diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 44739bfbf5..380b614917 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -1,4 +1,4 @@ ---- +--- title: Tables that support ingestion-time transformations in Azure Monitor Logs description: Reference for tables that support ingestion-time transformations in Azure Monitor Logs. ms.topic: reference @@ -16,23 +16,55 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal |:---|:---| | [AACAudit](/azure/azure-monitor/reference/tables/aacaudit) | | | [AACHttpRequest](/azure/azure-monitor/reference/tables/aachttprequest) | | +| [AADB2CRequestLogs](/azure/azure-monitor/reference/tables/aadb2crequestlogs) | | +| [AADCustomSecurityAttributeAuditLogs](/azure/azure-monitor/reference/tables/aadcustomsecurityattributeauditlogs) | | | [AADDomainServicesAccountLogon](/azure/azure-monitor/reference/tables/aaddomainservicesaccountlogon) | | | [AADDomainServicesAccountManagement](/azure/azure-monitor/reference/tables/aaddomainservicesaccountmanagement) | | | [AADDomainServicesDirectoryServiceAccess](/azure/azure-monitor/reference/tables/aaddomainservicesdirectoryserviceaccess) | | +| [AADDomainServicesDNSAuditsDynamicUpdates](/azure/azure-monitor/reference/tables/aaddomainservicesdnsauditsdynamicupdates) | | +| [AADDomainServicesDNSAuditsGeneral](/azure/azure-monitor/reference/tables/aaddomainservicesdnsauditsgeneral) | | | [AADDomainServicesLogonLogoff](/azure/azure-monitor/reference/tables/aaddomainserviceslogonlogoff) | | | [AADDomainServicesPolicyChange](/azure/azure-monitor/reference/tables/aaddomainservicespolicychange) | | | [AADDomainServicesPrivilegeUse](/azure/azure-monitor/reference/tables/aaddomainservicesprivilegeuse) | | +| [AADFirstPartyToFirstPartySignInLogs](/azure/azure-monitor/reference/tables/aadfirstpartytofirstpartysigninlogs) | | | [AADManagedIdentitySignInLogs](/azure/azure-monitor/reference/tables/aadmanagedidentitysigninlogs) | | | [AADNonInteractiveUserSignInLogs](/azure/azure-monitor/reference/tables/aadnoninteractiveusersigninlogs) | | | [AADProvisioningLogs](/azure/azure-monitor/reference/tables/aadprovisioninglogs) | | +| [AADRiskyServicePrincipals](/azure/azure-monitor/reference/tables/aadriskyserviceprincipals) | | | [AADRiskyUsers](/azure/azure-monitor/reference/tables/aadriskyusers) | | +| [AADServicePrincipalRiskEvents](/azure/azure-monitor/reference/tables/aadserviceprincipalriskevents) | | | [AADServicePrincipalSignInLogs](/azure/azure-monitor/reference/tables/aadserviceprincipalsigninlogs) | | | [AADUserRiskEvents](/azure/azure-monitor/reference/tables/aaduserriskevents) | | -| ABAPAuditLog | | +| [ABAPAuditLog](/azure/azure-monitor/reference/tables/abapauditlog) | | +| [ABAPAuthorizationDetails](/azure/azure-monitor/reference/tables/abapauthorizationdetails) | | +| [ABAPChangeDocsLog](/azure/azure-monitor/reference/tables/abapchangedocslog) | | +| [ABAPUserDetails](/azure/azure-monitor/reference/tables/abapuserdetails) | | | [ABSBotRequests](/azure/azure-monitor/reference/tables/absbotrequests) | | +| [ACICollaborationAudit](/azure/azure-monitor/reference/tables/acicollaborationaudit) | | +| [ACRConnectedClientList](/azure/azure-monitor/reference/tables/acrconnectedclientlist) | | +| [ACREntraAuthenticationAuditLog](/azure/azure-monitor/reference/tables/acrentraauthenticationauditlog) | | +| [ACSAdvancedMessagingOperations](/azure/azure-monitor/reference/tables/acsadvancedmessagingoperations) | | | [ACSAuthIncomingOperations](/azure/azure-monitor/reference/tables/acsauthincomingoperations) | | | [ACSBillingUsage](/azure/azure-monitor/reference/tables/acsbillingusage) | | +| [ACSCallAutomationIncomingOperations](/azure/azure-monitor/reference/tables/acscallautomationincomingoperations) | | +| [ACSCallAutomationMediaSummary](/azure/azure-monitor/reference/tables/acscallautomationmediasummary) | | +| [ACSCallClientMediaStatsTimeSeries](/azure/azure-monitor/reference/tables/acscallclientmediastatstimeseries) | | +| [ACSCallClientOperations](/azure/azure-monitor/reference/tables/acscallclientoperations) | | +| [ACSCallClosedCaptionsSummary](/azure/azure-monitor/reference/tables/acscallclosedcaptionssummary) | | +| [ACSCallDiagnostics](/azure/azure-monitor/reference/tables/acscalldiagnostics) | | +| [ACSCallDiagnosticsUpdates](/azure/azure-monitor/reference/tables/acscalldiagnosticsupdates) | | +| [ACSCallingMetrics](/azure/azure-monitor/reference/tables/acscallingmetrics) | | +| [ACSCallRecordingIncomingOperations](/azure/azure-monitor/reference/tables/acscallrecordingincomingoperations) | | +| [ACSCallRecordingSummary](/azure/azure-monitor/reference/tables/acscallrecordingsummary) | | +| [ACSCallSummary](/azure/azure-monitor/reference/tables/acscallsummary) | | +| [ACSCallSummaryUpdates](/azure/azure-monitor/reference/tables/acscallsummaryupdates) | | +| [ACSCallSurvey](/azure/azure-monitor/reference/tables/acscallsurvey) | | | [ACSChatIncomingOperations](/azure/azure-monitor/reference/tables/acschatincomingoperations) | | +| [ACSEmailSendMailOperational](/azure/azure-monitor/reference/tables/acsemailsendmailoperational) | | +| [ACSEmailStatusUpdateOperational](/azure/azure-monitor/reference/tables/acsemailstatusupdateoperational) | | +| [ACSEmailUserEngagementOperational](/azure/azure-monitor/reference/tables/acsemailuserengagementoperational) | | +| [ACSJobRouterIncomingOperations](/azure/azure-monitor/reference/tables/acsjobrouterincomingoperations) | | +| [ACSRoomsIncomingOperations](/azure/azure-monitor/reference/tables/acsroomsincomingoperations) | | | [ACSSMSIncomingOperations](/azure/azure-monitor/reference/tables/acssmsincomingoperations) | | | [ADAssessmentRecommendation](/azure/azure-monitor/reference/tables/adassessmentrecommendation) | | | [AddonAzureBackupAlerts](/azure/azure-monitor/reference/tables/addonazurebackupalerts) | | @@ -61,6 +93,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ADPRequests](/azure/azure-monitor/reference/tables/adprequests) | | | [ADReplicationResult](/azure/azure-monitor/reference/tables/adreplicationresult) | | | [ADSecurityAssessmentRecommendation](/azure/azure-monitor/reference/tables/adsecurityassessmentrecommendation) | | +| [ADTDataHistoryOperation](/azure/azure-monitor/reference/tables/adtdatahistoryoperation) | | | [ADTDigitalTwinsOperation](/azure/azure-monitor/reference/tables/adtdigitaltwinsoperation) | | | [ADTModelsOperation](/azure/azure-monitor/reference/tables/adtmodelsoperation) | | | [ADTQueryOperation](/azure/azure-monitor/reference/tables/adtqueryoperation) | | @@ -69,15 +102,50 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ADXQuery](/azure/azure-monitor/reference/tables/adxquery) | | | [ADXTableDetails](/azure/azure-monitor/reference/tables/adxtabledetails) | | | [ADXTableUsageStatistics](/azure/azure-monitor/reference/tables/adxtableusagestatistics) | | +| [AegDataPlaneRequests](/azure/azure-monitor/reference/tables/aegdataplanerequests) | | | [AegDeliveryFailureLogs](/azure/azure-monitor/reference/tables/aegdeliveryfailurelogs) | | | [AegPublishFailureLogs](/azure/azure-monitor/reference/tables/aegpublishfailurelogs) | | +| [AEWAssignmentBlobLogs](/azure/azure-monitor/reference/tables/aewassignmentbloblogs) | | +| [AEWAuditLogs](/azure/azure-monitor/reference/tables/aewauditlogs) | | +| [AEWComputePipelinesLogs](/azure/azure-monitor/reference/tables/aewcomputepipelineslogs) | | +| [AEWExperimentAssignmentSummary](/azure/azure-monitor/reference/tables/aewexperimentassignmentsummary) | | +| [AEWExperimentScorecardMetricPairs](/azure/azure-monitor/reference/tables/aewexperimentscorecardmetricpairs) | | +| [AEWExperimentScorecards](/azure/azure-monitor/reference/tables/aewexperimentscorecards) | | +| [AFDAccessLog](/azure/azure-monitor/reference/tables/afdaccesslog) | | +| [AFDClassicCdnAccessLog](/azure/azure-monitor/reference/tables/afdclassiccdnaccesslog) | | +| [AFDHealthProbeLog](/azure/azure-monitor/reference/tables/afdhealthprobelog) | | +| [AFDWebApplicationFirewallLog](/azure/azure-monitor/reference/tables/afdwebapplicationfirewalllog) | | +| [AFSAuditLogs](/azure/azure-monitor/reference/tables/afsauditlogs) | | +| [AGCAccessLogs](/azure/azure-monitor/reference/tables/agcaccesslogs) | | +| [AggregatedSecurityAlert](/azure/azure-monitor/reference/tables/aggregatedsecurityalert) | | +| [AgriFoodApplicationAuditLogs](/azure/azure-monitor/reference/tables/agrifoodapplicationauditlogs) | | +| [AgriFoodFarmManagementLogs](/azure/azure-monitor/reference/tables/agrifoodfarmmanagementlogs) | | +| [AgriFoodFarmOperationLogs](/azure/azure-monitor/reference/tables/agrifoodfarmoperationlogs) | | +| [AgriFoodInsightLogs](/azure/azure-monitor/reference/tables/agrifoodinsightlogs) | | +| [AgriFoodJobProcessedLogs](/azure/azure-monitor/reference/tables/agrifoodjobprocessedlogs) | | +| [AgriFoodModelInferenceLogs](/azure/azure-monitor/reference/tables/agrifoodmodelinferencelogs) | | +| [AgriFoodProviderAuthLogs](/azure/azure-monitor/reference/tables/agrifoodproviderauthlogs) | | +| [AgriFoodSatelliteLogs](/azure/azure-monitor/reference/tables/agrifoodsatellitelogs) | | +| [AgriFoodSensorManagementLogs](/azure/azure-monitor/reference/tables/agrifoodsensormanagementlogs) | | +| [AgriFoodWeatherLogs](/azure/azure-monitor/reference/tables/agrifoodweatherlogs) | | +| [AGSGrafanaLoginEvents](/azure/azure-monitor/reference/tables/agsgrafanaloginevents) | | +| [AGSGrafanaUsageInsightsEvents](/azure/azure-monitor/reference/tables/agsgrafanausageinsightsevents) | | | [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | -| [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | | [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | +| [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | +| [AHDSDeidAuditLogs](/azure/azure-monitor/reference/tables/ahdsdeidauditlogs) | | +| [AHDSDicomAuditLogs](/azure/azure-monitor/reference/tables/ahdsdicomauditlogs) | | +| [AHDSDicomDiagnosticLogs](/azure/azure-monitor/reference/tables/ahdsdicomdiagnosticlogs) | | +| [AHDSMedTechDiagnosticLogs](/azure/azure-monitor/reference/tables/ahdsmedtechdiagnosticlogs) | | | [AirflowDagProcessingLogs](/azure/azure-monitor/reference/tables/airflowdagprocessinglogs) | | +| [AKSAudit](/azure/azure-monitor/reference/tables/aksaudit) | | +| [AKSAuditAdmin](/azure/azure-monitor/reference/tables/aksauditadmin) | | +| [AKSControlPlane](/azure/azure-monitor/reference/tables/akscontrolplane) | | +| [ALBHealthEvent](/azure/azure-monitor/reference/tables/albhealthevent) | | | [Alert](/azure/azure-monitor/reference/tables/alert) | | | [AlertEvidence](/azure/azure-monitor/reference/tables/alertevidence) | | | [AlertInfo](/azure/azure-monitor/reference/tables/alertinfo) | | +| [AMATelemetryEvents](/azure/azure-monitor/reference/tables/amatelemetryevents) | | | [AmlComputeClusterEvent](/azure/azure-monitor/reference/tables/amlcomputeclusterevent) | | | [AmlComputeCpuGpuUtilization](/azure/azure-monitor/reference/tables/amlcomputecpugpuutilization) | | | [AmlComputeInstanceEvent](/azure/azure-monitor/reference/tables/amlcomputeinstanceevent) | | @@ -90,11 +158,26 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AmlInferencingEvent](/azure/azure-monitor/reference/tables/amlinferencingevent) | | | [AmlModelsEvent](/azure/azure-monitor/reference/tables/amlmodelsevent) | | | [AmlOnlineEndpointConsoleLog](/azure/azure-monitor/reference/tables/amlonlineendpointconsolelog) | | +| [AmlOnlineEndpointEventLog](/azure/azure-monitor/reference/tables/amlonlineendpointeventlog) | | +| [AmlOnlineEndpointTrafficLog](/azure/azure-monitor/reference/tables/amlonlineendpointtrafficlog) | | | [AmlPipelineEvent](/azure/azure-monitor/reference/tables/amlpipelineevent) | | +| [AmlRegistryReadEventsLog](/azure/azure-monitor/reference/tables/amlregistryreadeventslog) | | +| [AmlRegistryWriteEventsLog](/azure/azure-monitor/reference/tables/amlregistrywriteeventslog) | | | [AmlRunEvent](/azure/azure-monitor/reference/tables/amlrunevent) | | | [AmlRunStatusChangedEvent](/azure/azure-monitor/reference/tables/amlrunstatuschangedevent) | | +| [AMSKeyDeliveryRequests](/azure/azure-monitor/reference/tables/amskeydeliveryrequests) | | +| [AMSLiveEventOperations](/azure/azure-monitor/reference/tables/amsliveeventoperations) | | +| [AMSMediaAccountHealth](/azure/azure-monitor/reference/tables/amsmediaaccounthealth) | | +| [AMSStreamingEndpointRequests](/azure/azure-monitor/reference/tables/amsstreamingendpointrequests) | | +| [AMWMetricsUsageDetails](/azure/azure-monitor/reference/tables/amwmetricsusagedetails) | | +| [ANFFileAccess](/azure/azure-monitor/reference/tables/anffileaccess) | | | [Anomalies](/azure/azure-monitor/reference/tables/anomalies) | | +| [AOIDatabaseQuery](/azure/azure-monitor/reference/tables/aoidatabasequery) | | +| [AOIDigestion](/azure/azure-monitor/reference/tables/aoidigestion) | | +| [AOIStorage](/azure/azure-monitor/reference/tables/aoistorage) | | +| [ApiManagementGatewayLlmLog](/azure/azure-monitor/reference/tables/apimanagementgatewayllmlog) | | | [ApiManagementGatewayLogs](/azure/azure-monitor/reference/tables/apimanagementgatewaylogs) | | +| [APIMDevPortalAuditDiagnosticLog](/azure/azure-monitor/reference/tables/apimdevportalauditdiagnosticlog) | | | [AppAvailabilityResults](/azure/azure-monitor/reference/tables/appavailabilityresults) | | | [AppBrowserTimings](/azure/azure-monitor/reference/tables/appbrowsertimings) | | | [AppCenterError](/azure/azure-monitor/reference/tables/appcentererror) | | @@ -111,49 +194,114 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AppServiceAntivirusScanAuditLogs](/azure/azure-monitor/reference/tables/appserviceantivirusscanauditlogs) | | | [AppServiceAppLogs](/azure/azure-monitor/reference/tables/appserviceapplogs) | | | [AppServiceAuditLogs](/azure/azure-monitor/reference/tables/appserviceauditlogs) | | +| [AppServiceAuthenticationLogs](/azure/azure-monitor/reference/tables/appserviceauthenticationlogs) | | | [AppServiceConsoleLogs](/azure/azure-monitor/reference/tables/appserviceconsolelogs) | | | [AppServiceEnvironmentPlatformLogs](/azure/azure-monitor/reference/tables/appserviceenvironmentplatformlogs) | | | [AppServiceFileAuditLogs](/azure/azure-monitor/reference/tables/appservicefileauditlogs) | | | [AppServiceHTTPLogs](/azure/azure-monitor/reference/tables/appservicehttplogs) | | | [AppServiceIPSecAuditLogs](/azure/azure-monitor/reference/tables/appserviceipsecauditlogs) | | | [AppServicePlatformLogs](/azure/azure-monitor/reference/tables/appserviceplatformlogs) | | +| [AppServiceServerlessSecurityPluginData](/azure/azure-monitor/reference/tables/appserviceserverlesssecurityplugindata) | | | [AppSystemEvents](/azure/azure-monitor/reference/tables/appsystemevents) | | | [AppTraces](/azure/azure-monitor/reference/tables/apptraces) | | +| [ArcK8sAudit](/azure/azure-monitor/reference/tables/arck8saudit) | | +| [ArcK8sAuditAdmin](/azure/azure-monitor/reference/tables/arck8sauditadmin) | | +| [ArcK8sControlPlane](/azure/azure-monitor/reference/tables/arck8scontrolplane) | | +| [ASCAuditLogs](/azure/azure-monitor/reference/tables/ascauditlogs) | | +| [ASCDeviceEvents](/azure/azure-monitor/reference/tables/ascdeviceevents) | | | [ASimAuditEventLogs](/azure/azure-monitor/reference/tables/asimauditeventlogs) | | | [ASimAuthenticationEventLogs](/azure/azure-monitor/reference/tables/asimauthenticationeventlogs) | | | [ASimDhcpEventLogs](/azure/azure-monitor/reference/tables/asimdhcpeventlogs) | | | [ASimDnsActivityLogs](/azure/azure-monitor/reference/tables/asimdnsactivitylogs) | | -| ASimDnsAuditLogs | | | [ASimFileEventLogs](/azure/azure-monitor/reference/tables/asimfileeventlogs) | | | [ASimNetworkSessionLogs](/azure/azure-monitor/reference/tables/asimnetworksessionlogs) | | | [ASimProcessEventLogs](/azure/azure-monitor/reference/tables/asimprocesseventlogs) | | | [ASimRegistryEventLogs](/azure/azure-monitor/reference/tables/asimregistryeventlogs) | | | [ASimUserManagementActivityLogs](/azure/azure-monitor/reference/tables/asimusermanagementactivitylogs) | | | [ASimWebSessionLogs](/azure/azure-monitor/reference/tables/asimwebsessionlogs) | | +| [ASRJobs](/azure/azure-monitor/reference/tables/asrjobs) | | +| [ASRReplicatedItems](/azure/azure-monitor/reference/tables/asrreplicateditems) | | +| [ASRv2HealthEvents](/azure/azure-monitor/reference/tables/asrv2healthevents) | | +| [ASRv2JobEvents](/azure/azure-monitor/reference/tables/asrv2jobevents) | | +| [ASRv2ProtectedItems](/azure/azure-monitor/reference/tables/asrv2protecteditems) | | +| [ASRv2ReplicationExtensions](/azure/azure-monitor/reference/tables/asrv2replicationextensions) | | +| [ASRv2ReplicationPolicies](/azure/azure-monitor/reference/tables/asrv2replicationpolicies) | | +| [ASRv2ReplicationVaults](/azure/azure-monitor/reference/tables/asrv2replicationvaults) | | +| [ATCExpressRouteCircuitIpfix](/azure/azure-monitor/reference/tables/atcexpressroutecircuitipfix) | | +| [ATCMicrosoftPeeringMetadata](/azure/azure-monitor/reference/tables/atcmicrosoftpeeringmetadata) | | +| [ATCPrivatePeeringMetadata](/azure/azure-monitor/reference/tables/atcprivatepeeringmetadata) | | | [AuditLogs](/azure/azure-monitor/reference/tables/auditlogs) | | | [AutoscaleEvaluationsLog](/azure/azure-monitor/reference/tables/autoscaleevaluationslog) | | | [AutoscaleScaleActionsLog](/azure/azure-monitor/reference/tables/autoscalescaleactionslog) | | +| [AVNMConnectivityConfigurationChange](/azure/azure-monitor/reference/tables/avnmconnectivityconfigurationchange) | | +| [AVNMIPAMPoolAllocationChange](/azure/azure-monitor/reference/tables/avnmipampoolallocationchange) | | +| [AVNMNetworkGroupMembershipChange](/azure/azure-monitor/reference/tables/avnmnetworkgroupmembershipchange) | | +| [AVNMRuleCollectionChange](/azure/azure-monitor/reference/tables/avnmrulecollectionchange) | | +| [AVSEsxiFirewallSyslog](/azure/azure-monitor/reference/tables/avsesxifirewallsyslog) | | +| [AVSEsxiSyslog](/azure/azure-monitor/reference/tables/avsesxisyslog) | | +| [AVSNsxEdgeSyslog](/azure/azure-monitor/reference/tables/avsnsxedgesyslog) | | +| [AVSNsxManagerSyslog](/azure/azure-monitor/reference/tables/avsnsxmanagersyslog) | | +| [AVSSyslog](/azure/azure-monitor/reference/tables/avssyslog) | | +| [AVSVcSyslog](/azure/azure-monitor/reference/tables/avsvcsyslog) | | | [AWSCloudTrail](/azure/azure-monitor/reference/tables/awscloudtrail) | | +| [AWSCloudTrailCCP](/azure/azure-monitor/reference/tables/awscloudtrailccp) | | | [AWSCloudWatch](/azure/azure-monitor/reference/tables/awscloudwatch) | | +| [AWSCloudWatchCCP](/azure/azure-monitor/reference/tables/awscloudwatchccp) | | | [AWSGuardDuty](/azure/azure-monitor/reference/tables/awsguardduty) | | +| [AWSGuardDutyCCP](/azure/azure-monitor/reference/tables/awsguarddutyccp) | | +| [AWSNetworkFirewallAlert](/azure/azure-monitor/reference/tables/awsnetworkfirewallalert) | | +| [AWSNetworkFirewallFlow](/azure/azure-monitor/reference/tables/awsnetworkfirewallflow) | | +| [AWSNetworkFirewallTls](/azure/azure-monitor/reference/tables/awsnetworkfirewalltls) | | +| [AWSRoute53Resolver](/azure/azure-monitor/reference/tables/awsroute53resolver) | | +| [AWSS3ServerAccess](/azure/azure-monitor/reference/tables/awss3serveraccess) | | +| [AWSSecurityHubFindings](/azure/azure-monitor/reference/tables/awssecurityhubfindings) | | | [AWSVPCFlow](/azure/azure-monitor/reference/tables/awsvpcflow) | | +| [AWSVPCFlowLogsCCP](/azure/azure-monitor/reference/tables/awsvpcflowlogsccp) | | +| [AWSWAF](/azure/azure-monitor/reference/tables/awswaf) | | | [AZFWApplicationRule](/azure/azure-monitor/reference/tables/azfwapplicationrule) | | | [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | | [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | +| [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | +| [AZFWFatFlow](/azure/azure-monitor/reference/tables/azfwfatflow) | | | [AZFWFatFlow](/azure/azure-monitor/reference/tables/azfwfatflow) | | | [AZFWFlowTrace](/azure/azure-monitor/reference/tables/azfwflowtrace) | | +| [AZFWFlowTrace](/azure/azure-monitor/reference/tables/azfwflowtrace) | | +| [AZFWIdpsSignature](/azure/azure-monitor/reference/tables/azfwidpssignature) | | | [AZFWIdpsSignature](/azure/azure-monitor/reference/tables/azfwidpssignature) | | | [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | +| [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | | [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | +| [AZKVPolicyEvaluationDetailsLogs](/azure/azure-monitor/reference/tables/azkvpolicyevaluationdetailslogs) | | +| [AZMSApplicationMetricLogs](/azure/azure-monitor/reference/tables/azmsapplicationmetriclogs) | | +| [AZMSArchiveLogs](/azure/azure-monitor/reference/tables/azmsarchivelogs) | | +| [AZMSAutoscaleLogs](/azure/azure-monitor/reference/tables/azmsautoscalelogs) | | +| [AZMSCustomerManagedKeyUserLogs](/azure/azure-monitor/reference/tables/azmscustomermanagedkeyuserlogs) | | +| [AZMSDiagnosticErrorLogs](/azure/azure-monitor/reference/tables/azmsdiagnosticerrorlogs) | | +| [AZMSHybridConnectionsEvents](/azure/azure-monitor/reference/tables/azmshybridconnectionsevents) | | +| [AZMSKafkaCoordinatorLogs](/azure/azure-monitor/reference/tables/azmskafkacoordinatorlogs) | | +| [AZMSKafkaUserErrorLogs](/azure/azure-monitor/reference/tables/azmskafkausererrorlogs) | | +| [AZMSOperationalLogs](/azure/azure-monitor/reference/tables/azmsoperationallogs) | | +| [AZMSRunTimeAuditLogs](/azure/azure-monitor/reference/tables/azmsruntimeauditlogs) | | +| [AZMSVnetConnectionEvents](/azure/azure-monitor/reference/tables/azmsvnetconnectionevents) | | | [AzureAssessmentRecommendation](/azure/azure-monitor/reference/tables/azureassessmentrecommendation) | | +| [AzureAttestationDiagnostics](/azure/azure-monitor/reference/tables/azureattestationdiagnostics) | | +| [AzureBackupOperations](/azure/azure-monitor/reference/tables/azurebackupoperations) | | | [AzureDevOpsAuditing](/azure/azure-monitor/reference/tables/azuredevopsauditing) | | +| [AzureLoadTestingOperation](/azure/azure-monitor/reference/tables/azureloadtestingoperation) | | +| [AzureLogAnalyticsIngestionDiagnosticLogs](/azure/azure-monitor/reference/tables/azureloganalyticsingestiondiagnosticlogs) | | | [BehaviorAnalytics](/azure/azure-monitor/reference/tables/behavioranalytics) | | +| [BehaviorEntities](/azure/azure-monitor/reference/tables/behaviorentities) | | +| [BehaviorInfo](/azure/azure-monitor/reference/tables/behaviorinfo) | | | [BlockchainApplicationLog](/azure/azure-monitor/reference/tables/blockchainapplicationlog) | | | [BlockchainProxyLog](/azure/azure-monitor/reference/tables/blockchainproxylog) | | +| [CampaignInfo](/azure/azure-monitor/reference/tables/campaigninfo) | | +| [CassandraAudit](/azure/azure-monitor/reference/tables/cassandraaudit) | | +| [CassandraLogs](/azure/azure-monitor/reference/tables/cassandralogs) | | +| [CCFApplicationLogs](/azure/azure-monitor/reference/tables/ccfapplicationlogs) | | | [CDBCassandraRequests](/azure/azure-monitor/reference/tables/cdbcassandrarequests) | | | [CDBControlPlaneRequests](/azure/azure-monitor/reference/tables/cdbcontrolplanerequests) | | | [CDBDataPlaneRequests](/azure/azure-monitor/reference/tables/cdbdataplanerequests) | | @@ -162,12 +310,23 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [CDBPartitionKeyRUConsumption](/azure/azure-monitor/reference/tables/cdbpartitionkeyruconsumption) | | | [CDBPartitionKeyStatistics](/azure/azure-monitor/reference/tables/cdbpartitionkeystatistics) | | | [CDBQueryRuntimeStatistics](/azure/azure-monitor/reference/tables/cdbqueryruntimestatistics) | | +| [CDBTableApiRequests](/azure/azure-monitor/reference/tables/cdbtableapirequests) | | +| [ChaosStudioExperimentEventLogs](/azure/azure-monitor/reference/tables/chaosstudioexperimenteventlogs) | | +| [CIEventsAudit](/azure/azure-monitor/reference/tables/cieventsaudit) | | +| [CIEventsOperational](/azure/azure-monitor/reference/tables/cieventsoperational) | | | [CloudAppEvents](/azure/azure-monitor/reference/tables/cloudappevents) | | +| [CloudHsmServiceOperationAuditLogs](/azure/azure-monitor/reference/tables/cloudhsmserviceoperationauditlogs) | | | [CommonSecurityLog](/azure/azure-monitor/reference/tables/commonsecuritylog) | | +| [CommunicationComplianceActivity](/azure/azure-monitor/reference/tables/communicationcomplianceactivity) | | | [ComputerGroup](/azure/azure-monitor/reference/tables/computergroup) | | +| [ConfidentialWatchlist](/azure/azure-monitor/reference/tables/confidentialwatchlist) | | | [ConfigurationChange](/azure/azure-monitor/reference/tables/configurationchange) | | -| [ConfigurationData](/azure/azure-monitor/reference/tables/configurationdata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [ConfigurationData](/azure/azure-monitor/reference/tables/configurationdata) | Partial support - some of the data is ingested through internal services that aren't supported. | +| [ContainerAppConsoleLogs](/azure/azure-monitor/reference/tables/containerappconsolelogs) | | +| [ContainerAppSystemLogs](/azure/azure-monitor/reference/tables/containerappsystemlogs) | | +| [ContainerEvent](/azure/azure-monitor/reference/tables/containerevent) | | | [ContainerImageInventory](/azure/azure-monitor/reference/tables/containerimageinventory) | | +| [ContainerInstanceLog](/azure/azure-monitor/reference/tables/containerinstancelog) | | | [ContainerInventory](/azure/azure-monitor/reference/tables/containerinventory) | | | [ContainerLog](/azure/azure-monitor/reference/tables/containerlog) | | | [ContainerLogV2](/azure/azure-monitor/reference/tables/containerlogv2) | | @@ -176,25 +335,61 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ContainerRegistryRepositoryEvents](/azure/azure-monitor/reference/tables/containerregistryrepositoryevents) | | | [ContainerServiceLog](/azure/azure-monitor/reference/tables/containerservicelog) | | | [CoreAzureBackup](/azure/azure-monitor/reference/tables/coreazurebackup) | | +| [CosmosDBPostgresLogs](/azure/azure-monitor/reference/tables/cosmosdbpostgreslogs) | | +| [CrowdStrikeAlerts](/azure/azure-monitor/reference/tables/crowdstrikealerts) | | +| [CrowdStrikeDetections](/azure/azure-monitor/reference/tables/crowdstrikedetections) | | +| [CrowdStrikeHosts](/azure/azure-monitor/reference/tables/crowdstrikehosts) | | +| [CrowdStrikeIncidents](/azure/azure-monitor/reference/tables/crowdstrikeincidents) | | +| [CrowdStrikeVulnerabilities](/azure/azure-monitor/reference/tables/crowdstrikevulnerabilities) | | +| [CSARequestResponse](/azure/azure-monitor/reference/tables/csarequestresponse) | | | [DatabricksAccounts](/azure/azure-monitor/reference/tables/databricksaccounts) | | +| [DatabricksApps](/azure/azure-monitor/reference/tables/databricksapps) | | +| [DatabricksBrickStoreHttpGateway](/azure/azure-monitor/reference/tables/databricksbrickstorehttpgateway) | | +| [DatabricksBudgetPolicyCentral](/azure/azure-monitor/reference/tables/databricksbudgetpolicycentral) | | +| [DatabricksCloudStorageMetadata](/azure/azure-monitor/reference/tables/databrickscloudstoragemetadata) | | +| [DatabricksClusterPolicies](/azure/azure-monitor/reference/tables/databricksclusterpolicies) | | | [DatabricksClusters](/azure/azure-monitor/reference/tables/databricksclusters) | | +| [DatabricksDashboards](/azure/azure-monitor/reference/tables/databricksdashboards) | | +| [DatabricksDataMonitoring](/azure/azure-monitor/reference/tables/databricksdatamonitoring) | | +| [DatabricksDataRooms](/azure/azure-monitor/reference/tables/databricksdatarooms) | | | [DatabricksDBFS](/azure/azure-monitor/reference/tables/databricksdbfs) | | | [DatabricksFeatureStore](/azure/azure-monitor/reference/tables/databricksfeaturestore) | | +| [DatabricksFiles](/azure/azure-monitor/reference/tables/databricksfiles) | | +| [DatabricksFilesystem](/azure/azure-monitor/reference/tables/databricksfilesystem) | | | [DatabricksGenie](/azure/azure-monitor/reference/tables/databricksgenie) | | | [DatabricksGlobalInitScripts](/azure/azure-monitor/reference/tables/databricksglobalinitscripts) | | +| [DatabricksGroups](/azure/azure-monitor/reference/tables/databricksgroups) | | +| [DatabricksIngestion](/azure/azure-monitor/reference/tables/databricksingestion) | | | [DatabricksInstancePools](/azure/azure-monitor/reference/tables/databricksinstancepools) | | | [DatabricksJobs](/azure/azure-monitor/reference/tables/databricksjobs) | | +| [DatabricksLakeviewConfig](/azure/azure-monitor/reference/tables/databrickslakeviewconfig) | | +| [DatabricksLineageTracking](/azure/azure-monitor/reference/tables/databrickslineagetracking) | | +| [DatabricksMarketplaceConsumer](/azure/azure-monitor/reference/tables/databricksmarketplaceconsumer) | | +| [DatabricksMarketplaceProvider](/azure/azure-monitor/reference/tables/databricksmarketplaceprovider) | | | [DatabricksMLflowAcledArtifact](/azure/azure-monitor/reference/tables/databricksmlflowacledartifact) | | | [DatabricksMLflowExperiment](/azure/azure-monitor/reference/tables/databricksmlflowexperiment) | | | [DatabricksNotebook](/azure/azure-monitor/reference/tables/databricksnotebook) | | +| [DatabricksOnlineTables](/azure/azure-monitor/reference/tables/databricksonlinetables) | | +| [DatabricksPredictiveOptimization](/azure/azure-monitor/reference/tables/databrickspredictiveoptimization) | | +| [DatabricksRBAC](/azure/azure-monitor/reference/tables/databricksrbac) | | | [DatabricksRemoteHistoryService](/azure/azure-monitor/reference/tables/databricksremotehistoryservice) | | +| [DatabricksRFA](/azure/azure-monitor/reference/tables/databricksrfa) | | | [DatabricksSecrets](/azure/azure-monitor/reference/tables/databrickssecrets) | | | [DatabricksSQLPermissions](/azure/azure-monitor/reference/tables/databrickssqlpermissions) | | | [DatabricksSSH](/azure/azure-monitor/reference/tables/databricksssh) | | +| [DatabricksVectorSearch](/azure/azure-monitor/reference/tables/databricksvectorsearch) | | +| [DatabricksWebhookNotifications](/azure/azure-monitor/reference/tables/databrickswebhooknotifications) | | | [DatabricksWorkspace](/azure/azure-monitor/reference/tables/databricksworkspace) | | +| [DatabricksWorkspaceFiles](/azure/azure-monitor/reference/tables/databricksworkspacefiles) | | +| [DataTransferOperations](/azure/azure-monitor/reference/tables/datatransferoperations) | | | [DataverseActivity](/azure/azure-monitor/reference/tables/dataverseactivity) | | -| DefenderForSqlAlerts | | -| DefenderForSqlTelemetry | | +| [DCPlanBillingEventLogs](/azure/azure-monitor/reference/tables/dcplanbillingeventlogs) | | +| [DCRLogErrors](/azure/azure-monitor/reference/tables/dcrlogerrors) | | +| [DefenderForSqlAlerts](/azure/azure-monitor/reference/tables/defenderforsqlalerts) | | +| [DefenderForSqlTelemetry](/azure/azure-monitor/reference/tables/defenderforsqltelemetry) | | +| [DevCenterBillingEventLogs](/azure/azure-monitor/reference/tables/devcenterbillingeventlogs) | | +| [DevCenterDiagnosticLogs](/azure/azure-monitor/reference/tables/devcenterdiagnosticlogs) | | +| [DevCenterResourceOperationLogs](/azure/azure-monitor/reference/tables/devcenterresourceoperationlogs) | | | [DeviceEvents](/azure/azure-monitor/reference/tables/deviceevents) | | | [DeviceFileCertificateInfo](/azure/azure-monitor/reference/tables/devicefilecertificateinfo) | | | [DeviceFileEvents](/azure/azure-monitor/reference/tables/devicefileevents) | | @@ -210,24 +405,62 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [DeviceTvmSoftwareInventory](/azure/azure-monitor/reference/tables/devicetvmsoftwareinventory) | | | [DeviceTvmSoftwareVulnerabilities](/azure/azure-monitor/reference/tables/devicetvmsoftwarevulnerabilities) | | | [DeviceTvmSoftwareVulnerabilitiesKB](/azure/azure-monitor/reference/tables/devicetvmsoftwarevulnerabilitieskb) | | +| [DFPPurchaseLogs](/azure/azure-monitor/reference/tables/dfppurchaselogs) | | +| [DnsAuditEvents](/azure/azure-monitor/reference/tables/dnsauditevents) | | | [DnsEvents](/azure/azure-monitor/reference/tables/dnsevents) | | | [DnsInventory](/azure/azure-monitor/reference/tables/dnsinventory) | | -| DummyHydrationFact | | +| [DNSQueryLogs](/azure/azure-monitor/reference/tables/dnsquerylogs) | | +| [DSMDataClassificationLogs](/azure/azure-monitor/reference/tables/dsmdataclassificationlogs) | | +| [DSMDataLabelingLogs](/azure/azure-monitor/reference/tables/dsmdatalabelinglogs) | | +| [DummyHydrationFact](/azure/azure-monitor/reference/tables/dummyhydrationfact) | | | [DynamicEventCollection](/azure/azure-monitor/reference/tables/dynamiceventcollection) | | | [Dynamics365Activity](/azure/azure-monitor/reference/tables/dynamics365activity) | | +| [EGNFailedHttpDataPlaneOperations](/azure/azure-monitor/reference/tables/egnfailedhttpdataplaneoperations) | | +| [EGNFailedMqttConnections](/azure/azure-monitor/reference/tables/egnfailedmqttconnections) | | +| [EGNFailedMqttPublishedMessages](/azure/azure-monitor/reference/tables/egnfailedmqttpublishedmessages) | | +| [EGNFailedMqttSubscriptions](/azure/azure-monitor/reference/tables/egnfailedmqttsubscriptions) | | +| [EGNMqttDisconnections](/azure/azure-monitor/reference/tables/egnmqttdisconnections) | | +| [EGNSuccessfulHttpDataPlaneOperations](/azure/azure-monitor/reference/tables/egnsuccessfulhttpdataplaneoperations) | | +| [EGNSuccessfulMqttConnections](/azure/azure-monitor/reference/tables/egnsuccessfulmqttconnections) | | | [EmailAttachmentInfo](/azure/azure-monitor/reference/tables/emailattachmentinfo) | | | [EmailEvents](/azure/azure-monitor/reference/tables/emailevents) | | | [EmailPostDeliveryEvents](/azure/azure-monitor/reference/tables/emailpostdeliveryevents) | | | [EmailUrlInfo](/azure/azure-monitor/reference/tables/emailurlinfo) | | -| [Event](/azure/azure-monitor/reference/tables/event) | Partial support . Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension  is collected through Azure storage. This path isn't supported. | +| [EnrichedMicrosoft365AuditLogs](/azure/azure-monitor/reference/tables/enrichedmicrosoft365auditlogs) | | +| [Event](/azure/azure-monitor/reference/tables/event) | Partial support. Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension is collected through Azure storage. This path isn't supported. | | [ExchangeAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeassessmentrecommendation) | | | [ExchangeOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeonlineassessmentrecommendation) | | | [FailedIngestion](/azure/azure-monitor/reference/tables/failedingestion) | | +| [FileMaliciousContentInfo](/azure/azure-monitor/reference/tables/filemaliciouscontentinfo) | | +| [FSPGPGBouncer](/azure/azure-monitor/reference/tables/fspgpgbouncer) | | | [FunctionAppLogs](/azure/azure-monitor/reference/tables/functionapplogs) | | +| [GCPApigee](/azure/azure-monitor/reference/tables/gcpapigee) | | | [GCPAuditLogs](/azure/azure-monitor/reference/tables/gcpauditlogs) | | +| [GCPCDN](/azure/azure-monitor/reference/tables/gcpcdn) | | +| [GCPCloudRun](/azure/azure-monitor/reference/tables/gcpcloudrun) | | +| [GCPCloudSQL](/azure/azure-monitor/reference/tables/gcpcloudsql) | | +| [GCPComputeEngine](/azure/azure-monitor/reference/tables/gcpcomputeengine) | | +| [GCPDNS](/azure/azure-monitor/reference/tables/gcpdns) | | +| [GCPFirewallLogs](/azure/azure-monitor/reference/tables/gcpfirewalllogs) | | +| [GCPIAM](/azure/azure-monitor/reference/tables/gcpiam) | | +| [GCPIDS](/azure/azure-monitor/reference/tables/gcpids) | | +| [GCPLoadBalancer](/azure/azure-monitor/reference/tables/gcploadbalancer) | | +| [GCPMonitoring](/azure/azure-monitor/reference/tables/gcpmonitoring) | | +| [GCPNAT](/azure/azure-monitor/reference/tables/gcpnat) | | +| [GCPNATAudit](/azure/azure-monitor/reference/tables/gcpnataudit) | | +| [GCPResourceManager](/azure/azure-monitor/reference/tables/gcpresourcemanager) | | +| [GCPVPCFlow](/azure/azure-monitor/reference/tables/gcpvpcflow) | | +| [GKEAPIServer](/azure/azure-monitor/reference/tables/gkeapiserver) | | +| [GKEApplication](/azure/azure-monitor/reference/tables/gkeapplication) | | +| [GKEAudit](/azure/azure-monitor/reference/tables/gkeaudit) | | +| [GKEControllerManager](/azure/azure-monitor/reference/tables/gkecontrollermanager) | | +| [GKEHPADecision](/azure/azure-monitor/reference/tables/gkehpadecision) | | +| [GKEScheduler](/azure/azure-monitor/reference/tables/gkescheduler) | | | [GoogleCloudSCC](/azure/azure-monitor/reference/tables/googlecloudscc) | | +| [GoogleWorkspaceReports](/azure/azure-monitor/reference/tables/googleworkspacereports) | | | [HDInsightAmbariClusterAlerts](/azure/azure-monitor/reference/tables/hdinsightambariclusteralerts) | | | [HDInsightAmbariSystemMetrics](/azure/azure-monitor/reference/tables/hdinsightambarisystemmetrics) | | +| [HDInsightGatewayAuditLogs](/azure/azure-monitor/reference/tables/hdinsightgatewayauditlogs) | | | [HDInsightHadoopAndYarnLogs](/azure/azure-monitor/reference/tables/hdinsighthadoopandyarnlogs) | | | [HDInsightHadoopAndYarnMetrics](/azure/azure-monitor/reference/tables/hdinsighthadoopandyarnmetrics) | | | [HDInsightHBaseLogs](/azure/azure-monitor/reference/tables/hdinsighthbaselogs) | | @@ -243,19 +476,24 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [HDInsightSparkBlockManagerEvents](/azure/azure-monitor/reference/tables/hdinsightsparkblockmanagerevents) | | | [HDInsightSparkEnvironmentEvents](/azure/azure-monitor/reference/tables/hdinsightsparkenvironmentevents) | | | [HDInsightSparkExecutorEvents](/azure/azure-monitor/reference/tables/hdinsightsparkexecutorevents) | | +| [HDInsightSparkExtraEvents](/azure/azure-monitor/reference/tables/hdinsightsparkextraevents) | | | [HDInsightSparkJobEvents](/azure/azure-monitor/reference/tables/hdinsightsparkjobevents) | | | [HDInsightSparkLogs](/azure/azure-monitor/reference/tables/hdinsightsparklogs) | | | [HDInsightSparkSQLExecutionEvents](/azure/azure-monitor/reference/tables/hdinsightsparksqlexecutionevents) | | | [HDInsightSparkStageEvents](/azure/azure-monitor/reference/tables/hdinsightsparkstageevents) | | | [HDInsightSparkStageTaskAccumulables](/azure/azure-monitor/reference/tables/hdinsightsparkstagetaskaccumulables) | | | [HDInsightSparkTaskEvents](/azure/azure-monitor/reference/tables/hdinsightsparktaskevents) | | +| [HDInsightStormLogs](/azure/azure-monitor/reference/tables/hdinsightstormlogs) | | +| [HDInsightStormMetrics](/azure/azure-monitor/reference/tables/hdinsightstormmetrics) | | +| [HDInsightStormTopologyMetrics](/azure/azure-monitor/reference/tables/hdinsightstormtopologymetrics) | | | [HealthStateChangeEvent](/azure/azure-monitor/reference/tables/healthstatechangeevent) | | | [HuntingBookmark](/azure/azure-monitor/reference/tables/huntingbookmark) | | | [IdentityDirectoryEvents](/azure/azure-monitor/reference/tables/identitydirectoryevents) | | | [IdentityInfo](/azure/azure-monitor/reference/tables/identityinfo) | | | [IdentityLogonEvents](/azure/azure-monitor/reference/tables/identitylogonevents) | | | [IdentityQueryEvents](/azure/azure-monitor/reference/tables/identityqueryevents) | | -| [InsightsMetrics](/azure/azure-monitor/reference/tables/insightsmetrics) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [IlumioInsights](/azure/azure-monitor/reference/tables/ilumioinsights) | | +| [InsightsMetrics](/azure/azure-monitor/reference/tables/insightsmetrics) | Partial support - some of the data is ingested through internal services that aren't supported. | | [IntuneAuditLogs](/azure/azure-monitor/reference/tables/intuneauditlogs) | | | [IntuneDevices](/azure/azure-monitor/reference/tables/intunedevices) | | | [IntuneOperationalLogs](/azure/azure-monitor/reference/tables/intuneoperationallogs) | | @@ -266,52 +504,128 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [KubePodInventory](/azure/azure-monitor/reference/tables/kubepodinventory) | | | [KubePVInventory](/azure/azure-monitor/reference/tables/kubepvinventory) | | | [KubeServices](/azure/azure-monitor/reference/tables/kubeservices) | | +| [LAJobLogs](/azure/azure-monitor/reference/tables/lajoblogs) | | | [LAQueryLogs](/azure/azure-monitor/reference/tables/laquerylogs) | | +| [LASummaryLogs](/azure/azure-monitor/reference/tables/lasummarylogs) | | +| [LIATrackingEvents](/azure/azure-monitor/reference/tables/liatrackingevents) | | | [LinuxAuditLog](/azure/azure-monitor/reference/tables/linuxauditlog) | | +| [LogicAppWorkflowRuntime](/azure/azure-monitor/reference/tables/logicappworkflowruntime) | | | [McasShadowItReporting](/azure/azure-monitor/reference/tables/mcasshadowitreporting) | | | [MCCEventLogs](/azure/azure-monitor/reference/tables/mcceventlogs) | | +| [MCVPAuditLogs](/azure/azure-monitor/reference/tables/mcvpauditlogs) | | +| [MCVPOperationLogs](/azure/azure-monitor/reference/tables/mcvpoperationlogs) | | +| [MDCDetectionDNSEvents](/azure/azure-monitor/reference/tables/mdcdetectiondnsevents) | | +| [MDCDetectionFimEvents](/azure/azure-monitor/reference/tables/mdcdetectionfimevents) | | +| [MDCDetectionGatingValidationEvents](/azure/azure-monitor/reference/tables/mdcdetectiongatingvalidationevents) | | +| [MDCDetectionK8SApiEvents](/azure/azure-monitor/reference/tables/mdcdetectionk8sapievents) | | +| [MDCFileIntegrityMonitoringEvents](/azure/azure-monitor/reference/tables/mdcfileintegritymonitoringevents) | | +| [MDECustomCollectionDeviceFileEvents](/azure/azure-monitor/reference/tables/mdecustomcollectiondevicefileevents) | | +| [MDPResourceLog](/azure/azure-monitor/reference/tables/mdpresourcelog) | | | [MicrosoftAzureBastionAuditLogs](/azure/azure-monitor/reference/tables/microsoftazurebastionauditlogs) | | | [MicrosoftDataShareReceivedSnapshotLog](/azure/azure-monitor/reference/tables/microsoftdatasharereceivedsnapshotlog) | | | [MicrosoftDataShareSentSnapshotLog](/azure/azure-monitor/reference/tables/microsoftdatasharesentsnapshotlog) | | | [MicrosoftGraphActivityLogs](/azure/azure-monitor/reference/tables/microsoftgraphactivitylogs) | | | [MicrosoftHealthcareApisAuditLogs](/azure/azure-monitor/reference/tables/microsofthealthcareapisauditlogs) | | | [MicrosoftPurviewInformationProtection](/azure/azure-monitor/reference/tables/microsoftpurviewinformationprotection) | | +| [MNFDeviceUpdates](/azure/azure-monitor/reference/tables/mnfdeviceupdates) | | +| [MNFSystemSessionHistoryUpdates](/azure/azure-monitor/reference/tables/mnfsystemsessionhistoryupdates) | | +| [MNFSystemStateMessageUpdates](/azure/azure-monitor/reference/tables/mnfsystemstatemessageupdates) | | +| [MPTOperation](/azure/azure-monitor/reference/tables/mptoperation) | | +| [MySqlAuditLogs](/azure/azure-monitor/reference/tables/mysqlauditlogs) | | +| [MySqlErrorLogs](/azure/azure-monitor/reference/tables/mysqlerrorlogs) | | +| [MySqlSlowLogs](/azure/azure-monitor/reference/tables/mysqlslowlogs) | | +| [NCBMBreakGlassAuditLogs](/azure/azure-monitor/reference/tables/ncbmbreakglassauditlogs) | | +| [NCBMSecurityDefenderLogs](/azure/azure-monitor/reference/tables/ncbmsecuritydefenderlogs) | | +| [NCBMSecurityLogs](/azure/azure-monitor/reference/tables/ncbmsecuritylogs) | | +| [NCBMSystemLogs](/azure/azure-monitor/reference/tables/ncbmsystemlogs) | | +| [NCCKubernetesLogs](/azure/azure-monitor/reference/tables/ncckuberneteslogs) | | +| [NCCPlatformOperationsLogs](/azure/azure-monitor/reference/tables/nccplatformoperationslogs) | | +| [NCCVMOrchestrationLogs](/azure/azure-monitor/reference/tables/nccvmorchestrationlogs) | | +| [NCMClusterOperationsLogs](/azure/azure-monitor/reference/tables/ncmclusteroperationslogs) | | +| [NCSStorageAlerts](/azure/azure-monitor/reference/tables/ncsstoragealerts) | | +| [NCSStorageAudits](/azure/azure-monitor/reference/tables/ncsstorageaudits) | | +| [NCSStorageLogs](/azure/azure-monitor/reference/tables/ncsstoragelogs) | | +| [NetworkAccessAlerts](/azure/azure-monitor/reference/tables/networkaccessalerts) | | +| [NetworkAccessConnectionEvents](/azure/azure-monitor/reference/tables/networkaccessconnectionevents) | | | [NetworkAccessTraffic](/azure/azure-monitor/reference/tables/networkaccesstraffic) | | | [NetworkMonitoring](/azure/azure-monitor/reference/tables/networkmonitoring) | | +| [NetworkSessions](/azure/azure-monitor/reference/tables/networksessions) | | +| [NginxUpstreamUpdateLogs](/azure/azure-monitor/reference/tables/nginxupstreamupdatelogs) | | +| [NGXOperationLogs](/azure/azure-monitor/reference/tables/ngxoperationlogs) | | +| [NGXSecurityLogs](/azure/azure-monitor/reference/tables/ngxsecuritylogs) | | +| [NSPAccessLogs](/azure/azure-monitor/reference/tables/nspaccesslogs) | | +| [NTAInsights](/azure/azure-monitor/reference/tables/ntainsights) | | | [NTAIpDetails](/azure/azure-monitor/reference/tables/ntaipdetails) | | | [NTANetAnalytics](/azure/azure-monitor/reference/tables/ntanetanalytics) | | | [NTATopologyDetails](/azure/azure-monitor/reference/tables/ntatopologydetails) | | | [NWConnectionMonitorPathResult](/azure/azure-monitor/reference/tables/nwconnectionmonitorpathresult) | | | [NWConnectionMonitorTestResult](/azure/azure-monitor/reference/tables/nwconnectionmonitortestresult) | | +| [OEPAirFlowTask](/azure/azure-monitor/reference/tables/oepairflowtask) | | +| [OEPAuditLogs](/azure/azure-monitor/reference/tables/oepauditlogs) | | +| [OEPDataplaneLogs](/azure/azure-monitor/reference/tables/oepdataplanelogs) | | +| [OEPElasticOperator](/azure/azure-monitor/reference/tables/oepelasticoperator) | | +| [OEPElasticsearch](/azure/azure-monitor/reference/tables/oepelasticsearch) | | +| [OEWExperimentAssignmentSummary](/azure/azure-monitor/reference/tables/oewexperimentassignmentsummary) | | +| [OEWExperimentScorecardMetricPairs](/azure/azure-monitor/reference/tables/oewexperimentscorecardmetricpairs) | | +| [OEWExperimentScorecards](/azure/azure-monitor/reference/tables/oewexperimentscorecards) | | | [OfficeActivity](/azure/azure-monitor/reference/tables/officeactivity) | | +| [OktaSystemLogs](/azure/azure-monitor/reference/tables/oktasystemlogs) | | +| [OLPSupplyChainEntityOperations](/azure/azure-monitor/reference/tables/olpsupplychainentityoperations) | | +| [OLPSupplyChainEvents](/azure/azure-monitor/reference/tables/olpsupplychainevents) | | +| [OTelEvents](/azure/azure-monitor/reference/tables/otelevents) | | +| [OTelLogs](/azure/azure-monitor/reference/tables/otellogs) | | +| [OTelResources](/azure/azure-monitor/reference/tables/otelresources) | | +| [OTelSpans](/azure/azure-monitor/reference/tables/otelspans) | | | [Perf](/azure/azure-monitor/reference/tables/perf) | | +| [PFTitleAuditLogs](/azure/azure-monitor/reference/tables/pftitleauditlogs) | | +| [PGSQLAutovacuumStats](/azure/azure-monitor/reference/tables/pgsqlautovacuumstats) | | +| [PGSQLDbTransactionsStats](/azure/azure-monitor/reference/tables/pgsqldbtransactionsstats) | | +| [PGSQLPgStatActivitySessions](/azure/azure-monitor/reference/tables/pgsqlpgstatactivitysessions) | | +| [PGSQLQueryStoreRuntime](/azure/azure-monitor/reference/tables/pgsqlquerystoreruntime) | | +| [PGSQLQueryStoreWaits](/azure/azure-monitor/reference/tables/pgsqlquerystorewaits) | | +| [PGSQLServerLogs](/azure/azure-monitor/reference/tables/pgsqlserverlogs) | | +| [PipelineTestVehicles](/azure/azure-monitor/reference/tables/pipelinetestvehicles) | | +| [PipelineTestVehiclesInternalUseOnly](/azure/azure-monitor/reference/tables/pipelinetestvehiclesinternaluseonly) | | +| [PlatformTelemetryMetricsLaTable](/azure/azure-monitor/reference/tables/platformtelemetrymetricslatable) | | | [PowerAppsActivity](/azure/azure-monitor/reference/tables/powerappsactivity) | | | [PowerAutomateActivity](/azure/azure-monitor/reference/tables/powerautomateactivity) | | | [PowerBIActivity](/azure/azure-monitor/reference/tables/powerbiactivity) | | +| [PowerBIDatasetsTenant](/azure/azure-monitor/reference/tables/powerbidatasetstenant) | | | [PowerBIDatasetsWorkspace](/azure/azure-monitor/reference/tables/powerbidatasetsworkspace) | | | [PowerPlatformAdminActivity](/azure/azure-monitor/reference/tables/powerplatformadminactivity) | | | [PowerPlatformConnectorActivity](/azure/azure-monitor/reference/tables/powerplatformconnectoractivity) | | | [PowerPlatformDlpActivity](/azure/azure-monitor/reference/tables/powerplatformdlpactivity) | | -| ProcessInvestigator | | +| [ProcessInvestigator](/azure/azure-monitor/reference/tables/processinvestigator) | | | [ProjectActivity](/azure/azure-monitor/reference/tables/projectactivity) | | | [ProtectionStatus](/azure/azure-monitor/reference/tables/protectionstatus) | | +| [PurviewDataSensitivityLogs](/azure/azure-monitor/reference/tables/purviewdatasensitivitylogs) | | | [PurviewScanStatusLogs](/azure/azure-monitor/reference/tables/purviewscanstatuslogs) | | -| RomeDetectionEvent | | +| [PurviewSecurityLogs](/azure/azure-monitor/reference/tables/purviewsecuritylogs) | | +| [REDConnectionEvents](/azure/azure-monitor/reference/tables/redconnectionevents) | | +| [RemoteNetworkHealthLogs](/azure/azure-monitor/reference/tables/remotenetworkhealthlogs) | | +| [ResourceManagementPublicAccessLogs](/azure/azure-monitor/reference/tables/resourcemanagementpublicaccesslogs) | | +| [RetinaNetworkFlowLogs](/azure/azure-monitor/reference/tables/retinanetworkflowlogs) | | +| [RomeDetectionEvent](/azure/azure-monitor/reference/tables/romedetectionevent) | | | [SCCMAssessmentRecommendation](/azure/azure-monitor/reference/tables/sccmassessmentrecommendation) | | +| [SCGPoolExecutionLog](/azure/azure-monitor/reference/tables/scgpoolexecutionlog) | | +| [SCGPoolRequestLog](/azure/azure-monitor/reference/tables/scgpoolrequestlog) | | | [SCOMAssessmentRecommendation](/azure/azure-monitor/reference/tables/scomassessmentrecommendation) | | | [SecureScoreControls](/azure/azure-monitor/reference/tables/securescorecontrols) | | | [SecureScores](/azure/azure-monitor/reference/tables/securescores) | | | [SecurityAlert](/azure/azure-monitor/reference/tables/securityalert) | | +| [SecurityAttackPathData](/azure/azure-monitor/reference/tables/securityattackpathdata) | | | [SecurityBaseline](/azure/azure-monitor/reference/tables/securitybaseline) | | | [SecurityBaselineSummary](/azure/azure-monitor/reference/tables/securitybaselinesummary) | | | [SecurityDetection](/azure/azure-monitor/reference/tables/securitydetection) | | -| [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent) | Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [SecurityIncident](/azure/azure-monitor/reference/tables/securityincident) | | | [SecurityIoTRawEvent](/azure/azure-monitor/reference/tables/securityiotrawevent) | | | [SecurityNestedRecommendation](/azure/azure-monitor/reference/tables/securitynestedrecommendation) | | | [SecurityRecommendation](/azure/azure-monitor/reference/tables/securityrecommendation) | | | [SecurityRegulatoryCompliance](/azure/azure-monitor/reference/tables/securityregulatorycompliance) | | +| [SentinelAudit](/azure/azure-monitor/reference/tables/sentinelaudit) | | | [SentinelHealth](/azure/azure-monitor/reference/tables/sentinelhealth) | | +| [ServiceMap](/azure/azure-monitor/reference/tables/servicemap) | | | [SfBAssessmentRecommendation](/azure/azure-monitor/reference/tables/sfbassessmentrecommendation) | | | [SfBOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/sfbonlineassessmentrecommendation) | | | [SharePointOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/sharepointonlineassessmentrecommendation) | | @@ -325,15 +639,24 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [SqlVulnerabilityAssessmentResult](/azure/azure-monitor/reference/tables/sqlvulnerabilityassessmentresult) | | | [SqlVulnerabilityAssessmentScanStatus](/azure/azure-monitor/reference/tables/sqlvulnerabilityassessmentscanstatus) | | | [StorageBlobLogs](/azure/azure-monitor/reference/tables/storagebloblogs) | | +| [StorageCacheOperationEvents](/azure/azure-monitor/reference/tables/storagecacheoperationevents) | | +| [StorageCacheUpgradeEvents](/azure/azure-monitor/reference/tables/storagecacheupgradeevents) | | +| [StorageCacheWarningEvents](/azure/azure-monitor/reference/tables/storagecachewarningevents) | | | [StorageFileLogs](/azure/azure-monitor/reference/tables/storagefilelogs) | | -| StorageInsightsAccountPropertiesDaily | | -| StorageInsightsDailyMetrics | | -| StorageInsightsHourlyMetrics | | -| StorageInsightsMonthlyMetrics | | -| StorageInsightsWeeklyMetrics | | +| [StorageInsightsAccountPropertiesDaily](/azure/azure-monitor/reference/tables/storageinsightsaccountpropertiesdaily) | | +| [StorageInsightsDailyMetrics](/azure/azure-monitor/reference/tables/storageinsightsdailymetrics) | | +| [StorageInsightsHourlyMetrics](/azure/azure-monitor/reference/tables/storageinsightshourlymetrics) | | +| [StorageInsightsMonthlyMetrics](/azure/azure-monitor/reference/tables/storageinsightsmonthlymetrics) | | +| [StorageInsightsWeeklyMetrics](/azure/azure-monitor/reference/tables/storageinsightsweeklymetrics) | | +| [StorageMalwareScanningResults](/azure/azure-monitor/reference/tables/storagemalwarescanningresults) | | +| [StorageMoverCopyLogsFailed](/azure/azure-monitor/reference/tables/storagemovercopylogsfailed) | | +| [StorageMoverCopyLogsTransferred](/azure/azure-monitor/reference/tables/storagemovercopylogstransferred) | | +| [StorageMoverJobRunLogs](/azure/azure-monitor/reference/tables/storagemoverjobrunlogs) | | | [StorageQueueLogs](/azure/azure-monitor/reference/tables/storagequeuelogs) | | | [StorageTableLogs](/azure/azure-monitor/reference/tables/storagetablelogs) | | | [SucceededIngestion](/azure/azure-monitor/reference/tables/succeededingestion) | | +| [SVMPoolExecutionLog](/azure/azure-monitor/reference/tables/svmpoolexecutionlog) | | +| [SVMPoolRequestLog](/azure/azure-monitor/reference/tables/svmpoolrequestlog) | | | [SynapseBigDataPoolApplicationsEnded](/azure/azure-monitor/reference/tables/synapsebigdatapoolapplicationsended) | | | [SynapseBuiltinSqlPoolRequestsEnded](/azure/azure-monitor/reference/tables/synapsebuiltinsqlpoolrequestsended) | | | [SynapseDXFailedIngestion](/azure/azure-monitor/reference/tables/synapsedxfailedingestion) | | @@ -342,14 +665,21 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [SynapseIntegrationActivityRuns](/azure/azure-monitor/reference/tables/synapseintegrationactivityruns) | | | [SynapseIntegrationPipelineRuns](/azure/azure-monitor/reference/tables/synapseintegrationpipelineruns) | | | [SynapseIntegrationTriggerRuns](/azure/azure-monitor/reference/tables/synapseintegrationtriggerruns) | | +| [SynapseLinkEvent](/azure/azure-monitor/reference/tables/synapselinkevent) | | | [SynapseRbacOperations](/azure/azure-monitor/reference/tables/synapserbacoperations) | | +| [SynapseScopePoolScopeJobsEnded](/azure/azure-monitor/reference/tables/synapsescopepoolscopejobsended) | | +| [SynapseScopePoolScopeJobsStateChange](/azure/azure-monitor/reference/tables/synapsescopepoolscopejobsstatechange) | | | [SynapseSqlPoolDmsWorkers](/azure/azure-monitor/reference/tables/synapsesqlpooldmsworkers) | | | [SynapseSqlPoolExecRequests](/azure/azure-monitor/reference/tables/synapsesqlpoolexecrequests) | | | [SynapseSqlPoolRequestSteps](/azure/azure-monitor/reference/tables/synapsesqlpoolrequeststeps) | | | [SynapseSqlPoolSqlRequests](/azure/azure-monitor/reference/tables/synapsesqlpoolsqlrequests) | | | [SynapseSqlPoolWaits](/azure/azure-monitor/reference/tables/synapsesqlpoolwaits) | | -| [Syslog](/azure/azure-monitor/reference/tables/syslog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [Syslog](/azure/azure-monitor/reference/tables/syslog) | Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [ThreatIntelIndicators](/azure/azure-monitor/reference/tables/threatintelindicators) | | | [ThreatIntelligenceIndicator](/azure/azure-monitor/reference/tables/threatintelligenceindicator) | | +| [ThreatIntelObjects](/azure/azure-monitor/reference/tables/threatintelobjects) | | +| [TOUserAudits](/azure/azure-monitor/reference/tables/touseraudits) | | +| [TOUserDiagnostics](/azure/azure-monitor/reference/tables/touserdiagnostics) | | | [TSIIngress](/azure/azure-monitor/reference/tables/tsiingress) | | | [UCClient](/azure/azure-monitor/reference/tables/ucclient) | | | [UCClientReadinessStatus](/azure/azure-monitor/reference/tables/ucclientreadinessstatus) | | @@ -359,11 +689,14 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [UCDOStatus](/azure/azure-monitor/reference/tables/ucdostatus) | | | [UCServiceUpdateStatus](/azure/azure-monitor/reference/tables/ucserviceupdatestatus) | | | [UCUpdateAlert](/azure/azure-monitor/reference/tables/ucupdatealert) | | -| [Update](/azure/azure-monitor/reference/tables/update) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [Update](/azure/azure-monitor/reference/tables/update) | Partial support - some of the data is ingested through internal services that aren't supported. | | [UpdateRunProgress](/azure/azure-monitor/reference/tables/updaterunprogress) | | | [UpdateSummary](/azure/azure-monitor/reference/tables/updatesummary) | | | [UrlClickEvents](/azure/azure-monitor/reference/tables/urlclickevents) | | -| [W3CIISLog](/azure/azure-monitor/reference/tables/w3ciislog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [VCoreMongoRequests](/azure/azure-monitor/reference/tables/vcoremongorequests) | | +| [VIAudit](/azure/azure-monitor/reference/tables/viaudit) | | +| [VIIndexing](/azure/azure-monitor/reference/tables/viindexing) | | +| [W3CIISLog](/azure/azure-monitor/reference/tables/w3ciislog) | Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [WaaSDeploymentStatus](/azure/azure-monitor/reference/tables/waasdeploymentstatus) | | | [WaaSInsiderStatus](/azure/azure-monitor/reference/tables/waasinsiderstatus) | | | [WaaSUpdateStatus](/azure/azure-monitor/reference/tables/waasupdatestatus) | | @@ -371,11 +704,12 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [WebPubSubConnectivity](/azure/azure-monitor/reference/tables/webpubsubconnectivity) | | | [WebPubSubHttpRequest](/azure/azure-monitor/reference/tables/webpubsubhttprequest) | | | [WebPubSubMessaging](/azure/azure-monitor/reference/tables/webpubsubmessaging) | | +| [Windows365AuditLogs](/azure/azure-monitor/reference/tables/windows365auditlogs) | | | [WindowsClientAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsclientassessmentrecommendation) | | | [WindowsEvent](/azure/azure-monitor/reference/tables/windowsevent) | | | [WindowsFirewall](/azure/azure-monitor/reference/tables/windowsfirewall) | | | [WindowsServerAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsserverassessmentrecommendation) | | -| [WireData](/azure/azure-monitor/reference/tables/wiredata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [WireData](/azure/azure-monitor/reference/tables/wiredata) | Partial support - some of the data is ingested through internal services that aren't supported. | | [WorkloadDiagnosticLogs](/azure/azure-monitor/reference/tables/workloaddiagnosticlogs) | | | [WUDOAggregatedStatus](/azure/azure-monitor/reference/tables/wudoaggregatedstatus) | | | [WUDOStatus](/azure/azure-monitor/reference/tables/wudostatus) | | @@ -387,4 +721,3 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [WVDFeeds](/azure/azure-monitor/reference/tables/wvdfeeds) | | | [WVDHostRegistrations](/azure/azure-monitor/reference/tables/wvdhostregistrations) | | | [WVDManagement](/azure/azure-monitor/reference/tables/wvdmanagement) | | -