_WindowsEvent,
                },
            },
        },
        DataSources = new AzureNative.Insights.Inputs.DataCollectionRuleDataSourcesArgs
        {
            PerformanceCounters = new[]
            {
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Processor(_Total)\\% Processor Time",
                        "\\Memory\\Committed Bytes",
                        "\\LogicalDisk(_Total)\\Free Megabytes",
                        "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                    },
                    Name = "cloudTeamCoreCounters",
                    SamplingFrequencyInSeconds = 15,
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf,
                    },
                },
                new AzureNative.Insights.Inputs.PerfCounterDataSourceArgs
                {
                    CounterSpecifiers = new[]
                    {
                        "\\Process(_Total)\\Thread Count",
                    },
                    Name = "appTeamExtraCounters",
                    SamplingFrequencyInSeconds = 30,
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf,
                    },
                },
            },
            Syslog = new[]
            {
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceFacilityNames.Cron,
                    },
                    LogLevels = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Debug,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Critical,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Emergency,
                    },
                    Name = "cronSyslog",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceStreams.Microsoft_Syslog,
                    },
                },
                new AzureNative.Insights.Inputs.SyslogDataSourceArgs
                {
                    FacilityNames = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceFacilityNames.Syslog,
                    },
                    LogLevels = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Alert,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Critical,
                        AzureNative.Insights.KnownSyslogDataSourceLogLevels.Emergency,
                    },
                    Name = "syslogBase",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownSyslogDataSourceStreams.Microsoft_Syslog,
                    },
                },
            },
            WindowsEventLogs = new[]
            {
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "cloudSecurityTeamEvents",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent,
                    },
                    XPathQueries = new[]
                    {
                        "Security!",
                    },
                },
                new AzureNative.Insights.Inputs.WindowsEventLogDataSourceArgs
                {
                    Name = "appTeam1AppEvents",
                    Streams = new[]
                    {
                        AzureNative.Insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent,
                    },
                    XPathQueries = new[]
                    {
                        "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                        "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                    },
                },
            },
        },
        Destinations = new AzureNative.Insights.Inputs.DataCollectionRuleDestinationsArgs
        {
            LogAnalytics = new[]
            {
                new AzureNative.Insights.Inputs.LogAnalyticsDestinationArgs
                {
                    Name = "centralWorkspace",
                    WorkspaceResourceId = "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
                },
            },
        },
        Location = "eastus",
        ResourceGroupName = "myResourceGroup",
    });

});

    package main

import (
	insights "github.com/pulumi/pulumi-azure-native-sdk/insights/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := insights.NewDataCollectionRule(ctx, "dataCollectionRule", &insights.DataCollectionRuleArgs{
			DataCollectionRuleName: pulumi.String("myCollectionRule"),
			DataFlows: insights.DataFlowArray{
				&insights.DataFlowArgs{
					Destinations: pulumi.StringArray{
						pulumi.String("centralWorkspace"),
					},
					Streams: pulumi.StringArray{
						pulumi.String(insights.KnownDataFlowStreams_Microsoft_Perf),
						pulumi.String(insights.KnownDataFlowStreams_Microsoft_Syslog),
						pulumi.String(insights.KnownDataFlowStreams_Microsoft_WindowsEvent),
					},
				},
			},
			DataSources: &insights.DataCollectionRuleDataSourcesArgs{
				PerformanceCounters: insights.PerfCounterDataSourceArray{
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Processor(_Total)\\% Processor Time"),
							pulumi.String("\\Memory\\Committed Bytes"),
							pulumi.String("\\LogicalDisk(_Total)\\Free Megabytes"),
							pulumi.String("\\PhysicalDisk(_Total)\\Avg. Disk Queue Length"),
						},
						Name:                       pulumi.String("cloudTeamCoreCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(15),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownPerfCounterDataSourceStreams_Microsoft_Perf),
						},
					},
					&insights.PerfCounterDataSourceArgs{
						CounterSpecifiers: pulumi.StringArray{
							pulumi.String("\\Process(_Total)\\Thread Count"),
						},
						Name:                       pulumi.String("appTeamExtraCounters"),
						SamplingFrequencyInSeconds: pulumi.Int(30),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownPerfCounterDataSourceStreams_Microsoft_Perf),
						},
					},
				},
				Syslog: insights.SyslogDataSourceArray{
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceFacilityNamesCron),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsDebug),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsCritical),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsEmergency),
						},
						Name: pulumi.String("cronSyslog"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceStreams_Microsoft_Syslog),
						},
					},
					&insights.SyslogDataSourceArgs{
						FacilityNames: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceFacilityNamesSyslog),
						},
						LogLevels: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsAlert),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsCritical),
							pulumi.String(insights.KnownSyslogDataSourceLogLevelsEmergency),
						},
						Name: pulumi.String("syslogBase"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownSyslogDataSourceStreams_Microsoft_Syslog),
						},
					},
				},
				WindowsEventLogs: insights.WindowsEventLogDataSourceArray{
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("cloudSecurityTeamEvents"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("Security!"),
						},
					},
					&insights.WindowsEventLogDataSourceArgs{
						Name: pulumi.String("appTeam1AppEvents"),
						Streams: pulumi.StringArray{
							pulumi.String(insights.KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent),
						},
						XPathQueries: pulumi.StringArray{
							pulumi.String("System![System[(Level = 1 or Level = 2 or Level = 3)]]"),
							pulumi.String("Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]"),
						},
					},
				},
			},
			Destinations: &insights.DataCollectionRuleDestinationsArgs{
				LogAnalytics: insights.LogAnalyticsDestinationArray{
					&insights.LogAnalyticsDestinationArgs{
						Name:                pulumi.String("centralWorkspace"),
						WorkspaceResourceId: pulumi.String("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace"),
					},
				},
			},
			Location:          pulumi.String("eastus"),
			ResourceGroupName: pulumi.String("myResourceGroup"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.insights.DataCollectionRule;
import com.pulumi.azurenative.insights.DataCollectionRuleArgs;
import com.pulumi.azurenative.insights.inputs.DataFlowArgs;
import com.pulumi.azurenative.insights.inputs.DataCollectionRuleDataSourcesArgs;
import com.pulumi.azurenative.insights.inputs.DataCollectionRuleDestinationsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var dataCollectionRule = new DataCollectionRule("dataCollectionRule", DataCollectionRuleArgs.builder()
            .dataCollectionRuleName("myCollectionRule")
            .dataFlows(DataFlowArgs.builder()
                .destinations("centralWorkspace")
                .streams(                
                    "Microsoft-Perf",
                    "Microsoft-Syslog",
                    "Microsoft-WindowsEvent")
                .build())
            .dataSources(DataCollectionRuleDataSourcesArgs.builder()
                .performanceCounters(                
                    PerfCounterDataSourceArgs.builder()
                        .counterSpecifiers(                        
                            "\\Processor(_Total)\\% Processor Time",
                            "\\Memory\\Committed Bytes",
                            "\\LogicalDisk(_Total)\\Free Megabytes",
                            "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length")
                        .name("cloudTeamCoreCounters")
                        .samplingFrequencyInSeconds(15)
                        .streams("Microsoft-Perf")
                        .build(),
                    PerfCounterDataSourceArgs.builder()
                        .counterSpecifiers("\\Process(_Total)\\Thread Count")
                        .name("appTeamExtraCounters")
                        .samplingFrequencyInSeconds(30)
                        .streams("Microsoft-Perf")
                        .build())
                .syslog(                
                    SyslogDataSourceArgs.builder()
                        .facilityNames("cron")
                        .logLevels(                        
                            "Debug",
                            "Critical",
                            "Emergency")
                        .name("cronSyslog")
                        .streams("Microsoft-Syslog")
                        .build(),
                    SyslogDataSourceArgs.builder()
                        .facilityNames("syslog")
                        .logLevels(                        
                            "Alert",
                            "Critical",
                            "Emergency")
                        .name("syslogBase")
                        .streams("Microsoft-Syslog")
                        .build())
                .windowsEventLogs(                
                    WindowsEventLogDataSourceArgs.builder()
                        .name("cloudSecurityTeamEvents")
                        .streams("Microsoft-WindowsEvent")
                        .xPathQueries("Security!")
                        .build(),
                    WindowsEventLogDataSourceArgs.builder()
                        .name("appTeam1AppEvents")
                        .streams("Microsoft-WindowsEvent")
                        .xPathQueries(                        
                            "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                            "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]")
                        .build())
                .build())
            .destinations(DataCollectionRuleDestinationsArgs.builder()
                .logAnalytics(LogAnalyticsDestinationArgs.builder()
                    .name("centralWorkspace")
                    .workspaceResourceId("/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace")
                    .build())
                .build())
            .location("eastus")
            .resourceGroupName("myResourceGroup")
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const dataCollectionRule = new azure_native.insights.DataCollectionRule("dataCollectionRule", {
    dataCollectionRuleName: "myCollectionRule",
    dataFlows: [{
        destinations: ["centralWorkspace"],
        streams: [
            azure_native.insights.KnownDataFlowStreams.Microsoft_Perf,
            azure_native.insights.KnownDataFlowStreams.Microsoft_Syslog,
            azure_native.insights.KnownDataFlowStreams.Microsoft_WindowsEvent,
        ],
    }],
    dataSources: {
        performanceCounters: [
            {
                counterSpecifiers: [
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                name: "cloudTeamCoreCounters",
                samplingFrequencyInSeconds: 15,
                streams: [azure_native.insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf],
            },
            {
                counterSpecifiers: ["\\Process(_Total)\\Thread Count"],
                name: "appTeamExtraCounters",
                samplingFrequencyInSeconds: 30,
                streams: [azure_native.insights.KnownPerfCounterDataSourceStreams.Microsoft_Perf],
            },
        ],
        syslog: [
            {
                facilityNames: [azure_native.insights.KnownSyslogDataSourceFacilityNames.Cron],
                logLevels: [
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Debug,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Critical,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Emergency,
                ],
                name: "cronSyslog",
                streams: [azure_native.insights.KnownSyslogDataSourceStreams.Microsoft_Syslog],
            },
            {
                facilityNames: [azure_native.insights.KnownSyslogDataSourceFacilityNames.Syslog],
                logLevels: [
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Alert,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Critical,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.Emergency,
                ],
                name: "syslogBase",
                streams: [azure_native.insights.KnownSyslogDataSourceStreams.Microsoft_Syslog],
            },
        ],
        windowsEventLogs: [
            {
                name: "cloudSecurityTeamEvents",
                streams: [azure_native.insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent],
                xPathQueries: ["Security!"],
            },
            {
                name: "appTeam1AppEvents",
                streams: [azure_native.insights.KnownWindowsEventLogDataSourceStreams.Microsoft_WindowsEvent],
                xPathQueries: [
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            },
        ],
    },
    destinations: {
        logAnalytics: [{
            name: "centralWorkspace",
            workspaceResourceId: "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        }],
    },
    location: "eastus",
    resourceGroupName: "myResourceGroup",
});

    import pulumi
import pulumi_azure_native as azure_native

data_collection_rule = azure_native.insights.DataCollectionRule("dataCollectionRule",
    data_collection_rule_name="myCollectionRule",
    data_flows=[{
        "destinations": ["centralWorkspace"],
        "streams": [
            azure_native.insights.KnownDataFlowStreams.MICROSOFT_PERF,
            azure_native.insights.KnownDataFlowStreams.MICROSOFT_SYSLOG,
            azure_native.insights.KnownDataFlowStreams.MICROSOFT_WINDOWS_EVENT,
        ],
    }],
    data_sources={
        "performance_counters": [
            {
                "counter_specifiers": [
                    "\\Processor(_Total)\\% Processor Time",
                    "\\Memory\\Committed Bytes",
                    "\\LogicalDisk(_Total)\\Free Megabytes",
                    "\\PhysicalDisk(_Total)\\Avg. Disk Queue Length",
                ],
                "name": "cloudTeamCoreCounters",
                "sampling_frequency_in_seconds": 15,
                "streams": [azure_native.insights.KnownPerfCounterDataSourceStreams.MICROSOFT_PERF],
            },
            {
                "counter_specifiers": ["\\Process(_Total)\\Thread Count"],
                "name": "appTeamExtraCounters",
                "sampling_frequency_in_seconds": 30,
                "streams": [azure_native.insights.KnownPerfCounterDataSourceStreams.MICROSOFT_PERF],
            },
        ],
        "syslog": [
            {
                "facility_names": [azure_native.insights.KnownSyslogDataSourceFacilityNames.CRON],
                "log_levels": [
                    azure_native.insights.KnownSyslogDataSourceLogLevels.DEBUG,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.CRITICAL,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.EMERGENCY,
                ],
                "name": "cronSyslog",
                "streams": [azure_native.insights.KnownSyslogDataSourceStreams.MICROSOFT_SYSLOG],
            },
            {
                "facility_names": [azure_native.insights.KnownSyslogDataSourceFacilityNames.SYSLOG],
                "log_levels": [
                    azure_native.insights.KnownSyslogDataSourceLogLevels.ALERT,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.CRITICAL,
                    azure_native.insights.KnownSyslogDataSourceLogLevels.EMERGENCY,
                ],
                "name": "syslogBase",
                "streams": [azure_native.insights.KnownSyslogDataSourceStreams.MICROSOFT_SYSLOG],
            },
        ],
        "windows_event_logs": [
            {
                "name": "cloudSecurityTeamEvents",
                "streams": [azure_native.insights.KnownWindowsEventLogDataSourceStreams.MICROSOFT_WINDOWS_EVENT],
                "x_path_queries": ["Security!"],
            },
            {
                "name": "appTeam1AppEvents",
                "streams": [azure_native.insights.KnownWindowsEventLogDataSourceStreams.MICROSOFT_WINDOWS_EVENT],
                "x_path_queries": [
                    "System![System[(Level = 1 or Level = 2 or Level = 3)]]",
                    "Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]",
                ],
            },
        ],
    },
    destinations={
        "log_analytics": [{
            "name": "centralWorkspace",
            "workspace_resource_id": "/subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace",
        }],
    },
    location="eastus",
    resource_group_name="myResourceGroup")

    resources:
  dataCollectionRule:
    type: azure-native:insights:DataCollectionRule
    properties:
      dataCollectionRuleName: myCollectionRule
      dataFlows:
        - destinations:
            - centralWorkspace
          streams:
            - Microsoft-Perf
            - Microsoft-Syslog
            - Microsoft-WindowsEvent
      dataSources:
        performanceCounters:
          - counterSpecifiers:
              - \Processor(_Total)\% Processor Time
              - \Memory\Committed Bytes
              - \LogicalDisk(_Total)\Free Megabytes
              - \PhysicalDisk(_Total)\Avg. Disk Queue Length
            name: cloudTeamCoreCounters
            samplingFrequencyInSeconds: 15
            streams:
              - Microsoft-Perf
          - counterSpecifiers:
              - \Process(_Total)\Thread Count
            name: appTeamExtraCounters
            samplingFrequencyInSeconds: 30
            streams:
              - Microsoft-Perf
        syslog:
          - facilityNames:
              - cron
            logLevels:
              - Debug
              - Critical
              - Emergency
            name: cronSyslog
            streams:
              - Microsoft-Syslog
          - facilityNames:
              - syslog
            logLevels:
              - Alert
              - Critical
              - Emergency
            name: syslogBase
            streams:
              - Microsoft-Syslog
        windowsEventLogs:
          - name: cloudSecurityTeamEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - Security!
          - name: appTeam1AppEvents
            streams:
              - Microsoft-WindowsEvent
            xPathQueries:
              - System![System[(Level = 1 or Level = 2 or Level = 3)]]
              - Application!*[System[(Level = 1 or Level = 2 or Level = 3)]]
      destinations:
        logAnalytics:
          - name: centralWorkspace
            workspaceResourceId: /subscriptions/703362b3-f278-4e4b-9179-c76eaf41ffc2/resourceGroups/myResourceGroup/providers/Microsoft.OperationalInsights/workspaces/centralTeamWorkspace
      location: eastus
      resourceGroupName: myResourceGroup

    Create DataCollectionRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);
    @overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       resource_group_name: Optional[str] = None,
                       data_collection_endpoint_id: Optional[str] = None,
                       data_collection_rule_name: Optional[str] = None,
                       data_flows: Optional[Sequence[DataFlowArgs]] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       identity: Optional[DataCollectionRuleResourceIdentityArgs] = None,
                       kind: Optional[Union[str, KnownDataCollectionRuleResourceKind]] = None,
                       location: Optional[str] = None,
                       stream_declarations: Optional[Mapping[str, StreamDeclarationArgs]] = None,
                       tags: Optional[Mapping[str, str]] = None)
    func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)
    public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)
    public DataCollectionRule(String name, DataCollectionRuleArgs args)
public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)

    type: azure-native:insights:DataCollectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dataCollectionRuleResource = new AzureNative.Insights.DataCollectionRule("dataCollectionRuleResource", new()
{
    ResourceGroupName = "string",
    DataCollectionEndpointId = "string",
    DataCollectionRuleName = "string",
    DataFlows = new[]
    {
        
        {
            { "builtInTransform", "string" },
            { "destinations", new[]
            {
                "string",
            } },
            { "outputStream", "string" },
            { "streams", new[]
            {
                "string",
            } },
            { "transformKql", "string" },
        },
    },
    DataSources = 
    {
        { "dataImports", 
        {
            { "eventHub", 
            {
                { "consumerGroup", "string" },
                { "name", "string" },
                { "stream", "string" },
            } },
        } },
        { "extensions", new[]
        {
            
            {
                { "extensionName", "string" },
                { "extensionSettings", "any" },
                { "inputDataSources", new[]
                {
                    "string",
                } },
                { "name", "string" },
                { "streams", new[]
                {
                    "string",
                } },
            },
        } },
        { "iisLogs", new[]
        {
            
            {
                { "streams", new[]
                {
                    "string",
                } },
                { "logDirectories", new[]
                {
                    "string",
                } },
                { "name", "string" },
            },
        } },
        { "logFiles", new[]
        {
            
            {
                { "filePatterns", new[]
                {
                    "string",
                } },
                { "format", "string" },
                { "streams", new[]
                {
                    "string",
                } },
                { "name", "string" },
                { "settings", 
                {
                    { "text", 
                    {
                        { "recordStartTimestampFormat", "string" },
                    } },
                } },
            },
        } },
        { "performanceCounters", new[]
        {
            
            {
                { "counterSpecifiers", new[]
                {
                    "string",
                } },
                { "name", "string" },
                { "samplingFrequencyInSeconds", 0 },
                { "streams", new[]
                {
                    "string",
                } },
            },
        } },
        { "platformTelemetry", new[]
        {
            
            {
                { "streams", new[]
                {
                    "string",
                } },
                { "name", "string" },
            },
        } },
        { "prometheusForwarder", new[]
        {
            
            {
                { "labelIncludeFilter", 
                {
                    { "string", "string" },
                } },
                { "name", "string" },
                { "streams", new[]
                {
                    "string",
                } },
            },
        } },
        { "syslog", new[]
        {
            
            {
                { "facilityNames", new[]
                {
                    "string",
                } },
                { "logLevels", new[]
                {
                    "string",
                } },
                { "name", "string" },
                { "streams", new[]
                {
                    "string",
                } },
            },
        } },
        { "windowsEventLogs", new[]
        {
            
            {
                { "name", "string" },
                { "streams", new[]
                {
                    "string",
                } },
                { "xPathQueries", new[]
                {
                    "string",
                } },
            },
        } },
        { "windowsFirewallLogs", new[]
        {
            
            {
                { "streams", new[]
                {
                    "string",
                } },
                { "name", "string" },
            },
        } },
    },
    Description = "string",
    Destinations = 
    {
        { "azureMonitorMetrics", 
        {
            { "name", "string" },
        } },
        { "eventHubs", new[]
        {
            
            {
                { "eventHubResourceId", "string" },
                { "name", "string" },
            },
        } },
        { "eventHubsDirect", new[]
        {
            
            {
                { "eventHubResourceId", "string" },
                { "name", "string" },
            },
        } },
        { "logAnalytics", new[]
        {
            
            {
                { "name", "string" },
                { "workspaceResourceId", "string" },
            },
        } },
        { "monitoringAccounts", new[]
        {
            
            {
                { "accountResourceId", "string" },
                { "name", "string" },
            },
        } },
        { "storageAccounts", new[]
        {
            
            {
                { "containerName", "string" },
                { "name", "string" },
                { "storageAccountResourceId", "string" },
            },
        } },
        { "storageBlobsDirect", new[]
        {
            
            {
                { "containerName", "string" },
                { "name", "string" },
                { "storageAccountResourceId", "string" },
            },
        } },
        { "storageTablesDirect", new[]
        {
            
            {
                { "name", "string" },
                { "storageAccountResourceId", "string" },
                { "tableName", "string" },
            },
        } },
    },
    Identity = 
    {
        { "type", "string" },
        { "userAssignedIdentities", new[]
        {
            "string",
        } },
    },
    Kind = "string",
    Location = "string",
    StreamDeclarations = 
    {
        { "string", 
        {
            { "columns", new[]
            {
                
                {
                    { "name", "string" },
                    { "type", "string" },
                },
            } },
        } },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := insights.NewDataCollectionRule(ctx, "dataCollectionRuleResource", &insights.DataCollectionRuleArgs{
	ResourceGroupName:        "string",
	DataCollectionEndpointId: "string",
	DataCollectionRuleName:   "string",
	DataFlows: []map[string]interface{}{
		map[string]interface{}{
			"builtInTransform": "string",
			"destinations": []string{
				"string",
			},
			"outputStream": "string",
			"streams": []string{
				"string",
			},
			"transformKql": "string",
		},
	},
	DataSources: map[string]interface{}{
		"dataImports": map[string]interface{}{
			"eventHub": map[string]interface{}{
				"consumerGroup": "string",
				"name":          "string",
				"stream":        "string",
			},
		},
		"extensions": []map[string]interface{}{
			map[string]interface{}{
				"extensionName":     "string",
				"extensionSettings": "any",
				"inputDataSources": []string{
					"string",
				},
				"name": "string",
				"streams": []string{
					"string",
				},
			},
		},
		"iisLogs": []map[string]interface{}{
			map[string]interface{}{
				"streams": []string{
					"string",
				},
				"logDirectories": []string{
					"string",
				},
				"name": "string",
			},
		},
		"logFiles": []map[string]interface{}{
			map[string]interface{}{
				"filePatterns": []string{
					"string",
				},
				"format": "string",
				"streams": []string{
					"string",
				},
				"name": "string",
				"settings": map[string]interface{}{
					"text": map[string]interface{}{
						"recordStartTimestampFormat": "string",
					},
				},
			},
		},
		"performanceCounters": []map[string]interface{}{
			map[string]interface{}{
				"counterSpecifiers": []string{
					"string",
				},
				"name":                       "string",
				"samplingFrequencyInSeconds": 0,
				"streams": []string{
					"string",
				},
			},
		},
		"platformTelemetry": []map[string]interface{}{
			map[string]interface{}{
				"streams": []string{
					"string",
				},
				"name": "string",
			},
		},
		"prometheusForwarder": []map[string]interface{}{
			map[string]interface{}{
				"labelIncludeFilter": map[string]interface{}{
					"string": "string",
				},
				"name": "string",
				"streams": []string{
					"string",
				},
			},
		},
		"syslog": []map[string]interface{}{
			map[string]interface{}{
				"facilityNames": []string{
					"string",
				},
				"logLevels": []string{
					"string",
				},
				"name": "string",
				"streams": []string{
					"string",
				},
			},
		},
		"windowsEventLogs": []map[string]interface{}{
			map[string]interface{}{
				"name": "string",
				"streams": []string{
					"string",
				},
				"xPathQueries": []string{
					"string",
				},
			},
		},
		"windowsFirewallLogs": []map[string]interface{}{
			map[string]interface{}{
				"streams": []string{
					"string",
				},
				"name": "string",
			},
		},
	},
	Description: "string",
	Destinations: map[string]interface{}{
		"azureMonitorMetrics": map[string]interface{}{
			"name": "string",
		},
		"eventHubs": []map[string]interface{}{
			map[string]interface{}{
				"eventHubResourceId": "string",
				"name":               "string",
			},
		},
		"eventHubsDirect": []map[string]interface{}{
			map[string]interface{}{
				"eventHubResourceId": "string",
				"name":               "string",
			},
		},
		"logAnalytics": []map[string]interface{}{
			map[string]interface{}{
				"name":                "string",
				"workspaceResourceId": "string",
			},
		},
		"monitoringAccounts": []map[string]interface{}{
			map[string]interface{}{
				"accountResourceId": "string",
				"name":              "string",
			},
		},
		"storageAccounts": []map[string]interface{}{
			map[string]interface{}{
				"containerName":            "string",
				"name":                     "string",
				"storageAccountResourceId": "string",
			},
		},
		"storageBlobsDirect": []map[string]interface{}{
			map[string]interface{}{
				"containerName":            "string",
				"name":                     "string",
				"storageAccountResourceId": "string",
			},
		},
		"storageTablesDirect": []map[string]interface{}{
			map[string]interface{}{
				"name":                     "string",
				"storageAccountResourceId": "string",
				"tableName":                "string",
			},
		},
	},
	Identity: map[string]interface{}{
		"type": "string",
		"userAssignedIdentities": []string{
			"string",
		},
	},
	Kind:     "string",
	Location: "string",
	StreamDeclarations: map[string]interface{}{
		"string": map[string]interface{}{
			"columns": []map[string]interface{}{
				map[string]interface{}{
					"name": "string",
					"type": "string",
				},
			},
		},
	},
	Tags: map[string]interface{}{
		"string": "string",
	},
})

    var dataCollectionRuleResource = new DataCollectionRule("dataCollectionRuleResource", DataCollectionRuleArgs.builder()
    .resourceGroupName("string")
    .dataCollectionEndpointId("string")
    .dataCollectionRuleName("string")
    .dataFlows(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .dataSources(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .description("string")
    .destinations(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .identity(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .kind("string")
    .location("string")
    .streamDeclarations(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .build());

    data_collection_rule_resource = azure_native.insights.DataCollectionRule("dataCollectionRuleResource",
    resource_group_name=string,
    data_collection_endpoint_id=string,
    data_collection_rule_name=string,
    data_flows=[{
        builtInTransform: string,
        destinations: [string],
        outputStream: string,
        streams: [string],
        transformKql: string,
    }],
    data_sources={
        dataImports: {
            eventHub: {
                consumerGroup: string,
                name: string,
                stream: string,
            },
        },
        extensions: [{
            extensionName: string,
            extensionSettings: any,
            inputDataSources: [string],
            name: string,
            streams: [string],
        }],
        iisLogs: [{
            streams: [string],
            logDirectories: [string],
            name: string,
        }],
        logFiles: [{
            filePatterns: [string],
            format: string,
            streams: [string],
            name: string,
            settings: {
                text: {
                    recordStartTimestampFormat: string,
                },
            },
        }],
        performanceCounters: [{
            counterSpecifiers: [string],
            name: string,
            samplingFrequencyInSeconds: 0,
            streams: [string],
        }],
        platformTelemetry: [{
            streams: [string],
            name: string,
        }],
        prometheusForwarder: [{
            labelIncludeFilter: {
                string: string,
            },
            name: string,
            streams: [string],
        }],
        syslog: [{
            facilityNames: [string],
            logLevels: [string],
            name: string,
            streams: [string],
        }],
        windowsEventLogs: [{
            name: string,
            streams: [string],
            xPathQueries: [string],
        }],
        windowsFirewallLogs: [{
            streams: [string],
            name: string,
        }],
    },
    description=string,
    destinations={
        azureMonitorMetrics: {
            name: string,
        },
        eventHubs: [{
            eventHubResourceId: string,
            name: string,
        }],
        eventHubsDirect: [{
            eventHubResourceId: string,
            name: string,
        }],
        logAnalytics: [{
            name: string,
            workspaceResourceId: string,
        }],
        monitoringAccounts: [{
            accountResourceId: string,
            name: string,
        }],
        storageAccounts: [{
            containerName: string,
            name: string,
            storageAccountResourceId: string,
        }],
        storageBlobsDirect: [{
            containerName: string,
            name: string,
            storageAccountResourceId: string,
        }],
        storageTablesDirect: [{
            name: string,
            storageAccountResourceId: string,
            tableName: string,
        }],
    },
    identity={
        type: string,
        userAssignedIdentities: [string],
    },
    kind=string,
    location=string,
    stream_declarations={
        string: {
            columns: [{
                name: string,
                type: string,
            }],
        },
    },
    tags={
        string: string,
    })

    const dataCollectionRuleResource = new azure_native.insights.DataCollectionRule("dataCollectionRuleResource", {
    resourceGroupName: "string",
    dataCollectionEndpointId: "string",
    dataCollectionRuleName: "string",
    dataFlows: [{
        builtInTransform: "string",
        destinations: ["string"],
        outputStream: "string",
        streams: ["string"],
        transformKql: "string",
    }],
    dataSources: {
        dataImports: {
            eventHub: {
                consumerGroup: "string",
                name: "string",
                stream: "string",
            },
        },
        extensions: [{
            extensionName: "string",
            extensionSettings: "any",
            inputDataSources: ["string"],
            name: "string",
            streams: ["string"],
        }],
        iisLogs: [{
            streams: ["string"],
            logDirectories: ["string"],
            name: "string",
        }],
        logFiles: [{
            filePatterns: ["string"],
            format: "string",
            streams: ["string"],
            name: "string",
            settings: {
                text: {
                    recordStartTimestampFormat: "string",
                },
            },
        }],
        performanceCounters: [{
            counterSpecifiers: ["string"],
            name: "string",
            samplingFrequencyInSeconds: 0,
            streams: ["string"],
        }],
        platformTelemetry: [{
            streams: ["string"],
            name: "string",
        }],
        prometheusForwarder: [{
            labelIncludeFilter: {
                string: "string",
            },
            name: "string",
            streams: ["string"],
        }],
        syslog: [{
            facilityNames: ["string"],
            logLevels: ["string"],
            name: "string",
            streams: ["string"],
        }],
        windowsEventLogs: [{
            name: "string",
            streams: ["string"],
            xPathQueries: ["string"],
        }],
        windowsFirewallLogs: [{
            streams: ["string"],
            name: "string",
        }],
    },
    description: "string",
    destinations: {
        azureMonitorMetrics: {
            name: "string",
        },
        eventHubs: [{
            eventHubResourceId: "string",
            name: "string",
        }],
        eventHubsDirect: [{
            eventHubResourceId: "string",
            name: "string",
        }],
        logAnalytics: [{
            name: "string",
            workspaceResourceId: "string",
        }],
        monitoringAccounts: [{
            accountResourceId: "string",
            name: "string",
        }],
        storageAccounts: [{
            containerName: "string",
            name: "string",
            storageAccountResourceId: "string",
        }],
        storageBlobsDirect: [{
            containerName: "string",
            name: "string",
            storageAccountResourceId: "string",
        }],
        storageTablesDirect: [{
            name: "string",
            storageAccountResourceId: "string",
            tableName: "string",
        }],
    },
    identity: {
        type: "string",
        userAssignedIdentities: ["string"],
    },
    kind: "string",
    location: "string",
    streamDeclarations: {
        string: {
            columns: [{
                name: "string",
                type: "string",
            }],
        },
    },
    tags: {
        string: "string",
    },
});

    type: azure-native:insights:DataCollectionRule
properties:
    dataCollectionEndpointId: string
    dataCollectionRuleName: string
    dataFlows:
        - builtInTransform: string
          destinations:
            - string
          outputStream: string
          streams:
            - string
          transformKql: string
    dataSources:
        dataImports:
            eventHub:
                consumerGroup: string
                name: string
                stream: string
        extensions:
            - extensionName: string
              extensionSettings: any
              inputDataSources:
                - string
              name: string
              streams:
                - string
        iisLogs:
            - logDirectories:
                - string
              name: string
              streams:
                - string
        logFiles:
            - filePatterns:
                - string
              format: string
              name: string
              settings:
                text:
                    recordStartTimestampFormat: string
              streams:
                - string
        performanceCounters:
            - counterSpecifiers:
                - string
              name: string
              samplingFrequencyInSeconds: 0
              streams:
                - string
        platformTelemetry:
            - name: string
              streams:
                - string
        prometheusForwarder:
            - labelIncludeFilter:
                string: string
              name: string
              streams:
                - string
        syslog:
            - facilityNames:
                - string
              logLevels:
                - string
              name: string
              streams:
                - string
        windowsEventLogs:
            - name: string
              streams:
                - string
              xPathQueries:
                - string
        windowsFirewallLogs:
            - name: string
              streams:
                - string
    description: string
    destinations:
        azureMonitorMetrics:
            name: string
        eventHubs:
            - eventHubResourceId: string
              name: string
        eventHubsDirect:
            - eventHubResourceId: string
              name: string
        logAnalytics:
            - name: string
              workspaceResourceId: string
        monitoringAccounts:
            - accountResourceId: string
              name: string
        storageAccounts:
            - containerName: string
              name: string
              storageAccountResourceId: string
        storageBlobsDirect:
            - containerName: string
              name: string
              storageAccountResourceId: string
        storageTablesDirect:
            - name: string
              storageAccountResourceId: string
              tableName: string
    identity:
        type: string
        userAssignedIdentities:
            - string
    kind: string
    location: string
    resourceGroupName: string
    streamDeclarations:
        string:
            columns:
                - name: string
                  type: string
    tags:
        string: string

    DataCollectionRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DataCollectionRule resource accepts the following input properties:

    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    DataCollectionEndpointId string
    The resource ID of the data collection endpoint that this rule can be used with.
    DataCollectionRuleName string
    The name of the data collection rule. The name is case insensitive.
    DataFlows List<Pulumi.AzureNative.Insights.Inputs.DataFlow>
    The specification of data flows.
    DataSources Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDataSources
    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    Description string
    Description of the data collection rule.
    Destinations Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleDestinations
    The specification of destinations.
    Identity Pulumi.AzureNative.Insights.Inputs.DataCollectionRuleResourceIdentity
    Managed service identity of the resource.
    Kind string | Pulumi.AzureNative.Insights.KnownDataCollectionRuleResourceKind
    The kind of the resource.
    Location string
    The geo-location where the resource lives.
    StreamDeclarations Dictionary<string, Pulumi.AzureNative.Insights.Inputs.StreamDeclarationArgs>
    Declaration of custom streams used in this rule.
    Tags Dictionary<string, string>
    Resource tags.
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    DataCollectionEndpointId string
    The resource ID of the data collection endpoint that this rule can be used with.
    DataCollectionRuleName string
    The name of the data collection rule. The name is case insensitive.
    DataFlows []DataFlowArgs
    The specification of data flows.
    DataSources DataCollectionRuleDataSourcesArgs
    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    Description string
    Description of the data collection rule.
    Destinations DataCollectionRuleDestinationsArgs
    The specification of destinations.
    Identity DataCollectionRuleResourceIdentityArgs
    Managed service identity of the resource.
    Kind string | KnownDataCollectionRuleResourceKind
    The kind of the resource.
    Location string
    The geo-location where the resource lives.
    StreamDeclarations map[string]StreamDeclarationArgs
    Declaration of custom streams used in this rule.
    Tags map[string]string
    Resource tags.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    dataCollectionEndpointId String
    The resource ID of the data collection endpoint that this rule can be used with.
    dataCollectionRuleName String
    The name of the data collection rule. The name is case insensitive.
    dataFlows List<DataFlow>
    The specification of data flows.
    dataSources DataCollectionRuleDataSources
    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description String
    Description of the data collection rule.
    destinations DataCollectionRuleDestinations
    The specification of destinations.
    identity DataCollectionRuleResourceIdentity
    Managed service identity of the resource.
    kind String | KnownDataCollectionRuleResourceKind
    The kind of the resource.
    location String
    The geo-location where the resource lives.
    streamDeclarations Map<String,StreamDeclarationArgs>
    Declaration of custom streams used in this rule.
    tags Map<String,String>
    Resource tags.
    resourceGroupName string
    The name of the resource group. The name is case insensitive.
    dataCollectionEndpointId string
    The resource ID of the data collection endpoint that this rule can be used with.
    dataCollectionRuleName string
    The name of the data collection rule. The name is case insensitive.
    dataFlows DataFlow[]
    The specification of data flows.
    dataSources DataCollectionRuleDataSources
    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description string
    Description of the data collection rule.
    destinations DataCollectionRuleDestinations
    The specification of destinations.
    identity DataCollectionRuleResourceIdentity
    Managed service identity of the resource.
    kind string | KnownDataCollectionRuleResourceKind
    The kind of the resource.
    location string
    The geo-location where the resource lives.
    streamDeclarations {[key: string]: StreamDeclarationArgs}
    Declaration of custom streams used in this rule.
    tags {[key: string]: string}
    Resource tags.
    resource_group_name str
    The name of the resource group. The name is case insensitive.
    data_collection_endpoint_id str
    The resource ID of the data collection endpoint that this rule can be used with.
    data_collection_rule_name str
    The name of the data collection rule. The name is case insensitive.
    data_flows Sequence[DataFlowArgs]
    The specification of data flows.
    data_sources DataCollectionRuleDataSourcesArgs
    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description str
    Description of the data collection rule.
    destinations DataCollectionRuleDestinationsArgs
    The specification of destinations.
    identity DataCollectionRuleResourceIdentityArgs
    Managed service identity of the resource.
    kind str | KnownDataCollectionRuleResourceKind
    The kind of the resource.
    location str
    The geo-location where the resource lives.
    stream_declarations Mapping[str, StreamDeclarationArgs]
    Declaration of custom streams used in this rule.
    tags Mapping[str, str]
    Resource tags.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    dataCollectionEndpointId String
    The resource ID of the data collection endpoint that this rule can be used with.
    dataCollectionRuleName String
    The name of the data collection rule. The name is case insensitive.
    dataFlows List<Property Map>
    The specification of data flows.
    dataSources Property Map
    The specification of data sources. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description String
    Description of the data collection rule.
    destinations Property Map
    The specification of destinations.
    identity Property Map
    Managed service identity of the resource.
    kind String | "Linux" | "Windows"
    The kind of the resource.
    location String
    The geo-location where the resource lives.
    streamDeclarations Map<Property Map>
    Declaration of custom streams used in this rule.
    tags Map<String>
    Resource tags.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

    Etag string
    Resource entity tag (ETag).
    Id string
    The provider-assigned unique ID for this managed resource.
    ImmutableId string
    The immutable ID of this data collection rule. This property is READ-ONLY.
    Metadata Pulumi.AzureNative.Insights.Outputs.DataCollectionRuleResponseMetadata
    Metadata about the resource
    Name string
    The name of the resource.
    ProvisioningState string
    The resource provisioning state.
    SystemData Pulumi.AzureNative.Insights.Outputs.DataCollectionRuleResourceResponseSystemData
    Metadata pertaining to creation and last modification of the resource.
    Type string
    The type of the resource.
    Etag string
    Resource entity tag (ETag).
    Id string
    The provider-assigned unique ID for this managed resource.
    ImmutableId string
    The immutable ID of this data collection rule. This property is READ-ONLY.
    Metadata DataCollectionRuleResponseMetadata
    Metadata about the resource
    Name string
    The name of the resource.
    ProvisioningState string
    The resource provisioning state.
    SystemData DataCollectionRuleResourceResponseSystemData
    Metadata pertaining to creation and last modification of the resource.
    Type string
    The type of the resource.
    etag String
    Resource entity tag (ETag).
    id String
    The provider-assigned unique ID for this managed resource.
    immutableId String
    The immutable ID of this data collection rule. This property is READ-ONLY.
    metadata DataCollectionRuleResponseMetadata
    Metadata about the resource
    name String
    The name of the resource.
    provisioningState String
    The resource provisioning state.
    systemData DataCollectionRuleResourceResponseSystemData
    Metadata pertaining to creation and last modification of the resource.
    type String
    The type of the resource.
    etag string
    Resource entity tag (ETag).
    id string
    The provider-assigned unique ID for this managed resource.
    immutableId string
    The immutable ID of this data collection rule. This property is READ-ONLY.
    metadata DataCollectionRuleResponseMetadata
    Metadata about the resource
    name string
    The name of the resource.
    provisioningState string
    The resource provisioning state.
    systemData DataCollectionRuleResourceResponseSystemData
    Metadata pertaining to creation and last modification of the resource.
    type string
    The type of the resource.
    etag str
    Resource entity tag (ETag).
    id str
    The provider-assigned unique ID for this managed resource.
    immutable_id str
    The immutable ID of this data collection rule. This property is READ-ONLY.
    metadata DataCollectionRuleResponseMetadata
    Metadata about the resource
    name str
    The name of the resource.
    provisioning_state str
    The resource provisioning state.
    system_data DataCollectionRuleResourceResponseSystemData
    Metadata pertaining to creation and last modification of the resource.
    type str
    The type of the resource.
    etag String
    Resource entity tag (ETag).
    id String
    The provider-assigned unique ID for this managed resource.
    immutableId String
    The immutable ID of this data collection rule. This property is READ-ONLY.
    metadata Property Map
    Metadata about the resource
    name String
    The name of the resource.
    provisioningState String
    The resource provisioning state.
    systemData Property Map
    Metadata pertaining to creation and last modification of the resource.
    type String
    The type of the resource.

    Supporting Types

    ColumnDefinition, ColumnDefinitionArgs

    Name string
    The name of the column.
    Type string | Pulumi.AzureNative.Insights.KnownColumnDefinitionType
    The type of the column data.
    Name string
    The name of the column.
    Type string | KnownColumnDefinitionType
    The type of the column data.
    name String
    The name of the column.
    type String | KnownColumnDefinitionType
    The type of the column data.
    name string
    The name of the column.
    type string | KnownColumnDefinitionType
    The type of the column data.
    name str
    The name of the column.
    type str | KnownColumnDefinitionType
    The type of the column data.
    name String
    The name of the column.
    type String | "string" | "int" | "long" | "real" | "boolean" | "datetime" | "dynamic"
    The type of the column data.

    ColumnDefinitionResponse, ColumnDefinitionResponseArgs

    Name string
    The name of the column.
    Type string
    The type of the column data.
    Name string
    The name of the column.
    Type string
    The type of the column data.
    name String
    The name of the column.
    type String
    The type of the column data.
    name string
    The name of the column.
    type string
    The type of the column data.
    name str
    The name of the column.
    type str
    The type of the column data.
    name String
    The name of the column.
    type String
    The type of the column data.

    DataCollectionRuleDataSources, DataCollectionRuleDataSourcesArgs

    DataImports Pulumi.AzureNative.Insights.Inputs.DataSourcesSpecDataImports
    Specifications of pull based data sources
    Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSource>
    The list of Azure VM extension data source configurations.
    IisLogs List<Pulumi.AzureNative.Insights.Inputs.IisLogsDataSource>
    The list of IIS logs source configurations.
    LogFiles List<Pulumi.AzureNative.Insights.Inputs.LogFilesDataSource>
    The list of Log files source configurations.
    PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSource>
    The list of performance counter data source configurations.
    PlatformTelemetry List<Pulumi.AzureNative.Insights.Inputs.PlatformTelemetryDataSource>
    The list of platform telemetry configurations
    PrometheusForwarder List<Pulumi.AzureNative.Insights.Inputs.PrometheusForwarderDataSource>
    The list of Prometheus forwarder data source configurations.
    Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSource>
    The list of Syslog data source configurations.
    WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSource>
    The list of Windows Event Log data source configurations.
    WindowsFirewallLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsFirewallLogsDataSource>
    The list of Windows Firewall logs source configurations.
    DataImports DataSourcesSpecDataImports
    Specifications of pull based data sources
    Extensions []ExtensionDataSource
    The list of Azure VM extension data source configurations.
    IisLogs []IisLogsDataSource
    The list of IIS logs source configurations.
    LogFiles []LogFilesDataSource
    The list of Log files source configurations.
    PerformanceCounters []PerfCounterDataSource
    The list of performance counter data source configurations.
    PlatformTelemetry []PlatformTelemetryDataSource
    The list of platform telemetry configurations
    PrometheusForwarder []PrometheusForwarderDataSource
    The list of Prometheus forwarder data source configurations.
    Syslog []SyslogDataSource
    The list of Syslog data source configurations.
    WindowsEventLogs []WindowsEventLogDataSource
    The list of Windows Event Log data source configurations.
    WindowsFirewallLogs []WindowsFirewallLogsDataSource
    The list of Windows Firewall logs source configurations.
    dataImports DataSourcesSpecDataImports
    Specifications of pull based data sources
    extensions List<ExtensionDataSource>
    The list of Azure VM extension data source configurations.
    iisLogs List<IisLogsDataSource>
    The list of IIS logs source configurations.
    logFiles List<LogFilesDataSource>
    The list of Log files source configurations.
    performanceCounters List<PerfCounterDataSource>
    The list of performance counter data source configurations.
    platformTelemetry List<PlatformTelemetryDataSource>
    The list of platform telemetry configurations
    prometheusForwarder List<PrometheusForwarderDataSource>
    The list of Prometheus forwarder data source configurations.
    syslog List<SyslogDataSource>
    The list of Syslog data source configurations.
    windowsEventLogs List<WindowsEventLogDataSource>
    The list of Windows Event Log data source configurations.
    windowsFirewallLogs List<WindowsFirewallLogsDataSource>
    The list of Windows Firewall logs source configurations.
    dataImports DataSourcesSpecDataImports
    Specifications of pull based data sources
    extensions ExtensionDataSource[]
    The list of Azure VM extension data source configurations.
    iisLogs IisLogsDataSource[]
    The list of IIS logs source configurations.
    logFiles LogFilesDataSource[]
    The list of Log files source configurations.
    performanceCounters PerfCounterDataSource[]
    The list of performance counter data source configurations.
    platformTelemetry PlatformTelemetryDataSource[]
    The list of platform telemetry configurations
    prometheusForwarder PrometheusForwarderDataSource[]
    The list of Prometheus forwarder data source configurations.
    syslog SyslogDataSource[]
    The list of Syslog data source configurations.
    windowsEventLogs WindowsEventLogDataSource[]
    The list of Windows Event Log data source configurations.
    windowsFirewallLogs WindowsFirewallLogsDataSource[]
    The list of Windows Firewall logs source configurations.
    data_imports DataSourcesSpecDataImports
    Specifications of pull based data sources
    extensions Sequence[ExtensionDataSource]
    The list of Azure VM extension data source configurations.
    iis_logs Sequence[IisLogsDataSource]
    The list of IIS logs source configurations.
    log_files Sequence[LogFilesDataSource]
    The list of Log files source configurations.
    performance_counters Sequence[PerfCounterDataSource]
    The list of performance counter data source configurations.
    platform_telemetry Sequence[PlatformTelemetryDataSource]
    The list of platform telemetry configurations
    prometheus_forwarder Sequence[PrometheusForwarderDataSource]
    The list of Prometheus forwarder data source configurations.
    syslog Sequence[SyslogDataSource]
    The list of Syslog data source configurations.
    windows_event_logs Sequence[WindowsEventLogDataSource]
    The list of Windows Event Log data source configurations.
    windows_firewall_logs Sequence[WindowsFirewallLogsDataSource]
    The list of Windows Firewall logs source configurations.
    dataImports Property Map
    Specifications of pull based data sources
    extensions List<Property Map>
    The list of Azure VM extension data source configurations.
    iisLogs List<Property Map>
    The list of IIS logs source configurations.
    logFiles List<Property Map>
    The list of Log files source configurations.
    performanceCounters List<Property Map>
    The list of performance counter data source configurations.
    platformTelemetry List<Property Map>
    The list of platform telemetry configurations
    prometheusForwarder List<Property Map>
    The list of Prometheus forwarder data source configurations.
    syslog List<Property Map>
    The list of Syslog data source configurations.
    windowsEventLogs List<Property Map>
    The list of Windows Event Log data source configurations.
    windowsFirewallLogs List<Property Map>
    The list of Windows Firewall logs source configurations.

    DataCollectionRuleDestinations, DataCollectionRuleDestinationsArgs

    AzureMonitorMetrics Pulumi.AzureNative.Insights.Inputs.DestinationsSpecAzureMonitorMetrics
    Azure Monitor Metrics destination.
    EventHubs List<Pulumi.AzureNative.Insights.Inputs.EventHubDestination>
    List of Event Hubs destinations.
    EventHubsDirect List<Pulumi.AzureNative.Insights.Inputs.EventHubDirectDestination>
    List of Event Hubs Direct destinations.
    LogAnalytics List<Pulumi.AzureNative.Insights.Inputs.LogAnalyticsDestination>
    List of Log Analytics destinations.
    MonitoringAccounts List<Pulumi.AzureNative.Insights.Inputs.MonitoringAccountDestination>
    List of monitoring account destinations.
    StorageAccounts List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestination>
    List of storage accounts destinations.
    StorageBlobsDirect List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestination>
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    StorageTablesDirect List<Pulumi.AzureNative.Insights.Inputs.StorageTableDestination>
    List of Storage Table Direct destinations.
    AzureMonitorMetrics DestinationsSpecAzureMonitorMetrics
    Azure Monitor Metrics destination.
    EventHubs []EventHubDestination
    List of Event Hubs destinations.
    EventHubsDirect []EventHubDirectDestination
    List of Event Hubs Direct destinations.
    LogAnalytics []LogAnalyticsDestination
    List of Log Analytics destinations.
    MonitoringAccounts []MonitoringAccountDestination
    List of monitoring account destinations.
    StorageAccounts []StorageBlobDestination
    List of storage accounts destinations.
    StorageBlobsDirect []StorageBlobDestination
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    StorageTablesDirect []StorageTableDestination
    List of Storage Table Direct destinations.
    azureMonitorMetrics DestinationsSpecAzureMonitorMetrics
    Azure Monitor Metrics destination.
    eventHubs List<EventHubDestination>
    List of Event Hubs destinations.
    eventHubsDirect List<EventHubDirectDestination>
    List of Event Hubs Direct destinations.
    logAnalytics List<LogAnalyticsDestination>
    List of Log Analytics destinations.
    monitoringAccounts List<MonitoringAccountDestination>
    List of monitoring account destinations.
    storageAccounts List<StorageBlobDestination>
    List of storage accounts destinations.
    storageBlobsDirect List<StorageBlobDestination>
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storageTablesDirect List<StorageTableDestination>
    List of Storage Table Direct destinations.
    azureMonitorMetrics DestinationsSpecAzureMonitorMetrics
    Azure Monitor Metrics destination.
    eventHubs EventHubDestination[]
    List of Event Hubs destinations.
    eventHubsDirect EventHubDirectDestination[]
    List of Event Hubs Direct destinations.
    logAnalytics LogAnalyticsDestination[]
    List of Log Analytics destinations.
    monitoringAccounts MonitoringAccountDestination[]
    List of monitoring account destinations.
    storageAccounts StorageBlobDestination[]
    List of storage accounts destinations.
    storageBlobsDirect StorageBlobDestination[]
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storageTablesDirect StorageTableDestination[]
    List of Storage Table Direct destinations.
    azure_monitor_metrics DestinationsSpecAzureMonitorMetrics
    Azure Monitor Metrics destination.
    event_hubs Sequence[EventHubDestination]
    List of Event Hubs destinations.
    event_hubs_direct Sequence[EventHubDirectDestination]
    List of Event Hubs Direct destinations.
    log_analytics Sequence[LogAnalyticsDestination]
    List of Log Analytics destinations.
    monitoring_accounts Sequence[MonitoringAccountDestination]
    List of monitoring account destinations.
    storage_accounts Sequence[StorageBlobDestination]
    List of storage accounts destinations.
    storage_blobs_direct Sequence[StorageBlobDestination]
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storage_tables_direct Sequence[StorageTableDestination]
    List of Storage Table Direct destinations.
    azureMonitorMetrics Property Map
    Azure Monitor Metrics destination.
    eventHubs List<Property Map>
    List of Event Hubs destinations.
    eventHubsDirect List<Property Map>
    List of Event Hubs Direct destinations.
    logAnalytics List<Property Map>
    List of Log Analytics destinations.
    monitoringAccounts List<Property Map>
    List of monitoring account destinations.
    storageAccounts List<Property Map>
    List of storage accounts destinations.
    storageBlobsDirect List<Property Map>
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storageTablesDirect List<Property Map>
    List of Storage Table Direct destinations.

    DataCollectionRuleResourceIdentity, DataCollectionRuleResourceIdentityArgs

    Type string | Pulumi.AzureNative.Insights.ManagedServiceIdentityType
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    UserAssignedIdentities List<string>
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    Type string | ManagedServiceIdentityType
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    UserAssignedIdentities []string
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    type String | ManagedServiceIdentityType
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    userAssignedIdentities List<String>
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    type string | ManagedServiceIdentityType
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    userAssignedIdentities string[]
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    type str | ManagedServiceIdentityType
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    user_assigned_identities Sequence[str]
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    type String | "None" | "SystemAssigned" | "UserAssigned" | "SystemAssigned,UserAssigned"
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    userAssignedIdentities List<String>
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

    DataCollectionRuleResourceResponseIdentity, DataCollectionRuleResourceResponseIdentityArgs

    PrincipalId string
    The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
    TenantId string
    The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
    Type string
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Insights.Inputs.UserAssignedIdentityResponse>
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    PrincipalId string
    The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
    TenantId string
    The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
    Type string
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    UserAssignedIdentities map[string]UserAssignedIdentityResponse
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    principalId String
    The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
    tenantId String
    The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
    type String
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    userAssignedIdentities Map<String,UserAssignedIdentityResponse>
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    principalId string
    The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
    tenantId string
    The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
    type string
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    userAssignedIdentities {[key: string]: UserAssignedIdentityResponse}
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    principal_id str
    The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
    tenant_id str
    The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
    type str
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    user_assigned_identities Mapping[str, UserAssignedIdentityResponse]
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
    principalId String
    The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.
    tenantId String
    The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.
    type String
    Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
    userAssignedIdentities Map<Property Map>
    The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.

    DataCollectionRuleResourceResponseSystemData, DataCollectionRuleResourceResponseSystemDataArgs

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    DataCollectionRuleResponseDataSources, DataCollectionRuleResponseDataSourcesArgs

    DataImports Pulumi.AzureNative.Insights.Inputs.DataSourcesSpecResponseDataImports
    Specifications of pull based data sources
    Extensions List<Pulumi.AzureNative.Insights.Inputs.ExtensionDataSourceResponse>
    The list of Azure VM extension data source configurations.
    IisLogs List<Pulumi.AzureNative.Insights.Inputs.IisLogsDataSourceResponse>
    The list of IIS logs source configurations.
    LogFiles List<Pulumi.AzureNative.Insights.Inputs.LogFilesDataSourceResponse>
    The list of Log files source configurations.
    PerformanceCounters List<Pulumi.AzureNative.Insights.Inputs.PerfCounterDataSourceResponse>
    The list of performance counter data source configurations.
    PlatformTelemetry List<Pulumi.AzureNative.Insights.Inputs.PlatformTelemetryDataSourceResponse>
    The list of platform telemetry configurations
    PrometheusForwarder List<Pulumi.AzureNative.Insights.Inputs.PrometheusForwarderDataSourceResponse>
    The list of Prometheus forwarder data source configurations.
    Syslog List<Pulumi.AzureNative.Insights.Inputs.SyslogDataSourceResponse>
    The list of Syslog data source configurations.
    WindowsEventLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsEventLogDataSourceResponse>
    The list of Windows Event Log data source configurations.
    WindowsFirewallLogs List<Pulumi.AzureNative.Insights.Inputs.WindowsFirewallLogsDataSourceResponse>
    The list of Windows Firewall logs source configurations.
    DataImports DataSourcesSpecResponseDataImports
    Specifications of pull based data sources
    Extensions []ExtensionDataSourceResponse
    The list of Azure VM extension data source configurations.
    IisLogs []IisLogsDataSourceResponse
    The list of IIS logs source configurations.
    LogFiles []LogFilesDataSourceResponse
    The list of Log files source configurations.
    PerformanceCounters []PerfCounterDataSourceResponse
    The list of performance counter data source configurations.
    PlatformTelemetry []PlatformTelemetryDataSourceResponse
    The list of platform telemetry configurations
    PrometheusForwarder []PrometheusForwarderDataSourceResponse
    The list of Prometheus forwarder data source configurations.
    Syslog []SyslogDataSourceResponse
    The list of Syslog data source configurations.
    WindowsEventLogs []WindowsEventLogDataSourceResponse
    The list of Windows Event Log data source configurations.
    WindowsFirewallLogs []WindowsFirewallLogsDataSourceResponse
    The list of Windows Firewall logs source configurations.
    dataImports DataSourcesSpecResponseDataImports
    Specifications of pull based data sources
    extensions List<ExtensionDataSourceResponse>
    The list of Azure VM extension data source configurations.
    iisLogs List<IisLogsDataSourceResponse>
    The list of IIS logs source configurations.
    logFiles List<LogFilesDataSourceResponse>
    The list of Log files source configurations.
    performanceCounters List<PerfCounterDataSourceResponse>
    The list of performance counter data source configurations.
    platformTelemetry List<PlatformTelemetryDataSourceResponse>
    The list of platform telemetry configurations
    prometheusForwarder List<PrometheusForwarderDataSourceResponse>
    The list of Prometheus forwarder data source configurations.
    syslog List<SyslogDataSourceResponse>
    The list of Syslog data source configurations.
    windowsEventLogs List<WindowsEventLogDataSourceResponse>
    The list of Windows Event Log data source configurations.
    windowsFirewallLogs List<WindowsFirewallLogsDataSourceResponse>
    The list of Windows Firewall logs source configurations.
    dataImports DataSourcesSpecResponseDataImports
    Specifications of pull based data sources
    extensions ExtensionDataSourceResponse[]
    The list of Azure VM extension data source configurations.
    iisLogs IisLogsDataSourceResponse[]
    The list of IIS logs source configurations.
    logFiles LogFilesDataSourceResponse[]
    The list of Log files source configurations.
    performanceCounters PerfCounterDataSourceResponse[]
    The list of performance counter data source configurations.
    platformTelemetry PlatformTelemetryDataSourceResponse[]
    The list of platform telemetry configurations
    prometheusForwarder PrometheusForwarderDataSourceResponse[]
    The list of Prometheus forwarder data source configurations.
    syslog SyslogDataSourceResponse[]
    The list of Syslog data source configurations.
    windowsEventLogs WindowsEventLogDataSourceResponse[]
    The list of Windows Event Log data source configurations.
    windowsFirewallLogs WindowsFirewallLogsDataSourceResponse[]
    The list of Windows Firewall logs source configurations.
    data_imports DataSourcesSpecResponseDataImports
    Specifications of pull based data sources
    extensions Sequence[ExtensionDataSourceResponse]
    The list of Azure VM extension data source configurations.
    iis_logs Sequence[IisLogsDataSourceResponse]
    The list of IIS logs source configurations.
    log_files Sequence[LogFilesDataSourceResponse]
    The list of Log files source configurations.
    performance_counters Sequence[PerfCounterDataSourceResponse]
    The list of performance counter data source configurations.
    platform_telemetry Sequence[PlatformTelemetryDataSourceResponse]
    The list of platform telemetry configurations
    prometheus_forwarder Sequence[PrometheusForwarderDataSourceResponse]
    The list of Prometheus forwarder data source configurations.
    syslog Sequence[SyslogDataSourceResponse]
    The list of Syslog data source configurations.
    windows_event_logs Sequence[WindowsEventLogDataSourceResponse]
    The list of Windows Event Log data source configurations.
    windows_firewall_logs Sequence[WindowsFirewallLogsDataSourceResponse]
    The list of Windows Firewall logs source configurations.
    dataImports Property Map
    Specifications of pull based data sources
    extensions List<Property Map>
    The list of Azure VM extension data source configurations.
    iisLogs List<Property Map>
    The list of IIS logs source configurations.
    logFiles List<Property Map>
    The list of Log files source configurations.
    performanceCounters List<Property Map>
    The list of performance counter data source configurations.
    platformTelemetry List<Property Map>
    The list of platform telemetry configurations
    prometheusForwarder List<Property Map>
    The list of Prometheus forwarder data source configurations.
    syslog List<Property Map>
    The list of Syslog data source configurations.
    windowsEventLogs List<Property Map>
    The list of Windows Event Log data source configurations.
    windowsFirewallLogs List<Property Map>
    The list of Windows Firewall logs source configurations.

    DataCollectionRuleResponseDestinations, DataCollectionRuleResponseDestinationsArgs

    AzureMonitorMetrics Pulumi.AzureNative.Insights.Inputs.DestinationsSpecResponseAzureMonitorMetrics
    Azure Monitor Metrics destination.
    EventHubs List<Pulumi.AzureNative.Insights.Inputs.EventHubDestinationResponse>
    List of Event Hubs destinations.
    EventHubsDirect List<Pulumi.AzureNative.Insights.Inputs.EventHubDirectDestinationResponse>
    List of Event Hubs Direct destinations.
    LogAnalytics List<Pulumi.AzureNative.Insights.Inputs.LogAnalyticsDestinationResponse>
    List of Log Analytics destinations.
    MonitoringAccounts List<Pulumi.AzureNative.Insights.Inputs.MonitoringAccountDestinationResponse>
    List of monitoring account destinations.
    StorageAccounts List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestinationResponse>
    List of storage accounts destinations.
    StorageBlobsDirect List<Pulumi.AzureNative.Insights.Inputs.StorageBlobDestinationResponse>
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    StorageTablesDirect List<Pulumi.AzureNative.Insights.Inputs.StorageTableDestinationResponse>
    List of Storage Table Direct destinations.
    AzureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics
    Azure Monitor Metrics destination.
    EventHubs []EventHubDestinationResponse
    List of Event Hubs destinations.
    EventHubsDirect []EventHubDirectDestinationResponse
    List of Event Hubs Direct destinations.
    LogAnalytics []LogAnalyticsDestinationResponse
    List of Log Analytics destinations.
    MonitoringAccounts []MonitoringAccountDestinationResponse
    List of monitoring account destinations.
    StorageAccounts []StorageBlobDestinationResponse
    List of storage accounts destinations.
    StorageBlobsDirect []StorageBlobDestinationResponse
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    StorageTablesDirect []StorageTableDestinationResponse
    List of Storage Table Direct destinations.
    azureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics
    Azure Monitor Metrics destination.
    eventHubs List<EventHubDestinationResponse>
    List of Event Hubs destinations.
    eventHubsDirect List<EventHubDirectDestinationResponse>
    List of Event Hubs Direct destinations.
    logAnalytics List<LogAnalyticsDestinationResponse>
    List of Log Analytics destinations.
    monitoringAccounts List<MonitoringAccountDestinationResponse>
    List of monitoring account destinations.
    storageAccounts List<StorageBlobDestinationResponse>
    List of storage accounts destinations.
    storageBlobsDirect List<StorageBlobDestinationResponse>
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storageTablesDirect List<StorageTableDestinationResponse>
    List of Storage Table Direct destinations.
    azureMonitorMetrics DestinationsSpecResponseAzureMonitorMetrics
    Azure Monitor Metrics destination.
    eventHubs EventHubDestinationResponse[]
    List of Event Hubs destinations.
    eventHubsDirect EventHubDirectDestinationResponse[]
    List of Event Hubs Direct destinations.
    logAnalytics LogAnalyticsDestinationResponse[]
    List of Log Analytics destinations.
    monitoringAccounts MonitoringAccountDestinationResponse[]
    List of monitoring account destinations.
    storageAccounts StorageBlobDestinationResponse[]
    List of storage accounts destinations.
    storageBlobsDirect StorageBlobDestinationResponse[]
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storageTablesDirect StorageTableDestinationResponse[]
    List of Storage Table Direct destinations.
    azure_monitor_metrics DestinationsSpecResponseAzureMonitorMetrics
    Azure Monitor Metrics destination.
    event_hubs Sequence[EventHubDestinationResponse]
    List of Event Hubs destinations.
    event_hubs_direct Sequence[EventHubDirectDestinationResponse]
    List of Event Hubs Direct destinations.
    log_analytics Sequence[LogAnalyticsDestinationResponse]
    List of Log Analytics destinations.
    monitoring_accounts Sequence[MonitoringAccountDestinationResponse]
    List of monitoring account destinations.
    storage_accounts Sequence[StorageBlobDestinationResponse]
    List of storage accounts destinations.
    storage_blobs_direct Sequence[StorageBlobDestinationResponse]
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storage_tables_direct Sequence[StorageTableDestinationResponse]
    List of Storage Table Direct destinations.
    azureMonitorMetrics Property Map
    Azure Monitor Metrics destination.
    eventHubs List<Property Map>
    List of Event Hubs destinations.
    eventHubsDirect List<Property Map>
    List of Event Hubs Direct destinations.
    logAnalytics List<Property Map>
    List of Log Analytics destinations.
    monitoringAccounts List<Property Map>
    List of monitoring account destinations.
    storageAccounts List<Property Map>
    List of storage accounts destinations.
    storageBlobsDirect List<Property Map>
    List of Storage Blob Direct destinations. To be used only for sending data directly to store from the agent.
    storageTablesDirect List<Property Map>
    List of Storage Table Direct destinations.

    DataCollectionRuleResponseMetadata, DataCollectionRuleResponseMetadataArgs

    ProvisionedBy string
    Azure offering managing this resource on-behalf-of customer.
    ProvisionedByResourceId string
    Resource Id of azure offering managing this resource on-behalf-of customer.
    ProvisionedBy string
    Azure offering managing this resource on-behalf-of customer.
    ProvisionedByResourceId string
    Resource Id of azure offering managing this resource on-behalf-of customer.
    provisionedBy String
    Azure offering managing this resource on-behalf-of customer.
    provisionedByResourceId String
    Resource Id of azure offering managing this resource on-behalf-of customer.
    provisionedBy string
    Azure offering managing this resource on-behalf-of customer.
    provisionedByResourceId string
    Resource Id of azure offering managing this resource on-behalf-of customer.
    provisioned_by str
    Azure offering managing this resource on-behalf-of customer.
    provisioned_by_resource_id str
    Resource Id of azure offering managing this resource on-behalf-of customer.
    provisionedBy String
    Azure offering managing this resource on-behalf-of customer.
    provisionedByResourceId String
    Resource Id of azure offering managing this resource on-behalf-of customer.

    DataFlow, DataFlowArgs

    BuiltInTransform string
    The builtIn transform to transform stream data
    Destinations List<string>
    List of destinations for this data flow.
    OutputStream string
    The output stream of the transform. Only required if the transform changes data to a different stream.
    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownDataFlowStreams>>
    List of streams for this data flow.
    TransformKql string
    The KQL query to transform stream data.
    BuiltInTransform string
    The builtIn transform to transform stream data
    Destinations []string
    List of destinations for this data flow.
    OutputStream string
    The output stream of the transform. Only required if the transform changes data to a different stream.
    Streams []string
    List of streams for this data flow.
    TransformKql string
    The KQL query to transform stream data.
    builtInTransform String
    The builtIn transform to transform stream data
    destinations List<String>
    List of destinations for this data flow.
    outputStream String
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams List<Either<String,KnownDataFlowStreams>>
    List of streams for this data flow.
    transformKql String
    The KQL query to transform stream data.
    builtInTransform string
    The builtIn transform to transform stream data
    destinations string[]
    List of destinations for this data flow.
    outputStream string
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams (string | KnownDataFlowStreams)[]
    List of streams for this data flow.
    transformKql string
    The KQL query to transform stream data.
    built_in_transform str
    The builtIn transform to transform stream data
    destinations Sequence[str]
    List of destinations for this data flow.
    output_stream str
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams Sequence[Union[str, KnownDataFlowStreams]]
    List of streams for this data flow.
    transform_kql str
    The KQL query to transform stream data.
    builtInTransform String
    The builtIn transform to transform stream data
    destinations List<String>
    List of destinations for this data flow.
    outputStream String
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">
    List of streams for this data flow.
    transformKql String
    The KQL query to transform stream data.

    DataFlowResponse, DataFlowResponseArgs

    BuiltInTransform string
    The builtIn transform to transform stream data
    Destinations List<string>
    List of destinations for this data flow.
    OutputStream string
    The output stream of the transform. Only required if the transform changes data to a different stream.
    Streams List<string>
    List of streams for this data flow.
    TransformKql string
    The KQL query to transform stream data.
    BuiltInTransform string
    The builtIn transform to transform stream data
    Destinations []string
    List of destinations for this data flow.
    OutputStream string
    The output stream of the transform. Only required if the transform changes data to a different stream.
    Streams []string
    List of streams for this data flow.
    TransformKql string
    The KQL query to transform stream data.
    builtInTransform String
    The builtIn transform to transform stream data
    destinations List<String>
    List of destinations for this data flow.
    outputStream String
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams List<String>
    List of streams for this data flow.
    transformKql String
    The KQL query to transform stream data.
    builtInTransform string
    The builtIn transform to transform stream data
    destinations string[]
    List of destinations for this data flow.
    outputStream string
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams string[]
    List of streams for this data flow.
    transformKql string
    The KQL query to transform stream data.
    built_in_transform str
    The builtIn transform to transform stream data
    destinations Sequence[str]
    List of destinations for this data flow.
    output_stream str
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams Sequence[str]
    List of streams for this data flow.
    transform_kql str
    The KQL query to transform stream data.
    builtInTransform String
    The builtIn transform to transform stream data
    destinations List<String>
    List of destinations for this data flow.
    outputStream String
    The output stream of the transform. Only required if the transform changes data to a different stream.
    streams List<String>
    List of streams for this data flow.
    transformKql String
    The KQL query to transform stream data.

    DataImportSourcesEventHub, DataImportSourcesEventHubArgs

    ConsumerGroup string
    Event Hub consumer group name
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Stream string
    The stream to collect from EventHub
    ConsumerGroup string
    Event Hub consumer group name
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Stream string
    The stream to collect from EventHub
    consumerGroup String
    Event Hub consumer group name
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream String
    The stream to collect from EventHub
    consumerGroup string
    Event Hub consumer group name
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream string
    The stream to collect from EventHub
    consumer_group str
    Event Hub consumer group name
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream str
    The stream to collect from EventHub
    consumerGroup String
    Event Hub consumer group name
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream String
    The stream to collect from EventHub

    DataImportSourcesResponseEventHub, DataImportSourcesResponseEventHubArgs

    ConsumerGroup string
    Event Hub consumer group name
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Stream string
    The stream to collect from EventHub
    ConsumerGroup string
    Event Hub consumer group name
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Stream string
    The stream to collect from EventHub
    consumerGroup String
    Event Hub consumer group name
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream String
    The stream to collect from EventHub
    consumerGroup string
    Event Hub consumer group name
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream string
    The stream to collect from EventHub
    consumer_group str
    Event Hub consumer group name
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream str
    The stream to collect from EventHub
    consumerGroup String
    Event Hub consumer group name
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    stream String
    The stream to collect from EventHub

    DataSourcesSpecDataImports, DataSourcesSpecDataImportsArgs

    EventHub DataImportSourcesEventHub
    Definition of Event Hub configuration.
    eventHub DataImportSourcesEventHub
    Definition of Event Hub configuration.
    eventHub DataImportSourcesEventHub
    Definition of Event Hub configuration.
    event_hub DataImportSourcesEventHub
    Definition of Event Hub configuration.
    eventHub Property Map
    Definition of Event Hub configuration.

    DataSourcesSpecResponseDataImports, DataSourcesSpecResponseDataImportsArgs

    EventHub DataImportSourcesResponseEventHub
    Definition of Event Hub configuration.
    eventHub DataImportSourcesResponseEventHub
    Definition of Event Hub configuration.
    eventHub DataImportSourcesResponseEventHub
    Definition of Event Hub configuration.
    event_hub DataImportSourcesResponseEventHub
    Definition of Event Hub configuration.
    eventHub Property Map
    Definition of Event Hub configuration.

    DestinationsSpecAzureMonitorMetrics, DestinationsSpecAzureMonitorMetricsArgs

    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    DestinationsSpecResponseAzureMonitorMetrics, DestinationsSpecResponseAzureMonitorMetricsArgs

    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    EventHubDestination, EventHubDestinationArgs

    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId string
    The resource ID of the event hub.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    event_hub_resource_id str
    The resource ID of the event hub.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    EventHubDestinationResponse, EventHubDestinationResponseArgs

    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId string
    The resource ID of the event hub.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    event_hub_resource_id str
    The resource ID of the event hub.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    EventHubDirectDestination, EventHubDirectDestinationArgs

    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId string
    The resource ID of the event hub.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    event_hub_resource_id str
    The resource ID of the event hub.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    EventHubDirectDestinationResponse, EventHubDirectDestinationResponseArgs

    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    EventHubResourceId string
    The resource ID of the event hub.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId string
    The resource ID of the event hub.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    event_hub_resource_id str
    The resource ID of the event hub.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    eventHubResourceId String
    The resource ID of the event hub.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    ExtensionDataSource, ExtensionDataSourceArgs

    ExtensionName string
    The name of the VM extension.
    ExtensionSettings object
    The extension settings. The format is specific for particular extension.
    InputDataSources List<string>
    The list of data sources this extension needs data from.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownExtensionDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    ExtensionName string
    The name of the VM extension.
    ExtensionSettings interface{}
    The extension settings. The format is specific for particular extension.
    InputDataSources []string
    The list of data sources this extension needs data from.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extensionName String
    The name of the VM extension.
    extensionSettings Object
    The extension settings. The format is specific for particular extension.
    inputDataSources List<String>
    The list of data sources this extension needs data from.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<Either<String,KnownExtensionDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extensionName string
    The name of the VM extension.
    extensionSettings any
    The extension settings. The format is specific for particular extension.
    inputDataSources string[]
    The list of data sources this extension needs data from.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams (string | KnownExtensionDataSourceStreams)[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extension_name str
    The name of the VM extension.
    extension_settings Any
    The extension settings. The format is specific for particular extension.
    input_data_sources Sequence[str]
    The list of data sources this extension needs data from.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[Union[str, KnownExtensionDataSourceStreams]]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extensionName String
    The name of the VM extension.
    extensionSettings Any
    The extension settings. The format is specific for particular extension.
    inputDataSources List<String>
    The list of data sources this extension needs data from.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String | "Microsoft-Event" | "Microsoft-InsightsMetrics" | "Microsoft-Perf" | "Microsoft-Syslog" | "Microsoft-WindowsEvent">
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    ExtensionDataSourceResponse, ExtensionDataSourceResponseArgs

    ExtensionName string
    The name of the VM extension.
    ExtensionSettings object
    The extension settings. The format is specific for particular extension.
    InputDataSources List<string>
    The list of data sources this extension needs data from.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<string>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    ExtensionName string
    The name of the VM extension.
    ExtensionSettings interface{}
    The extension settings. The format is specific for particular extension.
    InputDataSources []string
    The list of data sources this extension needs data from.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extensionName String
    The name of the VM extension.
    extensionSettings Object
    The extension settings. The format is specific for particular extension.
    inputDataSources List<String>
    The list of data sources this extension needs data from.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extensionName string
    The name of the VM extension.
    extensionSettings any
    The extension settings. The format is specific for particular extension.
    inputDataSources string[]
    The list of data sources this extension needs data from.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extension_name str
    The name of the VM extension.
    extension_settings Any
    The extension settings. The format is specific for particular extension.
    input_data_sources Sequence[str]
    The list of data sources this extension needs data from.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    extensionName String
    The name of the VM extension.
    extensionSettings Any
    The extension settings. The format is specific for particular extension.
    inputDataSources List<String>
    The list of data sources this extension needs data from.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    IisLogsDataSource, IisLogsDataSourceArgs

    Streams List<string>
    IIS streams
    LogDirectories List<string>
    Absolute paths file location
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    IIS streams
    LogDirectories []string
    Absolute paths file location
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    IIS streams
    logDirectories List<String>
    Absolute paths file location
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    IIS streams
    logDirectories string[]
    Absolute paths file location
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    IIS streams
    log_directories Sequence[str]
    Absolute paths file location
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    IIS streams
    logDirectories List<String>
    Absolute paths file location
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    IisLogsDataSourceResponse, IisLogsDataSourceResponseArgs

    Streams List<string>
    IIS streams
    LogDirectories List<string>
    Absolute paths file location
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    IIS streams
    LogDirectories []string
    Absolute paths file location
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    IIS streams
    logDirectories List<String>
    Absolute paths file location
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    IIS streams
    logDirectories string[]
    Absolute paths file location
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    IIS streams
    log_directories Sequence[str]
    Absolute paths file location
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    IIS streams
    logDirectories List<String>
    Absolute paths file location
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    KnownColumnDefinitionType, KnownColumnDefinitionTypeArgs

    @String
    string
    @Int
    int
    @Long
    long
    Real
    real
    Boolean
    boolean
    Datetime
    datetime
    @Dynamic
    dynamic
    KnownColumnDefinitionTypeString
    string
    KnownColumnDefinitionTypeInt
    int
    KnownColumnDefinitionTypeLong
    long
    KnownColumnDefinitionTypeReal
    real
    KnownColumnDefinitionTypeBoolean
    boolean
    KnownColumnDefinitionTypeDatetime
    datetime
    KnownColumnDefinitionTypeDynamic
    dynamic
    String
    string
    Int_
    int
    Long_
    long
    Real
    real
    Boolean_
    boolean
    Datetime
    datetime
    Dynamic
    dynamic
    String
    string
    Int
    int
    Long
    long
    Real
    real
    Boolean
    boolean
    Datetime
    datetime
    Dynamic
    dynamic
    STRING
    string
    INT
    int
    LONG
    long
    REAL
    real
    BOOLEAN
    boolean
    DATETIME
    datetime
    DYNAMIC
    dynamic
    "string"
    string
    "int"
    int
    "long"
    long
    "real"
    real
    "boolean"
    boolean
    "datetime"
    datetime
    "dynamic"
    dynamic

    KnownDataCollectionRuleResourceKind, KnownDataCollectionRuleResourceKindArgs

    Linux
    Linux
    Windows
    Windows
    KnownDataCollectionRuleResourceKindLinux
    Linux
    KnownDataCollectionRuleResourceKindWindows
    Windows
    Linux
    Linux
    Windows
    Windows
    Linux
    Linux
    Windows
    Windows
    LINUX
    Linux
    WINDOWS
    Windows
    "Linux"
    Linux
    "Windows"
    Windows

    KnownDataFlowStreams, KnownDataFlowStreamsArgs

    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    KnownDataFlowStreams_Microsoft_Event
    Microsoft-Event
    KnownDataFlowStreams_Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    KnownDataFlowStreams_Microsoft_Perf
    Microsoft-Perf
    KnownDataFlowStreams_Microsoft_Syslog
    Microsoft-Syslog
    KnownDataFlowStreams_Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MicrosoftEvent
    Microsoft-Event
    MicrosoftInsightsMetrics
    Microsoft-InsightsMetrics
    MicrosoftPerf
    Microsoft-Perf
    MicrosoftSyslog
    Microsoft-Syslog
    MicrosoftWindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MICROSOFT_EVENT
    Microsoft-Event
    MICROSOFT_INSIGHTS_METRICS
    Microsoft-InsightsMetrics
    MICROSOFT_PERF
    Microsoft-Perf
    MICROSOFT_SYSLOG
    Microsoft-Syslog
    MICROSOFT_WINDOWS_EVENT
    Microsoft-WindowsEvent
    "Microsoft-Event"
    Microsoft-Event
    "Microsoft-InsightsMetrics"
    Microsoft-InsightsMetrics
    "Microsoft-Perf"
    Microsoft-Perf
    "Microsoft-Syslog"
    Microsoft-Syslog
    "Microsoft-WindowsEvent"
    Microsoft-WindowsEvent

    KnownExtensionDataSourceStreams, KnownExtensionDataSourceStreamsArgs

    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    KnownExtensionDataSourceStreams_Microsoft_Event
    Microsoft-Event
    KnownExtensionDataSourceStreams_Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    KnownExtensionDataSourceStreams_Microsoft_Perf
    Microsoft-Perf
    KnownExtensionDataSourceStreams_Microsoft_Syslog
    Microsoft-Syslog
    KnownExtensionDataSourceStreams_Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MicrosoftEvent
    Microsoft-Event
    MicrosoftInsightsMetrics
    Microsoft-InsightsMetrics
    MicrosoftPerf
    Microsoft-Perf
    MicrosoftSyslog
    Microsoft-Syslog
    MicrosoftWindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_Syslog
    Microsoft-Syslog
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    MICROSOFT_EVENT
    Microsoft-Event
    MICROSOFT_INSIGHTS_METRICS
    Microsoft-InsightsMetrics
    MICROSOFT_PERF
    Microsoft-Perf
    MICROSOFT_SYSLOG
    Microsoft-Syslog
    MICROSOFT_WINDOWS_EVENT
    Microsoft-WindowsEvent
    "Microsoft-Event"
    Microsoft-Event
    "Microsoft-InsightsMetrics"
    Microsoft-InsightsMetrics
    "Microsoft-Perf"
    Microsoft-Perf
    "Microsoft-Syslog"
    Microsoft-Syslog
    "Microsoft-WindowsEvent"
    Microsoft-WindowsEvent

    KnownLogFileTextSettingsRecordStartTimestampFormat, KnownLogFileTextSettingsRecordStartTimestampFormatArgs

    ISO_8601
    ISO 8601
    YYYY_MM_DD_HH_MM_SS
    YYYY-MM-DD HH:MM:SS
    M_D_YYYY_HH_MM_SS_AM_PM
    M/D/YYYY HH:MM:SS AM/PM
    Mon_DD_YYYY_HH_MM_SS
    Mon DD, YYYY HH:MM:SS
    YyMMdd_HH_mm_ss
    yyMMdd HH:mm:ss
    DdMMyy_HH_mm_ss
    ddMMyy HH:mm:ss
    MMM_d_hh_mm_ss
    MMM d hh:mm:ss
    Dd_MMM_yyyy_HH_mm_ss_zzz
    dd/MMM/yyyy:HH:mm:ss zzz
    Yyyy_MM_ddTHH_mm_ssK
    yyyy-MM-ddTHH:mm:ssK
    KnownLogFileTextSettingsRecordStartTimestampFormat_ISO_8601
    ISO 8601
    KnownLogFileTextSettingsRecordStartTimestampFormat_YYYY_MM_DD_HH_MM_SS
    YYYY-MM-DD HH:MM:SS
    KnownLogFileTextSettingsRecordStartTimestampFormat_M_D_YYYY_HH_MM_SS_AM_PM
    M/D/YYYY HH:MM:SS AM/PM
    KnownLogFileTextSettingsRecordStartTimestampFormat_Mon_DD_YYYY_HH_MM_SS
    Mon DD, YYYY HH:MM:SS
    KnownLogFileTextSettingsRecordStartTimestampFormat_YyMMdd_HH_mm_ss
    yyMMdd HH:mm:ss
    KnownLogFileTextSettingsRecordStartTimestampFormat_DdMMyy_HH_mm_ss
    ddMMyy HH:mm:ss
    KnownLogFileTextSettingsRecordStartTimestampFormat_MMM_d_hh_mm_ss
    MMM d hh:mm:ss
    KnownLogFileTextSettingsRecordStartTimestampFormat_Dd_MMM_yyyy_HH_mm_ss_zzz
    dd/MMM/yyyy:HH:mm:ss zzz
    KnownLogFileTextSettingsRecordStartTimestampFormat_Yyyy_MM_DdTHH_mm_ssK
    yyyy-MM-ddTHH:mm:ssK
    ISO_8601
    ISO 8601
    YYYYMMDD_HH_MM_SS
    YYYY-MM-DD HH:MM:SS
    M_D_YYYY_HH_MM_SS_AM_PM
    M/D/YYYY HH:MM:SS AM/PM
    Mon_DD_YYYY_HH_MM_SS
    Mon DD, YYYY HH:MM:SS
    YyMMdd_HH_mm_ss
    yyMMdd HH:mm:ss
    DdMMyy_HH_mm_ss
    ddMMyy HH:mm:ss
    MMM_d_hh_mm_ss
    MMM d hh:mm:ss
    Dd_MMM_yyyy_HH_mm_ss_zzz
    dd/MMM/yyyy:HH:mm:ss zzz
    YyyyMMddTHH_mm_ssK
    yyyy-MM-ddTHH:mm:ssK
    ISO_8601
    ISO 8601
    YYYY_MM_DD_HH_MM_SS
    YYYY-MM-DD HH:MM:SS
    M_D_YYYY_HH_MM_SS_AM_PM
    M/D/YYYY HH:MM:SS AM/PM
    Mon_DD_YYYY_HH_MM_SS
    Mon DD, YYYY HH:MM:SS
    YyMMdd_HH_mm_ss
    yyMMdd HH:mm:ss
    DdMMyy_HH_mm_ss
    ddMMyy HH:mm:ss
    MMM_d_hh_mm_ss
    MMM d hh:mm:ss
    Dd_MMM_yyyy_HH_mm_ss_zzz
    dd/MMM/yyyy:HH:mm:ss zzz
    Yyyy_MM_ddTHH_mm_ssK
    yyyy-MM-ddTHH:mm:ssK
    IS_O_8601
    ISO 8601
    YYY_Y_M_M_D_D_H_H_M_M_SS
    YYYY-MM-DD HH:MM:SS
    M_D_YYY_Y_H_H_M_M_S_S_A_M_PM
    M/D/YYYY HH:MM:SS AM/PM
    MON_D_D_YYY_Y_H_H_M_M_SS
    Mon DD, YYYY HH:MM:SS
    YY_M_MDD_H_H_MM_SS
    yyMMdd HH:mm:ss
    DD_M_MYY_H_H_MM_SS
    ddMMyy HH:mm:ss
    MM_M_D_HH_MM_SS
    MMM d hh:mm:ss
    DD_MM_M_YYYY_H_H_MM_SS_ZZZ
    dd/MMM/yyyy:HH:mm:ss zzz
    YYYY_M_M_DD_TH_H_MM_SS_K
    yyyy-MM-ddTHH:mm:ssK
    "ISO 8601"
    ISO 8601
    "YYYY-MM-DD HH:MM:SS"
    YYYY-MM-DD HH:MM:SS
    "M/D/YYYY HH:MM:SS AM/PM"
    M/D/YYYY HH:MM:SS AM/PM
    "Mon DD, YYYY HH:MM:SS"
    Mon DD, YYYY HH:MM:SS
    "yyMMdd HH:mm:ss"
    yyMMdd HH:mm:ss
    "ddMMyy HH:mm:ss"
    ddMMyy HH:mm:ss
    "MMM d hh:mm:ss"
    MMM d hh:mm:ss
    "dd/MMM/yyyy:HH:mm:ss zzz"
    dd/MMM/yyyy:HH:mm:ss zzz
    "yyyy-MM-ddTHH:mm:ssK"
    yyyy-MM-ddTHH:mm:ssK

    KnownLogFilesDataSourceFormat, KnownLogFilesDataSourceFormatArgs

    Text
    text
    KnownLogFilesDataSourceFormatText
    text
    Text
    text
    Text
    text
    TEXT
    text
    "text"
    text

    KnownPerfCounterDataSourceStreams, KnownPerfCounterDataSourceStreamsArgs

    Microsoft_Perf
    Microsoft-Perf
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    KnownPerfCounterDataSourceStreams_Microsoft_Perf
    Microsoft-Perf
    KnownPerfCounterDataSourceStreams_Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    MicrosoftPerf
    Microsoft-Perf
    MicrosoftInsightsMetrics
    Microsoft-InsightsMetrics
    Microsoft_Perf
    Microsoft-Perf
    Microsoft_InsightsMetrics
    Microsoft-InsightsMetrics
    MICROSOFT_PERF
    Microsoft-Perf
    MICROSOFT_INSIGHTS_METRICS
    Microsoft-InsightsMetrics
    "Microsoft-Perf"
    Microsoft-Perf
    "Microsoft-InsightsMetrics"
    Microsoft-InsightsMetrics

    KnownPrometheusForwarderDataSourceStreams, KnownPrometheusForwarderDataSourceStreamsArgs

    Microsoft_PrometheusMetrics
    Microsoft-PrometheusMetrics
    KnownPrometheusForwarderDataSourceStreams_Microsoft_PrometheusMetrics
    Microsoft-PrometheusMetrics
    MicrosoftPrometheusMetrics
    Microsoft-PrometheusMetrics
    Microsoft_PrometheusMetrics
    Microsoft-PrometheusMetrics
    MICROSOFT_PROMETHEUS_METRICS
    Microsoft-PrometheusMetrics
    "Microsoft-PrometheusMetrics"
    Microsoft-PrometheusMetrics

    KnownSyslogDataSourceFacilityNames, KnownSyslogDataSourceFacilityNamesArgs

    Alert
    alert
    Audit
    audit
    Auth
    auth
    Authpriv
    authpriv
    Clock
    clock
    Cron
    cron
    Daemon
    daemon
    Ftp
    ftp
    Kern
    kern
    Lpr
    lpr
    Mail
    mail
    Mark
    mark
    News
    news
    Nopri
    nopri
    Ntp
    ntp
    Syslog
    syslog
    User
    user
    Uucp
    uucp
    Local0
    local0
    Local1
    local1
    Local2
    local2
    Local3
    local3
    Local4
    local4
    Local5
    local5
    Local6
    local6
    Local7
    local7
    Asterisk
    *
    KnownSyslogDataSourceFacilityNamesAlert
    alert
    KnownSyslogDataSourceFacilityNamesAudit
    audit
    KnownSyslogDataSourceFacilityNamesAuth
    auth
    KnownSyslogDataSourceFacilityNamesAuthpriv
    authpriv
    KnownSyslogDataSourceFacilityNamesClock
    clock
    KnownSyslogDataSourceFacilityNamesCron
    cron
    KnownSyslogDataSourceFacilityNamesDaemon
    daemon
    KnownSyslogDataSourceFacilityNamesFtp
    ftp
    KnownSyslogDataSourceFacilityNamesKern
    kern
    KnownSyslogDataSourceFacilityNamesLpr
    lpr
    KnownSyslogDataSourceFacilityNamesMail
    mail
    KnownSyslogDataSourceFacilityNamesMark
    mark
    KnownSyslogDataSourceFacilityNamesNews
    news
    KnownSyslogDataSourceFacilityNamesNopri
    nopri
    KnownSyslogDataSourceFacilityNamesNtp
    ntp
    KnownSyslogDataSourceFacilityNamesSyslog
    syslog
    KnownSyslogDataSourceFacilityNamesUser
    user
    KnownSyslogDataSourceFacilityNamesUucp
    uucp
    KnownSyslogDataSourceFacilityNamesLocal0
    local0
    KnownSyslogDataSourceFacilityNamesLocal1
    local1
    KnownSyslogDataSourceFacilityNamesLocal2
    local2
    KnownSyslogDataSourceFacilityNamesLocal3
    local3
    KnownSyslogDataSourceFacilityNamesLocal4
    local4
    KnownSyslogDataSourceFacilityNamesLocal5
    local5
    KnownSyslogDataSourceFacilityNamesLocal6
    local6
    KnownSyslogDataSourceFacilityNamesLocal7
    local7
    KnownSyslogDataSourceFacilityNamesAsterisk
    *
    Alert
    alert
    Audit
    audit
    Auth
    auth
    Authpriv
    authpriv
    Clock
    clock
    Cron
    cron
    Daemon
    daemon
    Ftp
    ftp
    Kern
    kern
    Lpr
    lpr
    Mail
    mail
    Mark
    mark
    News
    news
    Nopri
    nopri
    Ntp
    ntp
    Syslog
    syslog
    User
    user
    Uucp
    uucp
    Local0
    local0
    Local1
    local1
    Local2
    local2
    Local3
    local3
    Local4
    local4
    Local5
    local5
    Local6
    local6
    Local7
    local7
    Asterisk
    *
    Alert
    alert
    Audit
    audit
    Auth
    auth
    Authpriv
    authpriv
    Clock
    clock
    Cron
    cron
    Daemon
    daemon
    Ftp
    ftp
    Kern
    kern
    Lpr
    lpr
    Mail
    mail
    Mark
    mark
    News
    news
    Nopri
    nopri
    Ntp
    ntp
    Syslog
    syslog
    User
    user
    Uucp
    uucp
    Local0
    local0
    Local1
    local1
    Local2
    local2
    Local3
    local3
    Local4
    local4
    Local5
    local5
    Local6
    local6
    Local7
    local7
    Asterisk
    *
    ALERT
    alert
    AUDIT
    audit
    AUTH
    auth
    AUTHPRIV
    authpriv
    CLOCK
    clock
    CRON
    cron
    DAEMON
    daemon
    FTP
    ftp
    KERN
    kern
    LPR
    lpr
    MAIL
    mail
    MARK
    mark
    NEWS
    news
    NOPRI
    nopri
    NTP
    ntp
    SYSLOG
    syslog
    USER
    user
    UUCP
    uucp
    LOCAL0
    local0
    LOCAL1
    local1
    LOCAL2
    local2
    LOCAL3
    local3
    LOCAL4
    local4
    LOCAL5
    local5
    LOCAL6
    local6
    LOCAL7
    local7
    ASTERISK
    *
    "alert"
    alert
    "audit"
    audit
    "auth"
    auth
    "authpriv"
    authpriv
    "clock"
    clock
    "cron"
    cron
    "daemon"
    daemon
    "ftp"
    ftp
    "kern"
    kern
    "lpr"
    lpr
    "mail"
    mail
    "mark"
    mark
    "news"
    news
    "nopri"
    nopri
    "ntp"
    ntp
    "syslog"
    syslog
    "user"
    user
    "uucp"
    uucp
    "local0"
    local0
    "local1"
    local1
    "local2"
    local2
    "local3"
    local3
    "local4"
    local4
    "local5"
    local5
    "local6"
    local6
    "local7"
    local7
    "*"
    *

    KnownSyslogDataSourceLogLevels, KnownSyslogDataSourceLogLevelsArgs

    Debug
    Debug
    Info
    Info
    Notice
    Notice
    Warning
    Warning
    Error
    Error
    Critical
    Critical
    Alert
    Alert
    Emergency
    Emergency
    Asterisk
    *
    KnownSyslogDataSourceLogLevelsDebug
    Debug
    KnownSyslogDataSourceLogLevelsInfo
    Info
    KnownSyslogDataSourceLogLevelsNotice
    Notice
    KnownSyslogDataSourceLogLevelsWarning
    Warning
    KnownSyslogDataSourceLogLevelsError
    Error
    KnownSyslogDataSourceLogLevelsCritical
    Critical
    KnownSyslogDataSourceLogLevelsAlert
    Alert
    KnownSyslogDataSourceLogLevelsEmergency
    Emergency
    KnownSyslogDataSourceLogLevelsAsterisk
    *
    Debug
    Debug
    Info
    Info
    Notice
    Notice
    Warning
    Warning
    Error
    Error
    Critical
    Critical
    Alert
    Alert
    Emergency
    Emergency
    Asterisk
    *
    Debug
    Debug
    Info
    Info
    Notice
    Notice
    Warning
    Warning
    Error
    Error
    Critical
    Critical
    Alert
    Alert
    Emergency
    Emergency
    Asterisk
    *
    DEBUG
    Debug
    INFO
    Info
    NOTICE
    Notice
    WARNING
    Warning
    ERROR
    Error
    CRITICAL
    Critical
    ALERT
    Alert
    EMERGENCY
    Emergency
    ASTERISK
    *
    "Debug"
    Debug
    "Info"
    Info
    "Notice"
    Notice
    "Warning"
    Warning
    "Error"
    Error
    "Critical"
    Critical
    "Alert"
    Alert
    "Emergency"
    Emergency
    "*"
    *

    KnownSyslogDataSourceStreams, KnownSyslogDataSourceStreamsArgs

    Microsoft_Syslog
    Microsoft-Syslog
    KnownSyslogDataSourceStreams_Microsoft_Syslog
    Microsoft-Syslog
    MicrosoftSyslog
    Microsoft-Syslog
    Microsoft_Syslog
    Microsoft-Syslog
    MICROSOFT_SYSLOG
    Microsoft-Syslog
    "Microsoft-Syslog"
    Microsoft-Syslog

    KnownWindowsEventLogDataSourceStreams, KnownWindowsEventLogDataSourceStreamsArgs

    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    KnownWindowsEventLogDataSourceStreams_Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    KnownWindowsEventLogDataSourceStreams_Microsoft_Event
    Microsoft-Event
    MicrosoftWindowsEvent
    Microsoft-WindowsEvent
    MicrosoftEvent
    Microsoft-Event
    Microsoft_WindowsEvent
    Microsoft-WindowsEvent
    Microsoft_Event
    Microsoft-Event
    MICROSOFT_WINDOWS_EVENT
    Microsoft-WindowsEvent
    MICROSOFT_EVENT
    Microsoft-Event
    "Microsoft-WindowsEvent"
    Microsoft-WindowsEvent
    "Microsoft-Event"
    Microsoft-Event

    LogAnalyticsDestination, LogAnalyticsDestinationArgs

    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    WorkspaceResourceId string
    The resource ID of the Log Analytics workspace.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    WorkspaceResourceId string
    The resource ID of the Log Analytics workspace.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspaceResourceId String
    The resource ID of the Log Analytics workspace.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspaceResourceId string
    The resource ID of the Log Analytics workspace.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspace_resource_id str
    The resource ID of the Log Analytics workspace.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspaceResourceId String
    The resource ID of the Log Analytics workspace.

    LogAnalyticsDestinationResponse, LogAnalyticsDestinationResponseArgs

    WorkspaceId string
    The Customer ID of the Log Analytics workspace.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    WorkspaceResourceId string
    The resource ID of the Log Analytics workspace.
    WorkspaceId string
    The Customer ID of the Log Analytics workspace.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    WorkspaceResourceId string
    The resource ID of the Log Analytics workspace.
    workspaceId String
    The Customer ID of the Log Analytics workspace.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspaceResourceId String
    The resource ID of the Log Analytics workspace.
    workspaceId string
    The Customer ID of the Log Analytics workspace.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspaceResourceId string
    The resource ID of the Log Analytics workspace.
    workspace_id str
    The Customer ID of the Log Analytics workspace.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspace_resource_id str
    The resource ID of the Log Analytics workspace.
    workspaceId String
    The Customer ID of the Log Analytics workspace.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    workspaceResourceId String
    The resource ID of the Log Analytics workspace.

    LogFileSettingsResponseText, LogFileSettingsResponseTextArgs

    RecordStartTimestampFormat string
    One of the supported timestamp formats
    RecordStartTimestampFormat string
    One of the supported timestamp formats
    recordStartTimestampFormat String
    One of the supported timestamp formats
    recordStartTimestampFormat string
    One of the supported timestamp formats
    record_start_timestamp_format str
    One of the supported timestamp formats
    recordStartTimestampFormat String
    One of the supported timestamp formats

    LogFileSettingsText, LogFileSettingsTextArgs

    LogFilesDataSource, LogFilesDataSourceArgs

    FilePatterns List<string>
    File Patterns where the log files are located
    Format string | Pulumi.AzureNative.Insights.KnownLogFilesDataSourceFormat
    The data format of the log files
    Streams List<string>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Settings Pulumi.AzureNative.Insights.Inputs.LogFilesDataSourceSettings
    The log files specific settings.
    FilePatterns []string
    File Patterns where the log files are located
    Format string | KnownLogFilesDataSourceFormat
    The data format of the log files
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Settings LogFilesDataSourceSettings
    The log files specific settings.
    filePatterns List<String>
    File Patterns where the log files are located
    format String | KnownLogFilesDataSourceFormat
    The data format of the log files
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings LogFilesDataSourceSettings
    The log files specific settings.
    filePatterns string[]
    File Patterns where the log files are located
    format string | KnownLogFilesDataSourceFormat
    The data format of the log files
    streams string[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings LogFilesDataSourceSettings
    The log files specific settings.
    file_patterns Sequence[str]
    File Patterns where the log files are located
    format str | KnownLogFilesDataSourceFormat
    The data format of the log files
    streams Sequence[str]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings LogFilesDataSourceSettings
    The log files specific settings.
    filePatterns List<String>
    File Patterns where the log files are located
    format String | "text"
    The data format of the log files
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings Property Map
    The log files specific settings.

    LogFilesDataSourceResponse, LogFilesDataSourceResponseArgs

    FilePatterns List<string>
    File Patterns where the log files are located
    Format string
    The data format of the log files
    Streams List<string>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Settings Pulumi.AzureNative.Insights.Inputs.LogFilesDataSourceResponseSettings
    The log files specific settings.
    FilePatterns []string
    File Patterns where the log files are located
    Format string
    The data format of the log files
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Settings LogFilesDataSourceResponseSettings
    The log files specific settings.
    filePatterns List<String>
    File Patterns where the log files are located
    format String
    The data format of the log files
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings LogFilesDataSourceResponseSettings
    The log files specific settings.
    filePatterns string[]
    File Patterns where the log files are located
    format string
    The data format of the log files
    streams string[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings LogFilesDataSourceResponseSettings
    The log files specific settings.
    file_patterns Sequence[str]
    File Patterns where the log files are located
    format str
    The data format of the log files
    streams Sequence[str]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings LogFilesDataSourceResponseSettings
    The log files specific settings.
    filePatterns List<String>
    File Patterns where the log files are located
    format String
    The data format of the log files
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data source
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    settings Property Map
    The log files specific settings.

    LogFilesDataSourceResponseSettings, LogFilesDataSourceResponseSettingsArgs

    text Property Map
    Text settings

    LogFilesDataSourceSettings, LogFilesDataSourceSettingsArgs

    text Property Map
    Text settings

    ManagedServiceIdentityType, ManagedServiceIdentityTypeArgs

    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    SystemAssigned_UserAssigned
    SystemAssigned,UserAssigned
    ManagedServiceIdentityTypeNone
    None
    ManagedServiceIdentityTypeSystemAssigned
    SystemAssigned
    ManagedServiceIdentityTypeUserAssigned
    UserAssigned
    ManagedServiceIdentityType_SystemAssigned_UserAssigned
    SystemAssigned,UserAssigned
    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    SystemAssigned_UserAssigned
    SystemAssigned,UserAssigned
    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    SystemAssigned_UserAssigned
    SystemAssigned,UserAssigned
    NONE
    None
    SYSTEM_ASSIGNED
    SystemAssigned
    USER_ASSIGNED
    UserAssigned
    SYSTEM_ASSIGNED_USER_ASSIGNED
    SystemAssigned,UserAssigned
    "None"
    None
    "SystemAssigned"
    SystemAssigned
    "UserAssigned"
    UserAssigned
    "SystemAssigned,UserAssigned"
    SystemAssigned,UserAssigned

    MonitoringAccountDestination, MonitoringAccountDestinationArgs

    AccountResourceId string
    The resource ID of the monitoring account.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    AccountResourceId string
    The resource ID of the monitoring account.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    accountResourceId String
    The resource ID of the monitoring account.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    accountResourceId string
    The resource ID of the monitoring account.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    account_resource_id str
    The resource ID of the monitoring account.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    accountResourceId String
    The resource ID of the monitoring account.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    MonitoringAccountDestinationResponse, MonitoringAccountDestinationResponseArgs

    AccountId string
    The immutable ID of the account.
    AccountResourceId string
    The resource ID of the monitoring account.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    AccountId string
    The immutable ID of the account.
    AccountResourceId string
    The resource ID of the monitoring account.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    accountId String
    The immutable ID of the account.
    accountResourceId String
    The resource ID of the monitoring account.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    accountId string
    The immutable ID of the account.
    accountResourceId string
    The resource ID of the monitoring account.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    account_id str
    The immutable ID of the account.
    account_resource_id str
    The resource ID of the monitoring account.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    accountId String
    The immutable ID of the account.
    accountResourceId String
    The resource ID of the monitoring account.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.

    PerfCounterDataSource, PerfCounterDataSourceArgs

    CounterSpecifiers List<string>
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    SamplingFrequencyInSeconds int
    The number of seconds between consecutive counter measurements (samples).
    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPerfCounterDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    CounterSpecifiers []string
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    SamplingFrequencyInSeconds int
    The number of seconds between consecutive counter measurements (samples).
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counterSpecifiers List<String>
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    samplingFrequencyInSeconds Integer
    The number of seconds between consecutive counter measurements (samples).
    streams List<Either<String,KnownPerfCounterDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counterSpecifiers string[]
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    samplingFrequencyInSeconds number
    The number of seconds between consecutive counter measurements (samples).
    streams (string | KnownPerfCounterDataSourceStreams)[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counter_specifiers Sequence[str]
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    sampling_frequency_in_seconds int
    The number of seconds between consecutive counter measurements (samples).
    streams Sequence[Union[str, KnownPerfCounterDataSourceStreams]]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counterSpecifiers List<String>
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    samplingFrequencyInSeconds Number
    The number of seconds between consecutive counter measurements (samples).
    streams List<String | "Microsoft-Perf" | "Microsoft-InsightsMetrics">
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    PerfCounterDataSourceResponse, PerfCounterDataSourceResponseArgs

    CounterSpecifiers List<string>
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    SamplingFrequencyInSeconds int
    The number of seconds between consecutive counter measurements (samples).
    Streams List<string>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    CounterSpecifiers []string
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    SamplingFrequencyInSeconds int
    The number of seconds between consecutive counter measurements (samples).
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counterSpecifiers List<String>
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    samplingFrequencyInSeconds Integer
    The number of seconds between consecutive counter measurements (samples).
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counterSpecifiers string[]
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    samplingFrequencyInSeconds number
    The number of seconds between consecutive counter measurements (samples).
    streams string[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counter_specifiers Sequence[str]
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    sampling_frequency_in_seconds int
    The number of seconds between consecutive counter measurements (samples).
    streams Sequence[str]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    counterSpecifiers List<String>
    A list of specifier names of the performance counters you want to collect. Use a wildcard (*) to collect a counter for all instances. To get a list of performance counters on Windows, run the command 'typeperf'.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    samplingFrequencyInSeconds Number
    The number of seconds between consecutive counter measurements (samples).
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    PlatformTelemetryDataSource, PlatformTelemetryDataSourceArgs

    Streams List<string>
    List of platform telemetry streams to collect
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of platform telemetry streams to collect
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of platform telemetry streams to collect
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    List of platform telemetry streams to collect
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    List of platform telemetry streams to collect
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of platform telemetry streams to collect
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    PlatformTelemetryDataSourceResponse, PlatformTelemetryDataSourceResponseArgs

    Streams List<string>
    List of platform telemetry streams to collect
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of platform telemetry streams to collect
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of platform telemetry streams to collect
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    List of platform telemetry streams to collect
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    List of platform telemetry streams to collect
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of platform telemetry streams to collect
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    PrometheusForwarderDataSource, PrometheusForwarderDataSourceArgs

    LabelIncludeFilter Dictionary<string, string>
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownPrometheusForwarderDataSourceStreams>>
    List of streams that this data source will be sent to.
    LabelIncludeFilter map[string]string
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to.
    labelIncludeFilter Map<String,String>
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<Either<String,KnownPrometheusForwarderDataSourceStreams>>
    List of streams that this data source will be sent to.
    labelIncludeFilter {[key: string]: string}
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams (string | KnownPrometheusForwarderDataSourceStreams)[]
    List of streams that this data source will be sent to.
    label_include_filter Mapping[str, str]
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[Union[str, KnownPrometheusForwarderDataSourceStreams]]
    List of streams that this data source will be sent to.
    labelIncludeFilter Map<String>
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String | "Microsoft-PrometheusMetrics">
    List of streams that this data source will be sent to.

    PrometheusForwarderDataSourceResponse, PrometheusForwarderDataSourceResponseArgs

    LabelIncludeFilter Dictionary<string, string>
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<string>
    List of streams that this data source will be sent to.
    LabelIncludeFilter map[string]string
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to.
    labelIncludeFilter Map<String,String>
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to.
    labelIncludeFilter {[key: string]: string}
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    List of streams that this data source will be sent to.
    label_include_filter Mapping[str, str]
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    List of streams that this data source will be sent to.
    labelIncludeFilter Map<String>
    The list of label inclusion filters in the form of label "name-value" pairs. Currently only one label is supported: 'microsoft_metrics_include_label'. Label values are matched case-insensitively.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to.

    StorageBlobDestination, StorageBlobDestinationArgs

    ContainerName string
    The container name of the Storage Blob.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    ContainerName string
    The container name of the Storage Blob.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    containerName String
    The container name of the Storage Blob.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.
    containerName string
    The container name of the Storage Blob.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId string
    The resource ID of the storage account.
    container_name str
    The container name of the Storage Blob.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storage_account_resource_id str
    The resource ID of the storage account.
    containerName String
    The container name of the Storage Blob.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.

    StorageBlobDestinationResponse, StorageBlobDestinationResponseArgs

    ContainerName string
    The container name of the Storage Blob.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    ContainerName string
    The container name of the Storage Blob.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    containerName String
    The container name of the Storage Blob.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.
    containerName string
    The container name of the Storage Blob.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId string
    The resource ID of the storage account.
    container_name str
    The container name of the Storage Blob.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storage_account_resource_id str
    The resource ID of the storage account.
    containerName String
    The container name of the Storage Blob.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.

    StorageTableDestination, StorageTableDestinationArgs

    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    TableName string
    The name of the Storage Table.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    TableName string
    The name of the Storage Table.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.
    tableName String
    The name of the Storage Table.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId string
    The resource ID of the storage account.
    tableName string
    The name of the Storage Table.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storage_account_resource_id str
    The resource ID of the storage account.
    table_name str
    The name of the Storage Table.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.
    tableName String
    The name of the Storage Table.

    StorageTableDestinationResponse, StorageTableDestinationResponseArgs

    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    TableName string
    The name of the Storage Table.
    Name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    StorageAccountResourceId string
    The resource ID of the storage account.
    TableName string
    The name of the Storage Table.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.
    tableName String
    The name of the Storage Table.
    name string
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId string
    The resource ID of the storage account.
    tableName string
    The name of the Storage Table.
    name str
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storage_account_resource_id str
    The resource ID of the storage account.
    table_name str
    The name of the Storage Table.
    name String
    A friendly name for the destination. This name should be unique across all destinations (regardless of type) within the data collection rule.
    storageAccountResourceId String
    The resource ID of the storage account.
    tableName String
    The name of the Storage Table.

    StreamDeclaration, StreamDeclarationArgs

    Columns List<Pulumi.AzureNative.Insights.Inputs.ColumnDefinition>
    List of columns used by data in this stream.
    Columns []ColumnDefinition
    List of columns used by data in this stream.
    columns List<ColumnDefinition>
    List of columns used by data in this stream.
    columns ColumnDefinition[]
    List of columns used by data in this stream.
    columns Sequence[ColumnDefinition]
    List of columns used by data in this stream.
    columns List<Property Map>
    List of columns used by data in this stream.

    StreamDeclarationResponse, StreamDeclarationResponseArgs

    Columns []ColumnDefinitionResponse
    List of columns used by data in this stream.
    columns List<ColumnDefinitionResponse>
    List of columns used by data in this stream.
    columns ColumnDefinitionResponse[]
    List of columns used by data in this stream.
    columns Sequence[ColumnDefinitionResponse]
    List of columns used by data in this stream.
    columns List<Property Map>
    List of columns used by data in this stream.

    SyslogDataSource, SyslogDataSourceArgs

    FacilityNames List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceFacilityNames>>
    The list of facility names.
    LogLevels List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceLogLevels>>
    The log levels to collect.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownSyslogDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    FacilityNames []string
    The list of facility names.
    LogLevels []string
    The log levels to collect.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facilityNames List<Either<String,KnownSyslogDataSourceFacilityNames>>
    The list of facility names.
    logLevels List<Either<String,KnownSyslogDataSourceLogLevels>>
    The log levels to collect.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<Either<String,KnownSyslogDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facilityNames (string | KnownSyslogDataSourceFacilityNames)[]
    The list of facility names.
    logLevels (string | KnownSyslogDataSourceLogLevels)[]
    The log levels to collect.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams (string | KnownSyslogDataSourceStreams)[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facility_names Sequence[Union[str, KnownSyslogDataSourceFacilityNames]]
    The list of facility names.
    log_levels Sequence[Union[str, KnownSyslogDataSourceLogLevels]]
    The log levels to collect.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[Union[str, KnownSyslogDataSourceStreams]]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facilityNames List<String | "alert" | "audit" | "auth" | "authpriv" | "clock" | "cron" | "daemon" | "ftp" | "kern" | "lpr" | "mail" | "mark" | "news" | "nopri" | "ntp" | "syslog" | "user" | "uucp" | "local0" | "local1" | "local2" | "local3" | "local4" | "local5" | "local6" | "local7" | "*">
    The list of facility names.
    logLevels List<String | "Debug" | "Info" | "Notice" | "Warning" | "Error" | "Critical" | "Alert" | "Emergency" | "*">
    The log levels to collect.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String | "Microsoft-Syslog">
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    SyslogDataSourceResponse, SyslogDataSourceResponseArgs

    FacilityNames List<string>
    The list of facility names.
    LogLevels List<string>
    The log levels to collect.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<string>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    FacilityNames []string
    The list of facility names.
    LogLevels []string
    The log levels to collect.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facilityNames List<String>
    The list of facility names.
    logLevels List<String>
    The log levels to collect.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facilityNames string[]
    The list of facility names.
    logLevels string[]
    The log levels to collect.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facility_names Sequence[str]
    The list of facility names.
    log_levels Sequence[str]
    The log levels to collect.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    facilityNames List<String>
    The list of facility names.
    logLevels List<String>
    The log levels to collect.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    UserAssignedIdentityResponse, UserAssignedIdentityResponseArgs

    ClientId string
    The client ID of the assigned identity.
    PrincipalId string
    The principal ID of the assigned identity.
    ClientId string
    The client ID of the assigned identity.
    PrincipalId string
    The principal ID of the assigned identity.
    clientId String
    The client ID of the assigned identity.
    principalId String
    The principal ID of the assigned identity.
    clientId string
    The client ID of the assigned identity.
    principalId string
    The principal ID of the assigned identity.
    client_id str
    The client ID of the assigned identity.
    principal_id str
    The principal ID of the assigned identity.
    clientId String
    The client ID of the assigned identity.
    principalId String
    The principal ID of the assigned identity.

    WindowsEventLogDataSource, WindowsEventLogDataSourceArgs

    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<Union<string, Pulumi.AzureNative.Insights.KnownWindowsEventLogDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    XPathQueries List<string>
    A list of Windows Event Log queries in XPATH format.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    XPathQueries []string
    A list of Windows Event Log queries in XPATH format.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<Either<String,KnownWindowsEventLogDataSourceStreams>>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    xPathQueries List<String>
    A list of Windows Event Log queries in XPATH format.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams (string | KnownWindowsEventLogDataSourceStreams)[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    xPathQueries string[]
    A list of Windows Event Log queries in XPATH format.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[Union[str, KnownWindowsEventLogDataSourceStreams]]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    x_path_queries Sequence[str]
    A list of Windows Event Log queries in XPATH format.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String | "Microsoft-WindowsEvent" | "Microsoft-Event">
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    xPathQueries List<String>
    A list of Windows Event Log queries in XPATH format.

    WindowsEventLogDataSourceResponse, WindowsEventLogDataSourceResponseArgs

    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams List<string>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    XPathQueries List<string>
    A list of Windows Event Log queries in XPATH format.
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    XPathQueries []string
    A list of Windows Event Log queries in XPATH format.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    xPathQueries List<String>
    A list of Windows Event Log queries in XPATH format.
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    xPathQueries string[]
    A list of Windows Event Log queries in XPATH format.
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    x_path_queries Sequence[str]
    A list of Windows Event Log queries in XPATH format.
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    List of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    xPathQueries List<String>
    A list of Windows Event Log queries in XPATH format.

    WindowsFirewallLogsDataSource, WindowsFirewallLogsDataSourceArgs

    Streams List<string>
    Firewall logs streams
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    Firewall logs streams
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    Firewall logs streams
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    Firewall logs streams
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    Firewall logs streams
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    Firewall logs streams
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    WindowsFirewallLogsDataSourceResponse, WindowsFirewallLogsDataSourceResponseArgs

    Streams List<string>
    Firewall logs streams
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    Streams []string
    Firewall logs streams
    Name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    Firewall logs streams
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams string[]
    Firewall logs streams
    name string
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams Sequence[str]
    Firewall logs streams
    name str
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.
    streams List<String>
    Firewall logs streams
    name String
    A friendly name for the data source. This name should be unique across all data sources (regardless of type) within the data collection rule.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:insights:DataCollectionRule myCollectionRule /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Insights/dataCollectionRules/{dataCollectionRuleName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    azure-native-v2 pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native-v2 logo
    These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
    Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
    pulumi/pulumi-azure-native