AzureDiagnostics
174 columns from 51 Azure resource types.
PII
Stores resource logs for Azure services that use Azure Diagnostics mode. Resource logs describe the internal operation of Azure resources.
Source: Microsoft Learn
Columns
174 columns
| Column | Type | Description |
|---|---|---|
| action_id_s | String | |
| action_name_s | String | |
| action_s | String | |
| ActivityId_g | Guid | |
| AdditionalFields | ||
| AdHocOrScheduledJob_s | String | |
| application_name_s | String | |
| audit_schema_version_d | Double | |
| avg_cpu_percent_s | String | |
| avg_mean_time_s | String | |
| backendHostname_s | String | |
| Caller_s | String | |
| callerId_s | String | |
| CallerIPAddress PII | String | |
| calls_s | String | |
| Category | String | |
| client_ip_s | String | |
| clientInfo_s | String | |
| clientIP_s | String | |
| clientIp_s | String | |
| clientIpAddress_s PII | String | |
| clientPort_d | Double | |
| code_s | String | |
| collectionName_s | String | |
| conditions_destinationIP_s | String | |
| conditions_destinationPortRange_s | String | |
| conditions_None_s | String | |
| conditions_protocols_s | String | |
| conditions_sourceIP_s | String | |
| conditions_sourcePortRange_s | String | |
| CorrelationId | String | |
| count_executions_d | Double | |
| cpu_time_d | Double | |
| database_name_s | String | |
| database_principal_name_s | String | |
| DatabaseName_s | String | |
| db_id_s | String | |
| direction_s | String | |
| dop_d | Double | |
| duration_d | Double | |
| duration_milliseconds_d | Double | |
| DurationMs | BigInt | |
| ElasticPoolName_s | String | |
| endTime_t | DateTime | |
| Environment_s | String | |
| error_code_s | String | |
| error_message_s | String | |
| errorLevel_s | String | |
| event_class_s | String | |
| event_s | String | |
| event_subclass_s | String | |
| event_time_t | DateTime | |
| EventName_s | String | |
| execution_type_d | Double | |
| executionInfo_endTime_t | DateTime | |
| executionInfo_exitCode_d | Double | |
| executionInfo_startTime_t | DateTime | |
| host_s | String | |
| httpMethod_s | String | |
| httpStatus_d | Double | |
| httpStatusCode_d | Double | |
| httpStatusCode_s | String | |
| httpVersion_s | String | |
| id_s | String | |
| identity_claim_appid_g | Guid | |
| identity_claim_ipaddr_s | String | |
| instanceId_s | String | |
| interval_end_time_d | Double | |
| interval_start_time_d | Double | |
| ip_s | String | |
| is_column_permission_s | String | |
| isAccessPolicyMatch_b | Bool | |
| JobDurationInSecs_s | String | |
| JobFailureCode_s | String | |
| JobId_g | Guid | |
| jobId_s | String | |
| JobOperation_s | String | |
| JobOperationSubType_s | String | |
| JobStartDateTime_s | String | |
| JobStatus_s | String | |
| JobUniqueId_g | Guid | |
| Level | String | |
| log_bytes_used_d | Double | |
| logical_io_reads_d | Double | |
| logical_io_writes_d | Double | |
| LogicalServerName_s | String | |
| macAddress_s | String | |
| matchedConnections_d | Double | |
| max_cpu_time_d | Double | |
| max_dop_d | Double | |
| max_duration_d | Double | |
| max_log_bytes_used_d | Double | |
| max_logical_io_reads_d | Double | |
| max_logical_io_writes_d | Double | |
| max_num_physical_io_reads_d | Double | |
| max_physical_io_reads_d | Double | |
| max_query_max_used_memory_d | Double | |
| max_rowcount_d | Double | |
| max_time_s | String | |
| mean_time_s | String | |
| Message | String | |
| min_time_s | String | |
| msg_s | String | |
| num_physical_io_reads_d | Double | |
| object_id_d | Double | |
| object_name_s | String | |
| OperationName | String | |
| OperationVersion | String | |
| partitionKey_s | String | |
| physical_io_reads_d | Double | |
| plan_id_d | Double | |
| policy_s | String | |
| policyMode_s | String | |
| primaryIPv4Address_s | String | |
| priority_d | Double | |
| properties_enabledForDeployment_b | Bool | |
| properties_enabledForDiskEncryption_b | Bool | |
| properties_enabledForTemplateDeployment_b | Bool | |
| properties_s | String | |
| properties_sku_Family_s | String | |
| properties_sku_Name_s | String | |
| properties_tenantId_g | Guid | |
| query_hash_s | String | |
| query_id_d | Double | |
| query_max_used_memory_d | Double | |
| query_plan_hash_s | String | |
| query_time_d | Double | |
| querytext_s | String | |
| receivedBytes_d | Double | |
| Region_s | String | |
| requestCharge_s | String | |
| requestQuery_s | String | |
| requestResourceId_s | String | |
| requestResourceType_s | String | |
| requestUri_s | String | |
| reserved_storage_mb_s | String | |
| Resource | String | |
| resource_actionName_s | String | |
| resource_location_s | String | |
| resource_originRunId_s | String | |
| resource_resourceGroupName_s | String | |
| resource_runId_s | String | |
| resource_subscriptionId_g | Guid | |
| resource_triggerName_s | String | |
| resource_workflowId_g | Guid | |
| resource_workflowName_s | String | |
| ResourceGroup | String | |
| _ResourceId | String | A unique identifier for the resource that the record is associated with |
| ResourceProvider | String | |
| ResourceProvider | String | |
| ResourceType | String | |
| ResourceType | String | |
| response_rows_d | Double | |
| resultCode_s | String | |
| ResultDescription | String | |
| ResultDescription | String | |
| resultDescription_ChildJobs_s | String | |
| resultDescription_ErrorJobs_s | String | |
| resultMessage_s | String | |
| ResultSignature | String | |
| ResultType | String | |
| ResultType | String | |
| rootCauseAnalysis_s | String | |
| routingRuleName_s | String | |
| rowcount_d | Double | |
| ruleName_s | String | |
| RunbookName_s | String | |
| RunOn_s | String | |
| schema_name_s | String | |
| sentBytes_d | Double | |
| sequence_group_id_g | Guid | |
| sequence_number_d | Double | |
| server_principal_sid_s | String | |
| session_id_d | Double |
Routing resource types
-
Microsoft.AgFoodPlatform/farmBeats
allLogs audit- Categories
- ApplicationAuditLogs FarmManagementLogs FarmOperationLogs InsightLogs JobProcessedLogs ModelInferenceLogs ProviderAuthLogs SatelliteLogs SensorManagementLogs WeatherLogs
-
Microsoft.AnalysisServices/servers
allLogs- Categories
- Engine Service
-
Microsoft.ApiManagement/service/workspaces
- Categories
- GatewayLogs
-
Microsoft.Automation/automationAccounts
allLogs audit- Categories
- AuditEvent DscNodeStatus JobLogs JobStreams
-
Microsoft.Batch/batchaccounts
allLogs audit- Categories
- AuditLog ServiceLog
-
Microsoft.Cdn/cdnwebapplicationfirewallpolicies
allLogs- Categories
- WebApplicationFirewallLogs
-
Microsoft.Cdn/profiles
allLogs audit- Categories
- AzureCdnAccessLog FrontDoorAccessLog FrontDoorHealthProbeLog FrontDoorWebApplicationFirewallLog
-
Microsoft.Cdn/profiles/endpoints
allLogs- Categories
- CoreAnalytics
-
Microsoft.CognitiveServices/accounts
allLogs audit- Categories
- Audit AzureOpenAIRequestUsage RequestResponse Trace
-
Microsoft.CognitiveServices/accounts/projects
- Categories
- Audit Trace
-
Microsoft.ContainerService/fleets
- Categories
- cloud-controller-manager fleet-hub-agent fleet-hub-net-controller-manager guard kube-apiserver kube-audit kube-audit-admin kube-controller-manager kube-scheduler
-
Microsoft.ContainerService/managedClusters
- Categories
- cloud-controller-manager cluster-autoscaler csi-azuredisk-controller csi-azurefile-controller csi-snapshot-controller fleet-mcs-controller-manager fleet-member-agent fleet-member-net-controller-manager guard karpenter-events kube-apiserver kube-audit kube-audit-admin kube-controller-manager kube-scheduler
-
Microsoft.DataLakeAnalytics/accounts
allLogs- Categories
- Audit ConfigurationChange JobEvent JobInfo Requests
-
Microsoft.DataLakeStore/accounts
allLogs- Categories
- Audit Requests
-
Microsoft.DBforMariaDB/servers
allLogs- Categories
- MySqlAuditLogs MySqlSlowLogs
-
Microsoft.DBforMySQL/flexibleServers
allLogs audit- Categories
- MySqlAuditLogs MySqlSlowLogs
-
Microsoft.DBforMySQL/servers
allLogs- Categories
- MySqlAuditLogs MySqlSlowLogs
-
Microsoft.DBforPostgreSQL/flexibleServers
allLogs audit- Categories
- PostgreSQLFlexDatabaseXacts PostgreSQLFlexPGBouncer PostgreSQLFlexQueryStoreRuntime PostgreSQLFlexQueryStoreWaitStats PostgreSQLFlexSessions PostgreSQLFlexTableStats PostgreSQLLogs PostgreSQLQueryStoreSqlText
-
Microsoft.DBForPostgreSQL/serverGroupsv2
allLogs- Categories
- PostgreSQLLogs
-
Microsoft.DBforPostgreSQL/servers
allLogs- Categories
- PostgreSQLLogs QueryStoreRuntimeStatistics QueryStoreWaitStatistics
-
Microsoft.Devices/IotHubs
allLogs audit- Categories
- C2DCommands C2DTwinOperations Configurations Connections D2CTwinOperations DeviceIdentityOperations DeviceStreams DeviceTelemetry DirectMethods DistributedTracing FileUploadOperations JobsOperations Routes TwinQueries
-
Microsoft.Devices/provisioningServices
allLogs- Categories
- DeviceOperations ServiceOperations
-
Microsoft.DocumentDB/cassandraClusters
allLogs audit- Categories
- CassandraAudit CassandraLogs
-
Microsoft.DocumentDB/mongoClusters
allLogs audit- Categories
- vCoreMongoRequests
-
Microsoft.EventHub/Namespaces
allLogs audit- Categories
- ApplicationMetricsLogs ArchiveLogs AutoScaleLogs CustomerManagedKeyUserLogs DataDRLogs DiagnosticErrorLogs EventHubVNetConnectionEvent KafkaCoordinatorLogs KafkaUserErrorLogs OperationalLogs RuntimeAuditLogs
-
microsoft.keyvault/managedhsms
allLogs audit- Categories
- AuditEvent
-
Microsoft.KeyVault/vaults
allLogs audit- Categories
- AuditEvent AzurePolicyEvaluationDetails
-
Microsoft.Logic/IntegrationAccounts
allLogs- Categories
- IntegrationAccountTrackingEvents
-
Microsoft.Logic/Workflows
allLogs- Categories
- WorkflowRuntime
-
Microsoft.Network/applicationgateways
allLogs- Categories
- ApplicationGatewayAccessLog ApplicationGatewayFirewallLog ApplicationGatewayPerformanceLog
-
Microsoft.Network/azureFirewalls
allLogs- Categories
- AzureFirewallApplicationRule AzureFirewallDnsProxy AzureFirewallNetworkRule
-
Microsoft.Network/expressRouteCircuits
allLogs- Categories
- PeeringRouteLog
-
Microsoft.Network/frontdoors
allLogs audit- Categories
- FrontdoorAccessLog FrontdoorWebApplicationFirewallLog
-
Microsoft.Network/networksecuritygroups
allLogs- Categories
- NetworkSecurityGroupEvent NetworkSecurityGroupFlowEvent NetworkSecurityGroupRuleCounter
-
microsoft.network/p2svpngateways
allLogs audit- Categories
- GatewayDiagnosticLog IKEDiagnosticLog P2SDiagnosticLog
-
Microsoft.Network/publicIPAddresses
allLogs audit- Categories
- DDoSMitigationFlowLogs DDoSMitigationReports DDoSProtectionNotifications
-
Microsoft.Network/publicIPPrefixes
allLogs audit- Categories
- DDoSMitigationFlowLogs DDoSMitigationReports DDoSProtectionNotifications
-
Microsoft.Network/trafficManagerProfiles
allLogs- Categories
- ProbeHealthStatusEvents
-
microsoft.network/virtualnetworkgateways
allLogs audit- Categories
- GatewayDiagnosticLog IKEDiagnosticLog P2SDiagnosticLog RouteDiagnosticLog TunnelDiagnosticLog
-
microsoft.network/vpngateways
allLogs- Categories
- GatewayDiagnosticLog IKEDiagnosticLog RouteDiagnosticLog TunnelDiagnosticLog
-
Microsoft.PowerBI/tenants/workspaces
allLogs- Categories
- Engine OneLakeData
-
Microsoft.PowerBIDedicated/capacities
allLogs- Categories
- Engine
-
Microsoft.RecoveryServices/Vaults
allLogs- Categories
- AzureBackupReport AzureSiteRecoveryEvents AzureSiteRecoveryProtectedDiskDataChurn AzureSiteRecoveryRecoveryPoints AzureSiteRecoveryReplicatedItems AzureSiteRecoveryReplicationDataUploadRate AzureSiteRecoveryReplicationStats
-
Microsoft.Relay/namespaces
allLogs- Categories
- HybridConnectionsEvent VNetAndIPFilteringLogs
-
Microsoft.Search/searchServices
allLogs audit- Categories
- OperationLogs
-
Microsoft.ServiceBus/Namespaces
allLogs audit- Categories
- ApplicationMetricsLogs DataDRLogs DiagnosticErrorLogs OperationalLogs RuntimeAuditLogs VNetAndIPFilteringLogs
-
Microsoft.Sql/managedInstances
allLogs audit- Categories
- DevOpsOperationsAudit ResourceUsageStats SQLSecurityAuditEvents
-
Microsoft.Sql/managedInstances/databases
allLogs- Categories
- Errors QueryStoreRuntimeStatistics QueryStoreWaitStatistics SQLInsights
-
Microsoft.Sql/servers/databases
allLogs audit- Categories
- AutomaticTuning Blocks DatabaseWaitStatistics Deadlocks DevOpsOperationsAudit DmsWorkers Errors ExecRequests QueryStoreRuntimeStatistics QueryStoreWaitStatistics RequestSteps SQLInsights SqlRequests SQLSecurityAuditEvents Timeouts Waits
-
Microsoft.StreamAnalytics/streamingjobs
allLogs- Categories
- Authoring Execution
-
Microsoft.Synapse/workspaces
allLogs audit- Categories
- BuiltinSqlReqsEnded GatewayApiRequests IntegrationActivityRuns IntegrationPipelineRuns IntegrationTriggerRuns SQLSecurityAuditEvents SynapseLinkEvent SynapseRbacOperations