Azure Monitor 日志中支持转换的表

以下列表标识了 Log Analytics 工作区中支持转换的表。

注意

我们正在添加对更多表的支持。 请定期查看本文。

限制
AACAudit
AACHttpRequest
AAD域服务帐户登录
AADDomainServicesAccountManagement
AADDomainServicesDirectoryServiceAccess
AAD域服务登录注销
AADDomainServices策略变更
AADDomainServicesPrivilegeUse
AADManagedIdentitySignInLogs
AAD非互动用户登录日志
AADProvisioningLogs
AADRiskyUsers
AADServicePrincipalSignInLogs
AADUserRiskEvents
ABAP审计日志
ABSBotRequests
ACSAuthIncomingOperations
ACSBillingUsage
ACSChatIncomingOperations
ACSSMSIncomingOperations
ADAssessmentRecommendation
AddonAzureBackupAlerts
AddonAzureBackupJobs
AddonAzureBackupPolicy
AddonAzureBackupProtectedInstance
AddonAzureBackupStorage
ADFActivityRun
ADFAirflowSchedulerLogs
ADFAirflowTaskLogs
ADFAirflowWebLogs
ADFAirflowWorkerLogs
ADFPipelineRun
ADFSandboxActivityRun
ADFSandboxPipelineRun
ADFSSignInLogs
ADFSSIS集成运行时日志
ADFSSISPackageEventMessageContext
ADFSSIS数据包事件消息
ADFSSISPackageExecutableStatistics
ADFSSISPackageExecutionComponentPhases
ADFSSISPackageExecutionDataStatistics(ADF SSIS包执行数据统计)
ADFTriggerRun
ADPAudit
ADPDiagnostics
ADPRequests
ADReplicationResult
AD 安全评估建议
ADTDigitalTwinsOperation
ADTModelsOperation
ADTQueryOperation
ADXCommand
ADXJournal
ADXQuery
ADX 表格详情
ADX表格使用统计
AegDeliveryFailureLogs
AegPublishFailureLogs
AirflowDagProcessingLogs
警报
AlertEvidence
AlertInfo
AmlComputeClusterEvent
AmlCompute CPU GPU 利用率
AmlComputeInstanceEvent
AmlComputeJobEvent
AmlDataLabelEvent
AmlDataSetEvent
AmlDataStoreEvent
AmlDeploymentEvent
AmlEnvironmentEvent
AmlInferencingEvent
AmlModelsEvent
AmlOnlineEndpointConsoleLog
AmlPipelineEvent
AmlRunEvent
AML运行状态改变事件
异常
ApiManagementGatewayLogs
应用可用性结果
AppBrowserTimings
AppCenterError
AppDependencies
AppEvents
AppExceptions
AppMetrics
AppPageViews
AppPerformanceCounters
AppPlatformIngressLogs
AppPlatformLogsforSpring
AppPlatformSystemLogs
AppRequests
应用服务防病毒扫描审计日志
AppServiceAppLogs
AppServiceAuditLogs
AppServiceConsoleLogs
AppServiceEnvironmentPlatformLogs
AppServiceFileAuditLogs
AppServiceHTTPLogs
AppServiceIPSecAuditLogs
AppServicePlatformLogs
AppSystemEvents
AppTraces
ASimAuditEventLogs
ASimAuthenticationEventLogs
ASimDhcpEventLogs
ASimDnsActivityLogs
ASimDnsAuditLogs
ASimFileEventLogs
ASimNetworkSessionLogs
ASimProcessEventLogs
ASimRegistryEventLogs
ASimUserManagementActivityLogs
ASimWebSessionLogs
AuditLogs
AutoscaleEvaluationsLog
AutoscaleScaleActionsLog
AWSCloudTrail
AWSCloudWatch
AWSGuardDuty
AWSVPCFlow
Azure评估建议
AzureDevOpsAuditing
BehaviorAnalytics
BlockchainApplicationLog
BlockchainProxyLog
CDBCassandraRequests
CDBControlPlaneRequests
CDBDataPlaneRequests
CDBGremlinRequests
CDBMongoRequests
CDBPartitionKeyRUConsumption
CDBPartitionKeyStatistics
CDBQueryRuntimeStatistics
CloudAppEvents
CommonSecurityLog
ComputerGroup
配置变更
ConfigurationData 部分支持 - 有些数据是通过不受支持的内部服务引入的。
ContainerImageInventory
ContainerInventory
ContainerLog
ContainerLogV2
ContainerNodeInventory
ContainerRegistryLoginEvents
容器注册表库事件
ContainerServiceLog
CoreAzureBackup
DatabricksAccounts
DatabricksClusters
DatabricksDBFS
DatabricksFeatureStore
DatabricksGenie
DatabricksGlobalInitScripts
DatabricksInstancePools
DatabricksJobs
DatabricksMLflowAcledArtifact
DatabricksMLflowExperiment
DatabricksNotebook
DatabricksRemoteHistoryService
DatabricksSecrets
DatabricksSQLPermissions
DatabricksSSH
DatabricksWorkspace
DataverseActivity
DefenderForSqlAlerts
DefenderForSqlTelemetry
DeviceEve
DeviceFileCertificateInfo
DeviceFileEvents
设备图像加载事件
DeviceInfo
设备登录事件
DeviceNetworkEvents
DeviceNetworkInfo
DeviceProcessEvents
DeviceRegistryEvents
设备TVM安全配置评估
DeviceTvmSecureConfigurationAssessmentKB
DeviceTvmSoftwareInventory
设备Tvm软件漏洞
DeviceTvmSoftwareVulnerabilitiesKB
DnsEvents
DnsInventory
DummyHydrationFact
DynamicEventCollection
Dynamics365Activity
电子邮件附件信息
EmailEvents
EmailPostDeliveryEvents
EmailUrlInfo
事件 部分支持。 完全支持来自 Log Analytics 代理 (MMA) 或 Azure Monitor 代理 (AMA) 的数据。 通过 Azure 存储收集来自诊断扩展的数据。 不支持此路径。
ExchangeAssessmentRecommendation
ExchangeOnline评估建议
数据导入失败
FunctionAppLogs
GCPAuditLogs
GoogleCloudSCC
HDInsightAmbariClusterAlerts
HDInsightAmbariSystemMetrics
HDInsightHadoopAndYarnLogs
HDInsightHadoopAndYarnMetrics
HDInsightHBaseLogs
HDInsightHBaseMetrics
HDInsightHiveAndLLAPLogs
HDInsightHive和LLAP指标
HDInsightHiveTezAppStats
HDInsightKafkaLogs
HDInsightKafkaMetrics
HDInsightOozieLogs
HDInsightSecurityLogs
HDInsight Spark 应用事件
HDInsight Spark 块管理器事件
HDInsightSparkEnvironmentEvents
HDInsightSparkExecutorEvents
HDInsightSparkJobEvents
HDInsightSparkLogs
HDInsightSparkSQLExecutionEvents
HDInsightSparkStageEvents
HDInsightSparkStageTaskAccumulables
HDInsightSparkTaskEvents
HealthStateChangeEvent
HuntingBookmark
IdentityDirectoryEvents
IdentityInfo
身份登录事件
IdentityQueryEvents
InsightsMetrics 部分支持 - 有些数据是通过不受支持的内部服务引入的。
IntuneAuditLogs
IntuneDevices
IntuneOperationalLogs
KubeEvents
KubeHealth
KubeMonAgentEvents
KubeNodeInventory
KubePodInventory
KubePVInventory
KubeServices
LAQueryLogs
LinuxAuditLog
McasShadowItReporting
MCCEventLogs
MicrosoftAzureBastionAuditLogs
微软数据共享接收快照日志 (MicrosoftDataShareReceivedSnapshotLog)
MicrosoftDataShareSentSnapshotLog
MicrosoftGraphActivityLogs
MicrosoftHealthcareApisAuditLogs
MicrosoftPurviewInformationProtection
NetworkAccessTraffic
NetworkMonitoring
NTAIpDetails
NTANetAnalytics
NTATopologyDetails
NW连接监控路径结果
NWConnectionMonitorTestResult
OfficeActivity
性能
PowerAppsActivity
PowerAutomateActivity
PowerBIActivity
PowerBIDatasetsWorkspace
PowerPlatformAdminActivity
PowerPlatformConnectorActivity
PowerPlatformDlpActivity
ProcessInvestigator
ProjectActivity
ProtectionStatus
PurviewScanStatusLogs
RomeDetectionEvent
SCCM评估建议
SCOM评估建议
SecureScoreControls
SecureScores
SecurityAlert
SecurityBaseline
SecurityBaselineSummary
SecurityDetection
SecurityEvent 部分支持 - 完全支持来自 Log Analytics 代理 (MMA) 或 Azure Monitor 代理 (AMA) 的数据。 通过诊断扩展代理到达的数据是通过存储收集的,但不支持此路径。
SecurityIncident
SecurityIoTRawEvent
SecurityNestedRecommendation
安全建议
SecurityRegulatoryCompliance
SentinelHealth
ServiceMap 服务地图
SfBAssessmentRecommendation
SfBOnlineAssessmentRecommendation
SharePointOnlineAssessmentRecommendation(SharePoint 在线评估建议)
SignalRServiceDiagnosticLogs
SigninLogs
SPAssessmentRecommendation
SQL评估建议
SqlAtpStatus
SQLSecurityAuditEvents
SqlThreatProtectionLoginAudits
SQL漏洞评估结果
SqlVulnerabilityAssessmentScanStatus
StorageBlobLogs
StorageFileLogs
StorageInsightsAccountPropertiesDaily
StorageInsightsDailyMetrics
StorageInsightsHourlyMetrics
StorageInsightsMonthlyMetrics
StorageInsightsWeeklyMetrics
StorageQueueLogs
StorageTableLogs
成功输入
SynapseBigDataPoolApplicationsEnded
SynapseBuiltinSqlPoolRequestsEnded
SynapseDX失败加载
SynapseDXSucceededIngestion
SynapseGatewayApiRequests
SynapseIntegrationActivityRuns
SynapseIntegrationPipelineRuns
SynapseIntegrationTriggerRuns
SynapseRbacOperations
SynapseSqlPoolDmsWorkers
SynapseSqlPoolExecRequests
SynapseSqlPoolRequestSteps
SynapseSqlPoolSqlRequests
SynapseSqlPoolWaits
Syslog 部分支持 - 完全支持来自 Log Analytics 代理 (MMA) 或 Azure Monitor 代理 (AMA) 的数据。 通过诊断扩展代理到达的数据是通过存储收集的,但不支持此路径。
ThreatIntelligenceIndicator
TSIIngress
UCClient
UCClientReadinessStatus
UCClientUpdateStatus
UCDeviceAlert
UCDOAggregatedStatus
UCDOStatus
UCServiceUpdateStatus
UCUpdateAlert
更新 部分支持 - 有些数据是通过不受支持的内部服务引入的。
UpdateRunProgress
UpdateSummary
UrlClickEvents
W3CIISLog 部分支持 - 完全支持来自 Log Analytics 代理 (MMA) 或 Azure Monitor 代理 (AMA) 的数据。 通过诊断扩展代理到达的数据是通过存储收集的,但不支持此路径。
WaaSDeploymentStatus
WaaSInsiderStatus
WaaSUpdateStatus
监视列表
WebPubSubConnectivity
WebPubSubHttpRequest
WebPubSubMessaging
Windows 客户端评估建议
WindowsEvent
WindowsFirewall
Windows 服务器评估建议
WireData 部分支持 - 有些数据是通过不受支持的内部服务引入的。
WorkloadDiagnosticLogs
WUDOAggregatedStatus
WUDOStatus
WVDAgentHealthStatus
WVDCheckpoints
WVDConnectionNetworkData
WVDConnections
WVDErrors
WVDFeeds
WVDHostRegistrations
WVDManagement