Azure Monitor Resource log / log analytics tables

  • Article
  • 11/22/2024

Azure Monitor resource logs are logs emitted by Azure services that describe the operation of those services or resources. All resource logs available through Azure Monitor share a common top-level schema. Each service has the flexibility to emit unique properties for its own events. When exported to a Log Analytics workspace the logs are stored in tables. This set of articles contains field definitions for the log analytics tables. The table definitions are also available in the Log Analytics workspace.

Resource log / log analytics tables

Analysis Services

microsoft.analysisservices/servers

API Management services

Microsoft.ApiManagement/service

App Services

Microsoft.Web/sites

Application Gateway for Containers

Microsoft.ServiceNetworking/TrafficControllers

Application Gateways

Microsoft.Network/applicationGateways

Application Insights

microsoft.insights/components

Automation account

Microsoft.Automation/AutomationAccounts

AVS Private Cloud

microsoft.avs/privateClouds

Azure Active Directory Logs

microsoft.aadiam/tenants

Azure AD Domain Services

Microsoft.AAD/domainServices

Azure API for FHIR

Microsoft.HealthcareApis/services

Azure Arc Enabled Kubernetes

Microsoft.Kubernetes/connectedClusters

Azure Arc Provisioned Clusters

Microsoft.HybridContainerservice/Provisionedclusters

Azure Attestation

Microsoft.Attestation/attestationProviders

Azure Blockchain Service

Microsoft.Blockchain/blockchainMembers

Azure Cache for Redis

microsoft.cache/redis

Azure Cache for Redis Enterprise

Microsoft.Cache/redisEnterprise

Azure CloudHsm

Microsoft.HardwareSecurityModules/cloudHsmClusters

Azure Cosmos DB

Microsoft.DocumentDb/databaseAccounts

Azure Cosmos DB for MongoDB (vCore)

Microsoft.DocumentDB/mongoClusters

Azure Cosmos DB for PostgreSQL

Microsoft.DBForPostgreSQL/servergroupsv2

Azure Data Explorer Clusters

Microsoft.Kusto/Clusters

Azure Data Manager for Energy

Microsoft.OpenEnergyPlatform/energyServices

Azure Data Transfer

Microsoft.AzureDataTransfer/connections

Azure Database for MariaDB Servers

Microsoft.DBforMariaDB/servers

Azure Database for MySQL Flexible Servers

Microsoft.DBForMySQL/flexibleServers

Azure Database for MySQL Servers

Microsoft.DBforMySQL/servers

Azure Database for PostgreSQL Flexible Servers

Microsoft.DBForPostgreSQL/flexibleServers

Azure Database for PostgreSQL Servers

Microsoft.DBforPostgreSQL/servers

Azure Database for PostgreSQL Servers V2

Microsoft.DBforPostgreSQL/serversv2

Azure Databricks Services

Microsoft.Databricks/workspaces

Azure Digital Twins

Microsoft.DigitalTwins/digitalTwinsInstances

Azure Health Data Services de-identification service

Microsoft.HealthDataAIServices/deidServices

Azure HPC Cache

Microsoft.StorageCache/caches

Azure Load Testing

Microsoft.LoadTestService/loadtests

Azure Managed CCF

Microsoft.ConfidentialLedger/ManagedCCFs

Azure Managed Instance for Apache Cassandra

Microsoft.DocumentDB/cassandraClusters

Azure Managed Lustre

Microsoft.StorageCache/amlFilesytems

Azure Managed Workspace for Grafana

Microsoft.Dashboard/grafana

Azure Monitor autoscale settings

Microsoft.Insights/AutoscaleSettings

Azure Monitor Workspace

Microsoft.Monitor/accounts

Azure Operator Insights - Data Product

Microsoft.NetworkAnalytics/DataProducts

Azure PlayFab

Microsoft.PlayFab/titles

Azure Sentinel

microsoft.securityinsights

Azure Sphere

Microsoft.AzureSphere/catalogs

Azure Spring Apps

Microsoft.AppPlatform/Spring

Azure Stack HCI

Microsoft.AzureStackHCI/VirtualMachines

Azure Stack HCI

Microsoft.AzureStackHCI/clusters

Azure Storage Mover

Microsoft.StorageMover/storageMovers

Azure Traffic Collector

Microsoft.NetworkFunction/AzureTrafficCollectors

Azure Virtual Network Manager

Microsoft.Network/networkManagers

Bastions

Microsoft.Network/bastionHosts

Batch Accounts

microsoft.batch/batchaccounts

Bot Services

Microsoft.BotService/botServices

CDN Profiles

Microsoft.Cdn/profiles

Chaos Experiment

Microsoft.Chaos/experiments

Cognitive Services

microsoft.cognitiveservices/accounts

Communication Services

Microsoft.Communication/CommunicationServices

Container Apps

Microsoft.App/managedEnvironments

Container Registries

Microsoft.ContainerRegistry/registries

Data Collection Rules

Microsoft.Insights/datacollectionrules

Data factories

Microsoft.DataFactory/factories

Data Lake Analytics

Microsoft.DataLakeAnalytics/accounts

Data Lake Storage Gen1

Microsoft.DataLakeStore/accounts

Data Share

Microsoft.DataShare/accounts

Defender for Storage Settings

Microsoft.Security/DefenderForStorageSettings

Desktop Virtualization Application Groups

Microsoft.DesktopVirtualization/applicationGroups

Desktop Virtualization Host Pools

Microsoft.DesktopVirtualization/hostPools

Desktop Virtualization workspaces

Microsoft.DesktopVirtualization/workspaces

Dev Centers

Microsoft.DevCenter/devcenters

Device Provisioning Services

Microsoft.Devices/ProvisioningServices

DNS Resolver Policies

Microsoft.Network/dnsResolverPolicies

Dynamics 365 Customer Insights

Microsoft.D365CustomerInsights/instances

Event Grid Domains

Microsoft.EventGrid/domains

Event Grid Namespaces

Microsoft.EventGrid/namespaces

Event Grid Partner Namespaces

Microsoft.EventGrid/partnerNamespaces

Event Grid Partner Topics

Microsoft.EventGrid/partnerTopics

Event Grid System Topics

Microsoft.EventGrid/systemTopics

Event Grid Topics

Microsoft.EventGrid/topics

Event Hubs

Microsoft.EventHub/namespaces

Experiment Workspace

Microsoft.Experimentation/experimentWorkspaces

ExpressRoute Circuits

Microsoft.Network/expressRouteCircuits

Firewalls

Microsoft.Network/azureFirewalls

Front Doors

Microsoft.Network/frontdoors

HDInsight Clusters

Microsoft.HDInsight/Clusters

Health Data Services

Microsoft.HealthcareApis/workspaces

Integration Account.

Microsoft.Logic/integrationAccounts

Intune Specialist Reports.

microsoft.intune/operations

IoT Hub

Microsoft.Devices/IotHubs

Key Vaults

Microsoft.KeyVault/vaults

Kubernetes Services

Microsoft.ContainerService/managedClusters

Load Balancers

Microsoft.Network/LoadBalancers

Log Analytics workspaces

Microsoft.OperationalInsights/Workspaces

Logic Apps

Microsoft.Logic/workflows

Machine Learning

Microsoft.MachineLearningServices/workspaces

Machine Learning

Microsoft.MachineLearningServices/registries

Managed DevOps Pools

Microsoft.DevOpsInfrastructure/pools

Media Services

Microsoft.Media/mediaservices

Microsoft App Configuration

Microsoft.AppConfiguration/configurationStores

Microsoft Connected Cache

Microsoft.ConnectedCache/CacheNodes

Microsoft Connected Vehicle Platform

Microsoft.ConnectedVehicle/platformAccounts

Microsoft Container Instances Services

Microsoft.ContainerInstance/containerGroups

Microsoft Defender for Cloud

Microsoft.Security/Security

Microsoft Graph Logs

Microsoft.Graph/tenants

Microsoft Playwright Testing

Microsoft.AzurePlaywrightService/accounts

Microsoft.AgFoodPlatform/farmBeats

Microsoft.AgFoodPlatform/farmBeats

Microsoft.OpenLogisticsPlatform/Workspaces

Microsoft.OpenLogisticsPlatform/Workspaces

Microsoft.Purview/accounts

Microsoft.Purview/accounts

Network Devices (Operator Nexus)

Microsoft.ManagedNetworkFabric/networkDevices

Network Interfaces

Microsoft.Network/networkinterfaces

Network Security Groups

Microsoft.Network/NetworkSecurityGroups

Network Security Perimeters

Microsoft.Network/NetworkSecurityPerimeters

Network Watcher - Connection Monitor

Microsoft.Network/NetworkWatchers/Connectionmonitors

Nexus BareMetal Machines

Microsoft.NetworkCloud/bareMetalMachines

Nexus Cluster Managers

Microsoft.NetworkCloud/clusterManagers

Nexus Clusters

Microsoft.NetworkCloud/clusters

Nexus Storage Appliances

Microsoft.NetworkCloud/storageAppliances

NGINXaaS

NGINX.NGINXPLUS/nginxDeployments

Power BI Datasets

Microsoft.PowerBI/tenants

Power BI Datasets

Microsoft.PowerBI/tenants/workspaces

Power BI Embedded

microsoft.powerbidedicated/capacities

Project CI Workspace

Microsoft.DataCollaboration/workspaces

Public IP Addresses

Microsoft.Network/PublicIpAddresses

Recovery Services Vaults

Microsoft.RecoveryServices/Vaults

Relay

Microsoft.Relay/namespaces

Search Services

Microsoft.Search/searchServices

Service Bus

Microsoft.ServiceBus/namespaces

Service Fabric Clusters

Microsoft.ServiceFabric/clusters

SignalR

Microsoft.SignalRService/SignalR

SignalR Service WebPubSub

Microsoft.SignalRService/WebPubSub

SQL Databases

Microsoft.Sql/servers/databases

SQL Managed Instances

Microsoft.Sql/managedInstances

SQL Servers

microsoft.sql/servers

Storage Accounts

Microsoft.Storage/storageAccounts

Stream Analytics jobs

microsoft.streamanalytics/streamingjobs

Synapse Workspaces

Microsoft.Synapse/workspaces

System Center Virtual Machine Manager

Microsoft.SCVMM/VirtualMachines

Time Series Insights Environments

Microsoft.TimeSeriesInsights/environments

Toolchain orchestrator

Microsoft.ToolchainOrchestrator/diagnostics

Traffic Manager Profiles

Microsoft.Network/trafficmanagerprofiles

Video Indexer

Microsoft.VideoIndexer/accounts

Virtual Machine Scale Sets

Microsoft.Compute/virtualMachineScaleSets

Virtual machines

Microsoft.Compute/VirtualMachines

Virtual Network Gateways

Microsoft.Network/virtualNetworkGateways

Virtual Networks

Microsoft.Network/virtualNetworks

Virtual Private Network Gateways

Microsoft.Network/vpnGateways

VMware

Microsoft.ConenctedVMwarevSphere/VirtualMachines

Workload Monitor

Microsoft.WorkloadMonitor/monitors

Workload Monitoring of Azure Monitor Insights

Microsoft.Insights/WorkloadMonitoring

Next steps