| AAD 图形日志 |
AADGraphActivityLogs |
| Analysis Services |
AzureMetrics |
| API 管理服务 |
APIMDevPortalAuditDiagnosticLog
ApiManagementGatewayLlmLog
ApiManagementGatewayLogs
ApiManagementGatewayMCPLog
ApiManagementWebSocketConnectionLogs
AzureMetrics |
| App 服务 |
AzureMetrics |
| 适用于容器的应用程序网关 |
AGCAccessLogs
AGCFirewallLogs
AzureMetrics |
| 应用程序网关 |
AGWAccessLogs
AGWFirewallLogs
AGWPerformanceLogs
AzureMetrics |
| Application Insights |
AppTraces |
| AppLinks |
MeshControlPlane |
| 自动化帐户 |
AzureMetrics |
| AVS 私有云 |
AVSEsxiFirewallSyslog
AVSEsxiSyslog
AVSNsxEdgeSyslog
AVSNsxManagerSyslog
AVSSyslog
AVSVcSyslog |
| Azure AD 域服务 |
AADDomainServicesDNSAuditsDynamicUpdates
AADDomainServicesDNSAuditsGeneral
AzureMetrics |
| Azure API for FHIR |
AzureMetrics |
| Azure Arc 支持的 Kubernetes |
ArcK8sAudit
ArcK8sAuditAdmin
ArcK8sControlPlane
AzureMetrics
ContainerLogV2
Perf |
| Azure Arc 预配群集 |
AzureMetrics
ContainerLogV2
Perf |
| Azure 区块链服务 |
AzureMetrics |
| Azure Cache for Redis |
ACRConnectedClientList
ACREntraAuthenticationAuditLog
AzureMetrics |
| Azure缓存服务（Redis Enterprise） |
REDConnectionEvents |
| Azure CloudHsm |
AzureMetrics
CloudHSM 硬件操作审计日志
CloudHsmServiceOperationAuditLogs |
| Azure 机密账本 |
ACLTransactionLogs
ACLUserDefinedLogs
LedgerTransactionLogs
LedgerUserDefinedLogs |
| Azure Cosmos DB |
AzureMetrics
CDBCassandraRequests
CDBControlPlaneRequests
CDBDataPlaneRequests
CDBDataPlaneRequests15M
CDBDataPlaneRequests5M
CDBGremlinRequests
CDBMongoRequests
CDBPartitionKeyRUConsumption
CDBPartitionKeyStatistics
CDBQueryRuntimeStatistics
CDBTableApiRequests |
| 用于 MongoDB 的 Azure Cosmos DB （vCore） |
AzureMetrics
VCoreMongoRequests |
| Azure 数据资源管理器群集 |
AzureMetrics |
| Azure 能源数据管理器 |
OEPDataplaneLogs |
| Azure 数据传输 |
DataTransferOperations |
| MariaDB 服务器的 Azure 数据库 |
AzureMetrics |
| Azure Database for MySQL 弹性服务器 |
AzureMetrics
MySqlAuditLogs
MySqlSlowLogs |
| Azure Database for MySQL 服务器 |
AzureMetrics |
| Azure Database for PostgreSQL 灵活可配置服务器 |
AzureMetrics
PGSQLAutovacuumStats
PGSQLDbTransactionsStats
PGSQLPgStatActivitySessions
PGSQLQueryStoreQueryText
PGSQLQueryStoreRuntime
PGSQLQueryStoreWaits
PGSQLServerLogs |
| PostgreSQL 服务器的 Azure 数据库 |
AzureMetrics |
| Azure Database for PostgreSQL 服务器 V2 |
AzureMetrics |
| Azure Databricks 服务 |
AzureMetrics
DatabricksAccounts
DatabricksApps
DatabricksBrickStoreHttpGateway
Databricks预算政策中心
DatabricksCapsule8Dataplane
DatabricksClamAVScan
DatabricksCloudStorageMetadata
DatabricksClusterLibraries
DatabricksClusterPolicies
DatabricksClusters
DatabricksDBFS
DatabricksDashboards
DatabricksDataMonitoring
DatabricksDataRooms
DatabricksDatabricksSQL
DatabricksDeltaPipelines
DatabricksFeatureStore
DatabricksFiles
DatabricksFilesystem
DatabricksGenie
DatabricksGitCredentials
DatabricksGlobalInitScripts
DatabricksGroups
DatabricksIAMRole
DatabricksIngestion
DatabricksInstancePools
DatabricksJobs
DatabricksLakeviewConfig
DatabricksLineageTracking
DatabricksMLflowAcledArtifact
DatabricksMLflowExperiment
DatabricksMarketplaceConsumer
DatabricksMarketplaceProvider
DatabricksModelRegistry
DatabricksNotebook
DatabricksOnlineTables
DatabricksPartnerHub
DatabricksPredictiveOptimization
DatabricksRBAC
DatabricksRFA
DatabricksRemoteHistoryService
DatabricksRepos
DatabricksSQL
DatabricksSQLPermissions
DatabricksSSH
DatabricksSecrets
DatabricksServerlessRealTimeInference
DatabricksUnityCatalog
DatabricksVectorSearch
DatabricksWebTerminal
DatabricksWebhookNotifications
DatabricksWorkspace
DatabricksWorkspaceFiles |
| Azure Health Data Services 去身份识别服务 |
AHDSDeidAuditLogs |
| Azure Local |
AzureMetrics
CommonSecurityLog
Perf
SecurityEvent |
| Azure Local |
Perf |
| Azure 托管 CCF |
CCFApplicationLogs |
| Azure Managed Lustre |
AFSAuditLogs
AzureMetrics |
| Azure Migrate 数据复制 |
ASRv2HealthEvents
ASRv2JobEvents
ASRv2保护项
ASRv2ReplicationExtensions
ASRv2ReplicationPolicies
ASRv2ReplicationVaults |
| Azure Monitor 自动缩放设置 |
AzureMetrics |
| 使用 Grafana Azure Monitor 仪表板 |
AGSUpdateEvents |
| Azure Monitor 诊断代理 |
DataSetOutput
DataSetRuns
PerfInsightsFindings
PerfInsightsImpactedResources
PerfInsightsRun |
| Azure Monitor 管道 |
AzureMonitorPipelineLogErrors |
| Azure Monitor 工作区 |
AMWMetricsUsageDetails |
| Azure 运营商见解 - 数据产品 |
AOIDatabaseQuery
AOIDigestion
AOIStorage
AzureMetrics |
| Azure Quantum 提供商帐户 |
QuantumProviderAccountJobAuditLogs
量子提供者账户队列审计日志
QuantumProviderAccountTargetAuditLogs |
| Azure Quantum 工作区 |
QuantumWorkspaceJobAuditLogs |
| Azure Sentinel |
SecurityEvent
DnsAuditEvents
AggregatedSecurityAlert
SentinelBehaviorInfo
SentinelBehaviorEntities |
| Azure Sentinel CEF 表 |
CommonSecurityLog |
| Azure Sentinel Web 会话日志 |
ASimWebSessionLogs |
| Azure Sphere |
ASCAuditLogs
ASCDeviceEvents |
| Azure Spring Apps |
AzureMetrics |
| Azure 存储移动程序 |
AzureMetrics
StorageMoverAuditLogs
StorageMoverCopyLogsFailed
存储移动器复制日志已传输
StorageMoverJobRunLogs |
| Azure 流量收集器 |
AzureMetrics |
| Azure虚拟机扩展 |
AMAHealth |
| Azure Virtual Network Manager |
AVNMConnectivityConfigurationChange
AVNMIPAMPoolAllocationChange
AVNM网络组成员关系更改
AVNMRuleCollectionChange
AzureMetrics |
| 堡垒们 |
AzureMetrics |
| 批处理帐户 |
AzureMetrics |
| 混沌试验 |
ChaosStudioExperimentEventLogs |
| 出口流量 |
AzureMetrics |
| 通信服务 |
ACS高级消息操作
ACSCallAutomationIncomingOperations
ACSCallAutomationMediaSummary
ACSCallAutomationStreamingUsage
ACS通话客户端媒体统计时间序列
ACSCallClientOperations
ACS呼叫客户服务请求和结果
ACSCallClosedCaptionsSummary
ACSCallDiagnostics
ACS通话诊断更新
ACSCallRecordingIncomingOperations
ACS 通话录音汇总
ACSCallSummary
ACSCallSummaryUpdates
ACSCallingMetrics
ACSJobRouterIncomingOperations
ACSOptOutManagementOperations
ACSRoomsIncomingOperations
ACSSMSIncomingOperations
AzureMetrics |
| 容器应用 |
AppEnvSessionConsoleLogs
AppEnvSessionLifecycleLogs
AppEnv会话池事件日志
AppEnvSpringAppConsoleLogs
ContainerAppConsoleLogs
ContainerAppHTTPLogs |
| 容器注册表 |
AzureMetrics |
| 数据工厂 |
AzureMetrics |
| Data Lake Analytics |
AzureMetrics |
| Data Lake Storage Gen1 |
AzureMetrics |
| Data Share |
AzureMetrics |
| Defender for Storage 设置 |
存储恶意软件扫描结果 |
| 桌面虚拟化应用程序组 |
AzureMetrics |
| 桌面虚拟化主机池 |
AzureMetrics |
| 桌面虚拟化工作区 |
AzureMetrics |
| 开发人员中心 |
AzureMetrics
DevCenterAgentHealthLogs
DevCenterBillingEventLogs
DevCenterConnectionLogs
DevCenterDiagnosticLogs
DevCenterResourceOperationLogs |
| 设备预配服务 |
AzureMetrics |
| DNS解析策略 |
DNSQueryLogs |
| 持久任务调度器 |
DurableTaskSchedulerLogs |
| 边缘操作 |
EdgeActionConsoleLog
EdgeActionServiceLog |
| 事件网格域 |
AzureMetrics |
| 事件网格命名空间 |
AzureMetrics
EGNFailedHttpDataPlaneOperations
EGNSuccessfulHttpDataPlaneOperations |
| 事件网格合作伙伴命名空间 |
AzureMetrics |
| 事件网格合作伙伴主题 |
AzureMetrics |
| 事件网格系统的主题 |
AzureMetrics |
| 事件网格主题 |
AzureMetrics |
| 事件中心 |
AZMSApplicationMetricLogs
AZMSArchiveLogs
AZMSAutoscaleLogs
AZMSCustomerManagedKeyUserLogs
AZMSDiagnosticErrorLogs
AZMSKafkaCoordinatorLogs
AZMSKafkaUserErrorLogs
AZMSOperationalLogs
AZMSRunTimeAuditLogs
AZMSVnetConnectionEvents
AzureMetrics |
| 试验工作区 |
AEWExperimentAssignmentSummary
AEWExperimentScorecardMetricPairs
AEWExperimentScorecards |
| ExpressRoute 线路 |
AzureMetrics |
| 防火墙 |
AZFWApplicationRule
AZFW应用规则聚合
AZFWDnsFlowTrace
AZFWDnsQuery
AZFWFatFlow
AZFWFlowTrace
AZFWIdpsSignature
AZFW内部FQDN解析失败
AZFWNatRule
AZFW NAT 规则汇总
AZFWNetworkRule
AZFWNetworkRuleAggregation
AZFWThreatIntel
AzureMetrics |
| 前门们 |
AzureMetrics |
| Health Data Services |
AHDSDicomAuditLogs
AHDSDicomDiagnosticLogs
AHDSMedTechDiagnosticLogs |
| HealthCare 互操作性服务 |
AHCIDiagnosticLogs |
| 集成帐户。 |
LIATrackingEvents |
| Intune 专家报告。 |
Windows365AuditLogs |
| IoT 中心 |
AzureMetrics |
| 密钥保管库 |
AZKVAuditLogs
AZKVPolicyEvaluationDetailsLogs（策略评估详细日志）
AzureMetrics |
| Kubernetes 服务 |
AKSAudit
AKSAuditAdmin
AKSControlPlane
AzureMetrics
ContainerLogV2
ContainerNetworkLogs
Perf
RetinaNetworkFlowLogs |
| 负载均衡器 |
ALBHealthEvent
AzureMetrics |
| Log Analytics 工作区 |
AppGenAIContent
AzureMetrics
AzureMetricsV2
LAJobLogs
LAQueryLogs
LASummaryLogs
OTelEvents
OTelLogs
OTelSpans
OTelTraces
OTelTracesAgent
Perf |
| Logic Apps |
AzureMetrics |
| 机器学习 |
AzureMetrics |
| 托管的 DevOps 资源池 |
MDPResourceLog |
| 媒体服务 |
AMSKeyDeliveryRequests
AMSLiveEventOperations
AMSMediaAccountHealth
AMS流媒体端点请求 (AMSStreamingEndpointRequests)
AzureMetrics |
| Microsoft 联网缓存 |
AzureMetrics |
| Microsoft 互联车辆平台 |
AzureMetrics |
| Microsoft Defender for Cloud |
SecurityAttackPathData |
| Microsoft Discovery 书架 |
DiscoveryBookshelfAuditLogs |
| Microsoft发现超级计算机 |
DiscoverySupercomputerAuditLogs |
| Microsoft Discovery 工作区 |
DiscoveryWorkspaceAuditLogs |
| Microsoft Graph 日志 |
SigninLogs |
| Microsoft Planetary Computer Pro |
MPCAuditLogs
MPCIngestionLogs |
| Microsoft Playwright Testing |
AzureMetrics |
| Microsoft Sentinel 代理事件 ASim 架构 |
ASimAgentEventLogs |
| Microsoft Sentinel 警报事件 ASim 架构 |
ASimAlertEventLogs |
| Microsoft Sentinel ASim |
ASimDhcpEventLogs
ASimFileEventLogs
ASimUserManagementActivityLogs
ASimRegistryEventLogs |
| Microsoft Sentinel 资产实体的 ASim 架构 |
ASimAssetEntityLogs |
| Microsoft Sentinel 审核事件 ASim 架构 |
ASimAuditEventLogs |
| Microsoft Sentinel ASIM 身份验证事件架构 |
ASimAuthenticationEventLogs |
| Microsoft Sentinel DNS 活动 ASim 架构 |
ASimDnsActivityLogs |
| Microsoft Sentinel 网络会话 ASim 架构 |
ASimNetworkSessionLogs |
| Microsoft Sentinel 处理事件 ASim 架构 |
ASimProcessEventLogs |
| Microsoft Sentinel 威胁情报。 |
ThreatIntelObjects
ThreatIntelIndicators |
| Microsoft.StandbyPool |
SCGPoolExecutionLog
SCGPoolRequestLog |
| Microsoft.StandbyPool |
SVMPoolExecutionLog
SVMPoolRequestLog |
| 网络设备（Operator Nexus） |
AzureMetrics
MNFDeviceUpdates
MNFSystemSessionHistoryUpdates
MNFSystemStateMessageUpdates |
| 网络接口 |
AzureMetrics |
| 网络安全组 |
AzureMetrics |
| 网络安全边界 |
NSPAccessLogs |
| 网络虚拟设备 |
AzureMetrics |
| Nexus BareMetal 计算机 |
AzureMetrics
NCBMBreakGlassAuditLogs
NCBMSecurityDefenderLogs
NCBMSecurityLogs
NCBMSystemLogs |
| Nexus 群集管理器 |
AzureMetrics
NCMClusterOperationsLogs |
| Nexus 群集 |
AzureMetrics
NCCIDRACLogs
NCCKubernetesAPIAuditLogs
NCCKubernetesLogs
NCCPlatformOperationsLogs
NCCVMOrchestrationLogs |
| Nexus 存储设备 |
AzureMetrics
NCSStorageAlerts
NCSStorageAudits
NCSStorageLogs |
| NGINXaaS |
NGXOperationLogs
NGXSecurityLogs
NginxUpstreamUpdateLogs |
| 联机试验工作区 |
OEWAuditLogs |
| Oracle 云 |
OracleCloudDatabase |
| Power BI 数据集 |
PowerBIDatasetsTenant |
| Power BI 数据集 |
PowerBIDatasetsWorkspace |
| Power BI Embedded |
AzureMetrics |
| Project CI 工作区 |
AzureMetrics |
| 公共 IP 地址 |
AzureMetrics |
| 中继 |
AZMSHybridConnectionsEvents
AZMSVnetConnectionEvents
AzureMetrics |
| 搜索服务 |
AzureMetrics |
| 服务总线 |
AZMSApplicationMetricLogs
AZMSDiagnosticErrorLogs
AZMSOperationalLogs
AZMSRunTimeAuditLogs
AZMSVnetConnectionEvents
AzureMetrics |
| Service Fabric 群集 |
AzureMetrics |
| SignalR |
AzureMetrics |
| SQL 数据库 |
AzureMetrics |
| SQL 托管实例 |
AzureMetrics |
| SQL 服务器 |
AzureMetrics |
| 存储帐户 |
AzureMetrics
StorageBlobLogs
StorageFileLogs
StorageQueueLogs
StorageTableLogs |
| 流分析作业 |
AzureMetrics |
| Synapse 工作区 |
AzureMetrics
SynapseSqlPoolDmsWorkers
SynapseSqlPoolExecRequests
SynapseSqlPoolRequestSteps
SynapseSqlPoolSqlRequests
SynapseSqlPoolWaits |
| System Center Virtual Machine Manager |
AzureMetrics
CommonSecurityLog
Perf
SecurityEvent |
| 时序见解环境 |
AzureMetrics |
| 工具链协调器 |
TOUserAudits
TOUserDiagnostics |
| 流量管理器配置文件 |
AzureMetrics |
| 虚拟机规模集 |
AzureMetrics
CommonSecurityLog
DataSetOutput
DataSetRuns
Perf
PerfInsightsFindings
PerfInsightsImpactedResources
PerfInsightsRun
SecurityEvent |
| 虚拟机 |
AzureMetrics
CommonSecurityLog
DataSetOutput
DataSetRuns
Perf
PerfInsightsFindings
PerfInsightsImpactedResources
PerfInsightsRun
SecurityEvent |
| 虚拟网络网关 |
AzureMetrics |
| 虚拟网络 |
AzureMetrics |
| 虚拟专用网络网关 |
AzureMetrics |
| VMware |
AzureMetrics
CommonSecurityLog
Perf
SecurityEvent |
| 工作负载监视器 |
AzureMetrics |
| 工作负载编排 |
WOUserAudits
WOUserDiagnostics |
| 零信任分段 |
ZTSGraph
ZTSJobStatus
ZTSMetadata
ZTSRequest |
| 未定义任何服务 |
AADAgentRiskEvents
AADManagedIdentitySignInLogs
AADNonInteractiveUserSignInLogs
AADProvisioningLogs
AADRiskyAgents
AADRiskyServicePrincipals
AADRiskyUsers
AADServicePrincipalRiskEvents
AADServicePrincipalSignInLogs
AAD 用户风险事件
ABAPAuditLog
ABAP授权详细信息
ABAP更改文档日志
ABAPTableDataLog
ABAP用户详情
ADFSSignInLogs
AWSALBAccessLogs
AWSCloudTrail
AWSCloudWatch
AWSEKSLogs
AWSELBFlowLogs
AWSGuardDuty
AWSNLBAccessLogs
AWSNetworkFirewallAlert
AWSNetworkFirewallFlow
AWSNetworkFirewallTls
AWSRoute53Resolver
AWSS3ServerAccess
AWSSecurityHubFindings
AWSVPCFlow
AWSWAF
AgentsInfo
AlertEvidence
AlertInfo
异常
AzureDevOpsAuditing
BehaviorEntities
BehaviorInfo
CampaignInfo
CloudAppEvents
CloudAuditEvents
CloudDnsEvents
CloudProcessEvents
CloudStorageAggregatedEvents
通信合规活动
CopilotActivity
CrowdStrikeAlerts
CrowdStrikeAuditEvents
CrowdStrikeCases
CrowdStrikeDetections
CrowdStrikeHosts
CrowdStrikeIncidents
CrowdStrikeVulnerabilities
DataverseActivity
DeviceBehaviorEntities
DeviceBehaviorInfo
DeviceCustomFileEvents（设备自定义文件事件）
DeviceCustomImageLoadEvents（自定义设备图像加载事件）
DeviceCustomNetworkEvents
设备自定义进程事件
DeviceCustomRegistryEvents
DeviceCustomScriptEvents
DeviceEvents
设备文件证书信息 (DeviceFileCertificateInfo)
DeviceFileEvents
设备图像加载事件
DeviceInfo
设备登录事件
DeviceNetworkEvents
DeviceNetworkInfo
DeviceProcessEvents
DeviceRegistryEvents
设备TVM安全配置评估
DeviceTvmSecureConfigurationAssessmentKB
DeviceTvmSoftwareInventory
设备Tvm软件漏洞
DeviceTvm软件漏洞KB
中断和响应事件
DynamicEventCollection
电子邮件附件信息
EmailEvents
EmailPostDeliveryEvents
EmailUrlInfo
增强版Microsoft365审核日志
FileMaliciousContentInfo
GCPApigee
GCPAuditLogs
GCPCDN
GCPCloudRun
GCPCloudSQL
GCPComputeEngine
GCPDNS
GCPFirewallLogs
GCPIAM
GCPIDS
GCPLoadBalancer
GCPMonitoring
GCPNAT
GCPNATAudit
GCPResourceManager
GCPVPCFlow
GKEAPIServer
GKEApplication
GKEAudit
GKEControllerManager
GKEHPADecision
GKEScheduler
GoogleCloudSCC
GoogleWorkspaceReports
IdentityAccountInfo
IdentityDirectoryEvents
IdentityEvents
身份登录事件
IdentityQueryEvents
IlumioInsights
IntuneDevices
MDCDetectionDNSEvents
MDCDetectionFimEvents
MDCDetectionGatingValidationEvents
MDCDetectionK8SApiEvents
MDCDetectionProcessV2Events
MDCFileIntegrityMonitoringEvents
MessageEvents
MessagePostDeliveryEvents
MessageUrlInfo
MicrosoftGraphActivityLogs
MicrosoftGraphPolicyLogs
MicrosoftPurviewInformationProtection
微软服务主体登录日志
NetworkAccessAlerts
网络访问连接事件
NetworkAccessGenerativeAIInsights
NetworkAccessTraffic
NetworkSessions
OAuthAppInfo
OktaSystemLogs
PowerAppsActivity
PowerAutomateActivity
PowerBIActivity
PowerPlatformAdminActivity
PowerPlatformConnectorActivity
PowerPlatformDlpActivity
预身份验证发现日志
ProjectActivity
QualysKnowledgeBase
Rapid7InsightVMCloudAssets
Rapid7InsightVMCloudVulnerabilities
RemoteNetworkHealthLogs
SalesforceAuditTrail
SalesforceLoginHistory
SecurityCaseEvent
SentinelAlibabaCloudAPIGatewayLogs
SentinelAlibabaCloudVPCFlowLogs
SentinelAlibabaCloudWAFLogs
SentinelImpervaWAFCloudV2Logs
UrlClickEvents |