From 4f4c5ed13b5544f2f4d5fae386a4f56558511c36 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:32:54 -0700 Subject: [PATCH 01/20] batch update of the list of supported tables as of October 2025 --- .../logs/tables-feature-support.md | 390 ++++++++++++++++-- 1 file changed, 366 insertions(+), 24 deletions(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 44739bfbf5..a4b829c4a2 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -1,4 +1,4 @@ ---- +--- title: Tables that support ingestion-time transformations in Azure Monitor Logs description: Reference for tables that support ingestion-time transformations in Azure Monitor Logs. ms.topic: reference @@ -13,26 +13,57 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal > We are in a process of adding support for more tables. Please check this article regularly. | Table | Limitations | -|:---|:---| | [AACAudit](/azure/azure-monitor/reference/tables/aacaudit) | | | [AACHttpRequest](/azure/azure-monitor/reference/tables/aachttprequest) | | +| [AADB2CRequestLogs](/azure/azure-monitor/reference/tables/aadb2crequestlogs) | | +| [AADCustomSecurityAttributeAuditLogs](/azure/azure-monitor/reference/tables/aadcustomsecurityattributeauditlogs) | | | [AADDomainServicesAccountLogon](/azure/azure-monitor/reference/tables/aaddomainservicesaccountlogon) | | | [AADDomainServicesAccountManagement](/azure/azure-monitor/reference/tables/aaddomainservicesaccountmanagement) | | | [AADDomainServicesDirectoryServiceAccess](/azure/azure-monitor/reference/tables/aaddomainservicesdirectoryserviceaccess) | | +| [AADDomainServicesDNSAuditsDynamicUpdates](/azure/azure-monitor/reference/tables/aaddomainservicesdnsauditsdynamicupdates) | | +| [AADDomainServicesDNSAuditsGeneral](/azure/azure-monitor/reference/tables/aaddomainservicesdnsauditsgeneral) | | | [AADDomainServicesLogonLogoff](/azure/azure-monitor/reference/tables/aaddomainserviceslogonlogoff) | | | [AADDomainServicesPolicyChange](/azure/azure-monitor/reference/tables/aaddomainservicespolicychange) | | | [AADDomainServicesPrivilegeUse](/azure/azure-monitor/reference/tables/aaddomainservicesprivilegeuse) | | +| [AADFirstPartyToFirstPartySignInLogs](/azure/azure-monitor/reference/tables/aadfirstpartytofirstpartysigninlogs) | | | [AADManagedIdentitySignInLogs](/azure/azure-monitor/reference/tables/aadmanagedidentitysigninlogs) | | | [AADNonInteractiveUserSignInLogs](/azure/azure-monitor/reference/tables/aadnoninteractiveusersigninlogs) | | | [AADProvisioningLogs](/azure/azure-monitor/reference/tables/aadprovisioninglogs) | | +| [AADRiskyServicePrincipals](/azure/azure-monitor/reference/tables/aadriskyserviceprincipals) | | | [AADRiskyUsers](/azure/azure-monitor/reference/tables/aadriskyusers) | | +| [AADServicePrincipalRiskEvents](/azure/azure-monitor/reference/tables/aadserviceprincipalriskevents) | | | [AADServicePrincipalSignInLogs](/azure/azure-monitor/reference/tables/aadserviceprincipalsigninlogs) | | | [AADUserRiskEvents](/azure/azure-monitor/reference/tables/aaduserriskevents) | | -| ABAPAuditLog | | +| [ABAPAuditLog](/azure/azure-monitor/reference/tables/abapauditlog) | | +| [ABAPAuthorizationDetails](/azure/azure-monitor/reference/tables/abapauthorizationdetails) | | +| [ABAPChangeDocsLog](/azure/azure-monitor/reference/tables/abapchangedocslog) | | +| [ABAPUserDetails](/azure/azure-monitor/reference/tables/abapuserdetails) | | | [ABSBotRequests](/azure/azure-monitor/reference/tables/absbotrequests) | | +| [ACICollaborationAudit](/azure/azure-monitor/reference/tables/acicollaborationaudit) | | +| [ACRConnectedClientList](/azure/azure-monitor/reference/tables/acrconnectedclientlist) | | +| [ACREntraAuthenticationAuditLog](/azure/azure-monitor/reference/tables/acrentraauthenticationauditlog) | | +| [ACSAdvancedMessagingOperations](/azure/azure-monitor/reference/tables/acsadvancedmessagingoperations) | | | [ACSAuthIncomingOperations](/azure/azure-monitor/reference/tables/acsauthincomingoperations) | | | [ACSBillingUsage](/azure/azure-monitor/reference/tables/acsbillingusage) | | +| [ACSCallAutomationIncomingOperations](/azure/azure-monitor/reference/tables/acscallautomationincomingoperations) | | +| [ACSCallAutomationMediaSummary](/azure/azure-monitor/reference/tables/acscallautomationmediasummary) | | +| [ACSCallClientMediaStatsTimeSeries](/azure/azure-monitor/reference/tables/acscallclientmediastatstimeseries) | | +| [ACSCallClientOperations](/azure/azure-monitor/reference/tables/acscallclientoperations) | | +| [ACSCallClosedCaptionsSummary](/azure/azure-monitor/reference/tables/acscallclosedcaptionssummary) | | +| [ACSCallDiagnostics](/azure/azure-monitor/reference/tables/acscalldiagnostics) | | +| [ACSCallDiagnosticsUpdates](/azure/azure-monitor/reference/tables/acscalldiagnosticsupdates) | | +| [ACSCallingMetrics](/azure/azure-monitor/reference/tables/acscallingmetrics) | | +| [ACSCallRecordingIncomingOperations](/azure/azure-monitor/reference/tables/acscallrecordingincomingoperations) | | +| [ACSCallRecordingSummary](/azure/azure-monitor/reference/tables/acscallrecordingsummary) | | +| [ACSCallSummary](/azure/azure-monitor/reference/tables/acscallsummary) | | +| [ACSCallSummaryUpdates](/azure/azure-monitor/reference/tables/acscallsummaryupdates) | | +| [ACSCallSurvey](/azure/azure-monitor/reference/tables/acscallsurvey) | | | [ACSChatIncomingOperations](/azure/azure-monitor/reference/tables/acschatincomingoperations) | | +| [ACSEmailSendMailOperational](/azure/azure-monitor/reference/tables/acsemailsendmailoperational) | | +| [ACSEmailStatusUpdateOperational](/azure/azure-monitor/reference/tables/acsemailstatusupdateoperational) | | +| [ACSEmailUserEngagementOperational](/azure/azure-monitor/reference/tables/acsemailuserengagementoperational) | | +| [ACSJobRouterIncomingOperations](/azure/azure-monitor/reference/tables/acsjobrouterincomingoperations) | | +| [ACSRoomsIncomingOperations](/azure/azure-monitor/reference/tables/acsroomsincomingoperations) | | | [ACSSMSIncomingOperations](/azure/azure-monitor/reference/tables/acssmsincomingoperations) | | | [ADAssessmentRecommendation](/azure/azure-monitor/reference/tables/adassessmentrecommendation) | | | [AddonAzureBackupAlerts](/azure/azure-monitor/reference/tables/addonazurebackupalerts) | | @@ -61,6 +92,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ADPRequests](/azure/azure-monitor/reference/tables/adprequests) | | | [ADReplicationResult](/azure/azure-monitor/reference/tables/adreplicationresult) | | | [ADSecurityAssessmentRecommendation](/azure/azure-monitor/reference/tables/adsecurityassessmentrecommendation) | | +| [ADTDataHistoryOperation](/azure/azure-monitor/reference/tables/adtdatahistoryoperation) | | | [ADTDigitalTwinsOperation](/azure/azure-monitor/reference/tables/adtdigitaltwinsoperation) | | | [ADTModelsOperation](/azure/azure-monitor/reference/tables/adtmodelsoperation) | | | [ADTQueryOperation](/azure/azure-monitor/reference/tables/adtqueryoperation) | | @@ -69,15 +101,53 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ADXQuery](/azure/azure-monitor/reference/tables/adxquery) | | | [ADXTableDetails](/azure/azure-monitor/reference/tables/adxtabledetails) | | | [ADXTableUsageStatistics](/azure/azure-monitor/reference/tables/adxtableusagestatistics) | | +| [AegDataPlaneRequests](/azure/azure-monitor/reference/tables/aegdataplanerequests) | | | [AegDeliveryFailureLogs](/azure/azure-monitor/reference/tables/aegdeliveryfailurelogs) | | | [AegPublishFailureLogs](/azure/azure-monitor/reference/tables/aegpublishfailurelogs) | | +| [AEWAssignmentBlobLogs](/azure/azure-monitor/reference/tables/aewassignmentbloblogs) | | +| [AEWAuditLogs](/azure/azure-monitor/reference/tables/aewauditlogs) | | +| [AEWComputePipelinesLogs](/azure/azure-monitor/reference/tables/aewcomputepipelineslogs) | | +| [AEWExperimentAssignmentSummary](/azure/azure-monitor/reference/tables/aewexperimentassignmentsummary) | | +| [AEWExperimentScorecardMetricPairs](/azure/azure-monitor/reference/tables/aewexperimentscorecardmetricpairs) | | +| [AEWExperimentScorecards](/azure/azure-monitor/reference/tables/aewexperimentscorecards) | | +| [AFDAccessLog](/azure/azure-monitor/reference/tables/afdaccesslog) | | +| [AFDClassicCdnAccessLog](/azure/azure-monitor/reference/tables/afdclassiccdnaccesslog) | | +| [AFDHealthProbeLog](/azure/azure-monitor/reference/tables/afdhealthprobelog) | | +| [AFDWebApplicationFirewallLog](/azure/azure-monitor/reference/tables/afdwebapplicationfirewalllog) | | +| [AFSAuditLogs](/azure/azure-monitor/reference/tables/afsauditlogs) | | +| [AGCAccessLogs](/azure/azure-monitor/reference/tables/agcaccesslogs) | | +| [AggregatedSecurityAlert](/azure/azure-monitor/reference/tables/aggregatedsecurityalert) | | +| [AgriFoodApplicationAuditLogs](/azure/azure-monitor/reference/tables/agrifoodapplicationauditlogs) | | +| [AgriFoodFarmManagementLogs](/azure/azure-monitor/reference/tables/agrifoodfarmmanagementlogs) | | +| [AgriFoodFarmOperationLogs](/azure/azure-monitor/reference/tables/agrifoodfarmoperationlogs) | | +| [AgriFoodInsightLogs](/azure/azure-monitor/reference/tables/agrifoodinsightlogs) | | +| [AgriFoodJobProcessedLogs](/azure/azure-monitor/reference/tables/agrifoodjobprocessedlogs) | | +| [AgriFoodModelInferenceLogs](/azure/azure-monitor/reference/tables/agrifoodmodelinferencelogs) | | +| [AgriFoodProviderAuthLogs](/azure/azure-monitor/reference/tables/agrifoodproviderauthlogs) | | +| [AgriFoodSatelliteLogs](/azure/azure-monitor/reference/tables/agrifoodsatellitelogs) | | +| [AgriFoodSensorManagementLogs](/azure/azure-monitor/reference/tables/agrifoodsensormanagementlogs) | | +| [AgriFoodWeatherLogs](/azure/azure-monitor/reference/tables/agrifoodweatherlogs) | | +| [AGSGrafanaLoginEvents](/azure/azure-monitor/reference/tables/agsgrafanaloginevents) | | +| [AGSGrafanaUsageInsightsEvents](/azure/azure-monitor/reference/tables/agsgrafanausageinsightsevents) | | +| [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | | [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | -| [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | | [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | +| [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | +| [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | +| [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | +| [AHDSDeidAuditLogs](/azure/azure-monitor/reference/tables/ahdsdeidauditlogs) | | +| [AHDSDicomAuditLogs](/azure/azure-monitor/reference/tables/ahdsdicomauditlogs) | | +| [AHDSDicomDiagnosticLogs](/azure/azure-monitor/reference/tables/ahdsdicomdiagnosticlogs) | | +| [AHDSMedTechDiagnosticLogs](/azure/azure-monitor/reference/tables/ahdsmedtechdiagnosticlogs) | | | [AirflowDagProcessingLogs](/azure/azure-monitor/reference/tables/airflowdagprocessinglogs) | | +| [AKSAudit](/azure/azure-monitor/reference/tables/aksaudit) | | +| [AKSAuditAdmin](/azure/azure-monitor/reference/tables/aksauditadmin) | | +| [AKSControlPlane](/azure/azure-monitor/reference/tables/akscontrolplane) | | +| [ALBHealthEvent](/azure/azure-monitor/reference/tables/albhealthevent) | | | [Alert](/azure/azure-monitor/reference/tables/alert) | | | [AlertEvidence](/azure/azure-monitor/reference/tables/alertevidence) | | | [AlertInfo](/azure/azure-monitor/reference/tables/alertinfo) | | +| [AMATelemetryEvents](/azure/azure-monitor/reference/tables/amatelemetryevents) | | | [AmlComputeClusterEvent](/azure/azure-monitor/reference/tables/amlcomputeclusterevent) | | | [AmlComputeCpuGpuUtilization](/azure/azure-monitor/reference/tables/amlcomputecpugpuutilization) | | | [AmlComputeInstanceEvent](/azure/azure-monitor/reference/tables/amlcomputeinstanceevent) | | @@ -90,11 +160,26 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AmlInferencingEvent](/azure/azure-monitor/reference/tables/amlinferencingevent) | | | [AmlModelsEvent](/azure/azure-monitor/reference/tables/amlmodelsevent) | | | [AmlOnlineEndpointConsoleLog](/azure/azure-monitor/reference/tables/amlonlineendpointconsolelog) | | +| [AmlOnlineEndpointEventLog](/azure/azure-monitor/reference/tables/amlonlineendpointeventlog) | | +| [AmlOnlineEndpointTrafficLog](/azure/azure-monitor/reference/tables/amlonlineendpointtrafficlog) | | | [AmlPipelineEvent](/azure/azure-monitor/reference/tables/amlpipelineevent) | | +| [AmlRegistryReadEventsLog](/azure/azure-monitor/reference/tables/amlregistryreadeventslog) | | +| [AmlRegistryWriteEventsLog](/azure/azure-monitor/reference/tables/amlregistrywriteeventslog) | | | [AmlRunEvent](/azure/azure-monitor/reference/tables/amlrunevent) | | | [AmlRunStatusChangedEvent](/azure/azure-monitor/reference/tables/amlrunstatuschangedevent) | | +| [AMSKeyDeliveryRequests](/azure/azure-monitor/reference/tables/amskeydeliveryrequests) | | +| [AMSLiveEventOperations](/azure/azure-monitor/reference/tables/amsliveeventoperations) | | +| [AMSMediaAccountHealth](/azure/azure-monitor/reference/tables/amsmediaaccounthealth) | | +| [AMSStreamingEndpointRequests](/azure/azure-monitor/reference/tables/amsstreamingendpointrequests) | | +| [AMWMetricsUsageDetails](/azure/azure-monitor/reference/tables/amwmetricsusagedetails) | | +| [ANFFileAccess](/azure/azure-monitor/reference/tables/anffileaccess) | | | [Anomalies](/azure/azure-monitor/reference/tables/anomalies) | | +| [AOIDatabaseQuery](/azure/azure-monitor/reference/tables/aoidatabasequery) | | +| [AOIDigestion](/azure/azure-monitor/reference/tables/aoidigestion) | | +| [AOIStorage](/azure/azure-monitor/reference/tables/aoistorage) | | +| [ApiManagementGatewayLlmLog](/azure/azure-monitor/reference/tables/apimanagementgatewayllmlog) | | | [ApiManagementGatewayLogs](/azure/azure-monitor/reference/tables/apimanagementgatewaylogs) | | +| [APIMDevPortalAuditDiagnosticLog](/azure/azure-monitor/reference/tables/apimdevportalauditdiagnosticlog) | | | [AppAvailabilityResults](/azure/azure-monitor/reference/tables/appavailabilityresults) | | | [AppBrowserTimings](/azure/azure-monitor/reference/tables/appbrowsertimings) | | | [AppCenterError](/azure/azure-monitor/reference/tables/appcentererror) | | @@ -111,49 +196,121 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AppServiceAntivirusScanAuditLogs](/azure/azure-monitor/reference/tables/appserviceantivirusscanauditlogs) | | | [AppServiceAppLogs](/azure/azure-monitor/reference/tables/appserviceapplogs) | | | [AppServiceAuditLogs](/azure/azure-monitor/reference/tables/appserviceauditlogs) | | +| [AppServiceAuthenticationLogs](/azure/azure-monitor/reference/tables/appserviceauthenticationlogs) | | | [AppServiceConsoleLogs](/azure/azure-monitor/reference/tables/appserviceconsolelogs) | | | [AppServiceEnvironmentPlatformLogs](/azure/azure-monitor/reference/tables/appserviceenvironmentplatformlogs) | | | [AppServiceFileAuditLogs](/azure/azure-monitor/reference/tables/appservicefileauditlogs) | | | [AppServiceHTTPLogs](/azure/azure-monitor/reference/tables/appservicehttplogs) | | | [AppServiceIPSecAuditLogs](/azure/azure-monitor/reference/tables/appserviceipsecauditlogs) | | | [AppServicePlatformLogs](/azure/azure-monitor/reference/tables/appserviceplatformlogs) | | +| [AppServiceServerlessSecurityPluginData](/azure/azure-monitor/reference/tables/appserviceserverlesssecurityplugindata) | | | [AppSystemEvents](/azure/azure-monitor/reference/tables/appsystemevents) | | | [AppTraces](/azure/azure-monitor/reference/tables/apptraces) | | +| [ArcK8sAudit](/azure/azure-monitor/reference/tables/arck8saudit) | | +| [ArcK8sAuditAdmin](/azure/azure-monitor/reference/tables/arck8sauditadmin) | | +| [ArcK8sControlPlane](/azure/azure-monitor/reference/tables/arck8scontrolplane) | | +| [ASCAuditLogs](/azure/azure-monitor/reference/tables/ascauditlogs) | | +| [ASCDeviceEvents](/azure/azure-monitor/reference/tables/ascdeviceevents) | | | [ASimAuditEventLogs](/azure/azure-monitor/reference/tables/asimauditeventlogs) | | | [ASimAuthenticationEventLogs](/azure/azure-monitor/reference/tables/asimauthenticationeventlogs) | | | [ASimDhcpEventLogs](/azure/azure-monitor/reference/tables/asimdhcpeventlogs) | | | [ASimDnsActivityLogs](/azure/azure-monitor/reference/tables/asimdnsactivitylogs) | | -| ASimDnsAuditLogs | | | [ASimFileEventLogs](/azure/azure-monitor/reference/tables/asimfileeventlogs) | | | [ASimNetworkSessionLogs](/azure/azure-monitor/reference/tables/asimnetworksessionlogs) | | | [ASimProcessEventLogs](/azure/azure-monitor/reference/tables/asimprocesseventlogs) | | | [ASimRegistryEventLogs](/azure/azure-monitor/reference/tables/asimregistryeventlogs) | | | [ASimUserManagementActivityLogs](/azure/azure-monitor/reference/tables/asimusermanagementactivitylogs) | | | [ASimWebSessionLogs](/azure/azure-monitor/reference/tables/asimwebsessionlogs) | | +| [ASRJobs](/azure/azure-monitor/reference/tables/asrjobs) | | +| [ASRReplicatedItems](/azure/azure-monitor/reference/tables/asrreplicateditems) | | +| [ASRv2HealthEvents](/azure/azure-monitor/reference/tables/asrv2healthevents) | | +| [ASRv2JobEvents](/azure/azure-monitor/reference/tables/asrv2jobevents) | | +| [ASRv2ProtectedItems](/azure/azure-monitor/reference/tables/asrv2protecteditems) | | +| [ASRv2ReplicationExtensions](/azure/azure-monitor/reference/tables/asrv2replicationextensions) | | +| [ASRv2ReplicationPolicies](/azure/azure-monitor/reference/tables/asrv2replicationpolicies) | | +| [ASRv2ReplicationVaults](/azure/azure-monitor/reference/tables/asrv2replicationvaults) | | +| [ATCExpressRouteCircuitIpfix](/azure/azure-monitor/reference/tables/atcexpressroutecircuitipfix) | | +| [ATCMicrosoftPeeringMetadata](/azure/azure-monitor/reference/tables/atcmicrosoftpeeringmetadata) | | +| [ATCPrivatePeeringMetadata](/azure/azure-monitor/reference/tables/atcprivatepeeringmetadata) | | | [AuditLogs](/azure/azure-monitor/reference/tables/auditlogs) | | | [AutoscaleEvaluationsLog](/azure/azure-monitor/reference/tables/autoscaleevaluationslog) | | | [AutoscaleScaleActionsLog](/azure/azure-monitor/reference/tables/autoscalescaleactionslog) | | +| [AVNMConnectivityConfigurationChange](/azure/azure-monitor/reference/tables/avnmconnectivityconfigurationchange) | | +| [AVNMIPAMPoolAllocationChange](/azure/azure-monitor/reference/tables/avnmipampoolallocationchange) | | +| [AVNMNetworkGroupMembershipChange](/azure/azure-monitor/reference/tables/avnmnetworkgroupmembershipchange) | | +| [AVNMRuleCollectionChange](/azure/azure-monitor/reference/tables/avnmrulecollectionchange) | | +| [AVSEsxiFirewallSyslog](/azure/azure-monitor/reference/tables/avsesxifirewallsyslog) | | +| [AVSEsxiSyslog](/azure/azure-monitor/reference/tables/avsesxisyslog) | | +| [AVSNsxEdgeSyslog](/azure/azure-monitor/reference/tables/avsnsxedgesyslog) | | +| [AVSNsxManagerSyslog](/azure/azure-monitor/reference/tables/avsnsxmanagersyslog) | | +| [AVSSyslog](/azure/azure-monitor/reference/tables/avssyslog) | | +| [AVSVcSyslog](/azure/azure-monitor/reference/tables/avsvcsyslog) | | | [AWSCloudTrail](/azure/azure-monitor/reference/tables/awscloudtrail) | | +| [AWSCloudTrailCCP](/azure/azure-monitor/reference/tables/awscloudtrailccp) | | | [AWSCloudWatch](/azure/azure-monitor/reference/tables/awscloudwatch) | | +| [AWSCloudWatchCCP](/azure/azure-monitor/reference/tables/awscloudwatchccp) | | | [AWSGuardDuty](/azure/azure-monitor/reference/tables/awsguardduty) | | +| [AWSGuardDutyCCP](/azure/azure-monitor/reference/tables/awsguarddutyccp) | | +| [AWSNetworkFirewallAlert](/azure/azure-monitor/reference/tables/awsnetworkfirewallalert) | | +| [AWSNetworkFirewallFlow](/azure/azure-monitor/reference/tables/awsnetworkfirewallflow) | | +| [AWSNetworkFirewallTls](/azure/azure-monitor/reference/tables/awsnetworkfirewalltls) | | +| [AWSRoute53Resolver](/azure/azure-monitor/reference/tables/awsroute53resolver) | | +| [AWSS3ServerAccess](/azure/azure-monitor/reference/tables/awss3serveraccess) | | +| [AWSSecurityHubFindings](/azure/azure-monitor/reference/tables/awssecurityhubfindings) | | | [AWSVPCFlow](/azure/azure-monitor/reference/tables/awsvpcflow) | | +| [AWSVPCFlowLogsCCP](/azure/azure-monitor/reference/tables/awsvpcflowlogsccp) | | +| [AWSWAF](/azure/azure-monitor/reference/tables/awswaf) | | +| [AZFWApplicationRule](/azure/azure-monitor/reference/tables/azfwapplicationrule) | | | [AZFWApplicationRule](/azure/azure-monitor/reference/tables/azfwapplicationrule) | | | [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | +| [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | | [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | +| [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | +| [AZFWFatFlow](/azure/azure-monitor/reference/tables/azfwfatflow) | | | [AZFWFatFlow](/azure/azure-monitor/reference/tables/azfwfatflow) | | | [AZFWFlowTrace](/azure/azure-monitor/reference/tables/azfwflowtrace) | | +| [AZFWFlowTrace](/azure/azure-monitor/reference/tables/azfwflowtrace) | | +| [AZFWIdpsSignature](/azure/azure-monitor/reference/tables/azfwidpssignature) | | | [AZFWIdpsSignature](/azure/azure-monitor/reference/tables/azfwidpssignature) | | | [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | +| [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | | [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | +| [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | +| [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | +| [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | +| [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | +| [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | +| [AZKVPolicyEvaluationDetailsLogs](/azure/azure-monitor/reference/tables/azkvpolicyevaluationdetailslogs) | | +| [AZMSApplicationMetricLogs](/azure/azure-monitor/reference/tables/azmsapplicationmetriclogs) | | +| [AZMSArchiveLogs](/azure/azure-monitor/reference/tables/azmsarchivelogs) | | +| [AZMSAutoscaleLogs](/azure/azure-monitor/reference/tables/azmsautoscalelogs) | | +| [AZMSCustomerManagedKeyUserLogs](/azure/azure-monitor/reference/tables/azmscustomermanagedkeyuserlogs) | | +| [AZMSDiagnosticErrorLogs](/azure/azure-monitor/reference/tables/azmsdiagnosticerrorlogs) | | +| [AZMSHybridConnectionsEvents](/azure/azure-monitor/reference/tables/azmshybridconnectionsevents) | | +| [AZMSKafkaCoordinatorLogs](/azure/azure-monitor/reference/tables/azmskafkacoordinatorlogs) | | +| [AZMSKafkaUserErrorLogs](/azure/azure-monitor/reference/tables/azmskafkausererrorlogs) | | +| [AZMSOperationalLogs](/azure/azure-monitor/reference/tables/azmsoperationallogs) | | +| [AZMSRunTimeAuditLogs](/azure/azure-monitor/reference/tables/azmsruntimeauditlogs) | | +| [AZMSVnetConnectionEvents](/azure/azure-monitor/reference/tables/azmsvnetconnectionevents) | | | [AzureAssessmentRecommendation](/azure/azure-monitor/reference/tables/azureassessmentrecommendation) | | +| [AzureAttestationDiagnostics](/azure/azure-monitor/reference/tables/azureattestationdiagnostics) | | +| [AzureBackupOperations](/azure/azure-monitor/reference/tables/azurebackupoperations) | | | [AzureDevOpsAuditing](/azure/azure-monitor/reference/tables/azuredevopsauditing) | | +| [AzureLoadTestingOperation](/azure/azure-monitor/reference/tables/azureloadtestingoperation) | | +| [AzureLogAnalyticsIngestionDiagnosticLogs](/azure/azure-monitor/reference/tables/azureloganalyticsingestiondiagnosticlogs) | | | [BehaviorAnalytics](/azure/azure-monitor/reference/tables/behavioranalytics) | | +| [BehaviorEntities](/azure/azure-monitor/reference/tables/behaviorentities) | | +| [BehaviorInfo](/azure/azure-monitor/reference/tables/behaviorinfo) | | | [BlockchainApplicationLog](/azure/azure-monitor/reference/tables/blockchainapplicationlog) | | | [BlockchainProxyLog](/azure/azure-monitor/reference/tables/blockchainproxylog) | | +| [CampaignInfo](/azure/azure-monitor/reference/tables/campaigninfo) | | +| [CassandraAudit](/azure/azure-monitor/reference/tables/cassandraaudit) | | +| [CassandraLogs](/azure/azure-monitor/reference/tables/cassandralogs) | | +| [CCFApplicationLogs](/azure/azure-monitor/reference/tables/ccfapplicationlogs) | | | [CDBCassandraRequests](/azure/azure-monitor/reference/tables/cdbcassandrarequests) | | | [CDBControlPlaneRequests](/azure/azure-monitor/reference/tables/cdbcontrolplanerequests) | | | [CDBDataPlaneRequests](/azure/azure-monitor/reference/tables/cdbdataplanerequests) | | @@ -162,12 +319,23 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [CDBPartitionKeyRUConsumption](/azure/azure-monitor/reference/tables/cdbpartitionkeyruconsumption) | | | [CDBPartitionKeyStatistics](/azure/azure-monitor/reference/tables/cdbpartitionkeystatistics) | | | [CDBQueryRuntimeStatistics](/azure/azure-monitor/reference/tables/cdbqueryruntimestatistics) | | +| [CDBTableApiRequests](/azure/azure-monitor/reference/tables/cdbtableapirequests) | | +| [ChaosStudioExperimentEventLogs](/azure/azure-monitor/reference/tables/chaosstudioexperimenteventlogs) | | +| [CIEventsAudit](/azure/azure-monitor/reference/tables/cieventsaudit) | | +| [CIEventsOperational](/azure/azure-monitor/reference/tables/cieventsoperational) | | | [CloudAppEvents](/azure/azure-monitor/reference/tables/cloudappevents) | | +| [CloudHsmServiceOperationAuditLogs](/azure/azure-monitor/reference/tables/cloudhsmserviceoperationauditlogs) | | | [CommonSecurityLog](/azure/azure-monitor/reference/tables/commonsecuritylog) | | +| [CommunicationComplianceActivity](/azure/azure-monitor/reference/tables/communicationcomplianceactivity) | | | [ComputerGroup](/azure/azure-monitor/reference/tables/computergroup) | | +| [ConfidentialWatchlist](/azure/azure-monitor/reference/tables/confidentialwatchlist) | | | [ConfigurationChange](/azure/azure-monitor/reference/tables/configurationchange) | | -| [ConfigurationData](/azure/azure-monitor/reference/tables/configurationdata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [ConfigurationData](/azure/azure-monitor/reference/tables/configurationdata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [ContainerAppConsoleLogs](/azure/azure-monitor/reference/tables/containerappconsolelogs) | | +| [ContainerAppSystemLogs](/azure/azure-monitor/reference/tables/containerappsystemlogs) | | +| [ContainerEvent](/azure/azure-monitor/reference/tables/containerevent) | | | [ContainerImageInventory](/azure/azure-monitor/reference/tables/containerimageinventory) | | +| [ContainerInstanceLog](/azure/azure-monitor/reference/tables/containerinstancelog) | | | [ContainerInventory](/azure/azure-monitor/reference/tables/containerinventory) | | | [ContainerLog](/azure/azure-monitor/reference/tables/containerlog) | | | [ContainerLogV2](/azure/azure-monitor/reference/tables/containerlogv2) | | @@ -176,25 +344,61 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ContainerRegistryRepositoryEvents](/azure/azure-monitor/reference/tables/containerregistryrepositoryevents) | | | [ContainerServiceLog](/azure/azure-monitor/reference/tables/containerservicelog) | | | [CoreAzureBackup](/azure/azure-monitor/reference/tables/coreazurebackup) | | +| [CosmosDBPostgresLogs](/azure/azure-monitor/reference/tables/cosmosdbpostgreslogs) | | +| [CrowdStrikeAlerts](/azure/azure-monitor/reference/tables/crowdstrikealerts) | | +| [CrowdStrikeDetections](/azure/azure-monitor/reference/tables/crowdstrikedetections) | | +| [CrowdStrikeHosts](/azure/azure-monitor/reference/tables/crowdstrikehosts) | | +| [CrowdStrikeIncidents](/azure/azure-monitor/reference/tables/crowdstrikeincidents) | | +| [CrowdStrikeVulnerabilities](/azure/azure-monitor/reference/tables/crowdstrikevulnerabilities) | | +| [CSARequestResponse](/azure/azure-monitor/reference/tables/csarequestresponse) | | | [DatabricksAccounts](/azure/azure-monitor/reference/tables/databricksaccounts) | | +| [DatabricksApps](/azure/azure-monitor/reference/tables/databricksapps) | | +| [DatabricksBrickStoreHttpGateway](/azure/azure-monitor/reference/tables/databricksbrickstorehttpgateway) | | +| [DatabricksBudgetPolicyCentral](/azure/azure-monitor/reference/tables/databricksbudgetpolicycentral) | | +| [DatabricksCloudStorageMetadata](/azure/azure-monitor/reference/tables/databrickscloudstoragemetadata) | | +| [DatabricksClusterPolicies](/azure/azure-monitor/reference/tables/databricksclusterpolicies) | | | [DatabricksClusters](/azure/azure-monitor/reference/tables/databricksclusters) | | +| [DatabricksDashboards](/azure/azure-monitor/reference/tables/databricksdashboards) | | +| [DatabricksDataMonitoring](/azure/azure-monitor/reference/tables/databricksdatamonitoring) | | +| [DatabricksDataRooms](/azure/azure-monitor/reference/tables/databricksdatarooms) | | | [DatabricksDBFS](/azure/azure-monitor/reference/tables/databricksdbfs) | | | [DatabricksFeatureStore](/azure/azure-monitor/reference/tables/databricksfeaturestore) | | +| [DatabricksFiles](/azure/azure-monitor/reference/tables/databricksfiles) | | +| [DatabricksFilesystem](/azure/azure-monitor/reference/tables/databricksfilesystem) | | | [DatabricksGenie](/azure/azure-monitor/reference/tables/databricksgenie) | | | [DatabricksGlobalInitScripts](/azure/azure-monitor/reference/tables/databricksglobalinitscripts) | | +| [DatabricksGroups](/azure/azure-monitor/reference/tables/databricksgroups) | | +| [DatabricksIngestion](/azure/azure-monitor/reference/tables/databricksingestion) | | | [DatabricksInstancePools](/azure/azure-monitor/reference/tables/databricksinstancepools) | | | [DatabricksJobs](/azure/azure-monitor/reference/tables/databricksjobs) | | +| [DatabricksLakeviewConfig](/azure/azure-monitor/reference/tables/databrickslakeviewconfig) | | +| [DatabricksLineageTracking](/azure/azure-monitor/reference/tables/databrickslineagetracking) | | +| [DatabricksMarketplaceConsumer](/azure/azure-monitor/reference/tables/databricksmarketplaceconsumer) | | +| [DatabricksMarketplaceProvider](/azure/azure-monitor/reference/tables/databricksmarketplaceprovider) | | | [DatabricksMLflowAcledArtifact](/azure/azure-monitor/reference/tables/databricksmlflowacledartifact) | | | [DatabricksMLflowExperiment](/azure/azure-monitor/reference/tables/databricksmlflowexperiment) | | | [DatabricksNotebook](/azure/azure-monitor/reference/tables/databricksnotebook) | | +| [DatabricksOnlineTables](/azure/azure-monitor/reference/tables/databricksonlinetables) | | +| [DatabricksPredictiveOptimization](/azure/azure-monitor/reference/tables/databrickspredictiveoptimization) | | +| [DatabricksRBAC](/azure/azure-monitor/reference/tables/databricksrbac) | | | [DatabricksRemoteHistoryService](/azure/azure-monitor/reference/tables/databricksremotehistoryservice) | | +| [DatabricksRFA](/azure/azure-monitor/reference/tables/databricksrfa) | | | [DatabricksSecrets](/azure/azure-monitor/reference/tables/databrickssecrets) | | | [DatabricksSQLPermissions](/azure/azure-monitor/reference/tables/databrickssqlpermissions) | | | [DatabricksSSH](/azure/azure-monitor/reference/tables/databricksssh) | | +| [DatabricksVectorSearch](/azure/azure-monitor/reference/tables/databricksvectorsearch) | | +| [DatabricksWebhookNotifications](/azure/azure-monitor/reference/tables/databrickswebhooknotifications) | | | [DatabricksWorkspace](/azure/azure-monitor/reference/tables/databricksworkspace) | | +| [DatabricksWorkspaceFiles](/azure/azure-monitor/reference/tables/databricksworkspacefiles) | | +| [DataTransferOperations](/azure/azure-monitor/reference/tables/datatransferoperations) | | | [DataverseActivity](/azure/azure-monitor/reference/tables/dataverseactivity) | | -| DefenderForSqlAlerts | | -| DefenderForSqlTelemetry | | +| [DCPlanBillingEventLogs](/azure/azure-monitor/reference/tables/dcplanbillingeventlogs) | | +| [DCRLogErrors](/azure/azure-monitor/reference/tables/dcrlogerrors) | | +| [DefenderForSqlAlerts](/azure/azure-monitor/reference/tables/defenderforsqlalerts) | | +| [DefenderForSqlTelemetry](/azure/azure-monitor/reference/tables/defenderforsqltelemetry) | | +| [DevCenterBillingEventLogs](/azure/azure-monitor/reference/tables/devcenterbillingeventlogs) | | +| [DevCenterDiagnosticLogs](/azure/azure-monitor/reference/tables/devcenterdiagnosticlogs) | | +| [DevCenterResourceOperationLogs](/azure/azure-monitor/reference/tables/devcenterresourceoperationlogs) | | | [DeviceEvents](/azure/azure-monitor/reference/tables/deviceevents) | | | [DeviceFileCertificateInfo](/azure/azure-monitor/reference/tables/devicefilecertificateinfo) | | | [DeviceFileEvents](/azure/azure-monitor/reference/tables/devicefileevents) | | @@ -210,24 +414,62 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [DeviceTvmSoftwareInventory](/azure/azure-monitor/reference/tables/devicetvmsoftwareinventory) | | | [DeviceTvmSoftwareVulnerabilities](/azure/azure-monitor/reference/tables/devicetvmsoftwarevulnerabilities) | | | [DeviceTvmSoftwareVulnerabilitiesKB](/azure/azure-monitor/reference/tables/devicetvmsoftwarevulnerabilitieskb) | | +| [DFPPurchaseLogs](/azure/azure-monitor/reference/tables/dfppurchaselogs) | | +| [DnsAuditEvents](/azure/azure-monitor/reference/tables/dnsauditevents) | | | [DnsEvents](/azure/azure-monitor/reference/tables/dnsevents) | | | [DnsInventory](/azure/azure-monitor/reference/tables/dnsinventory) | | -| DummyHydrationFact | | +| [DNSQueryLogs](/azure/azure-monitor/reference/tables/dnsquerylogs) | | +| [DSMDataClassificationLogs](/azure/azure-monitor/reference/tables/dsmdataclassificationlogs) | | +| [DSMDataLabelingLogs](/azure/azure-monitor/reference/tables/dsmdatalabelinglogs) | | +| [DummyHydrationFact](/azure/azure-monitor/reference/tables/dummyhydrationfact) | | | [DynamicEventCollection](/azure/azure-monitor/reference/tables/dynamiceventcollection) | | | [Dynamics365Activity](/azure/azure-monitor/reference/tables/dynamics365activity) | | +| [EGNFailedHttpDataPlaneOperations](/azure/azure-monitor/reference/tables/egnfailedhttpdataplaneoperations) | | +| [EGNFailedMqttConnections](/azure/azure-monitor/reference/tables/egnfailedmqttconnections) | | +| [EGNFailedMqttPublishedMessages](/azure/azure-monitor/reference/tables/egnfailedmqttpublishedmessages) | | +| [EGNFailedMqttSubscriptions](/azure/azure-monitor/reference/tables/egnfailedmqttsubscriptions) | | +| [EGNMqttDisconnections](/azure/azure-monitor/reference/tables/egnmqttdisconnections) | | +| [EGNSuccessfulHttpDataPlaneOperations](/azure/azure-monitor/reference/tables/egnsuccessfulhttpdataplaneoperations) | | +| [EGNSuccessfulMqttConnections](/azure/azure-monitor/reference/tables/egnsuccessfulmqttconnections) | | | [EmailAttachmentInfo](/azure/azure-monitor/reference/tables/emailattachmentinfo) | | | [EmailEvents](/azure/azure-monitor/reference/tables/emailevents) | | | [EmailPostDeliveryEvents](/azure/azure-monitor/reference/tables/emailpostdeliveryevents) | | | [EmailUrlInfo](/azure/azure-monitor/reference/tables/emailurlinfo) | | -| [Event](/azure/azure-monitor/reference/tables/event) | Partial support . Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension  is collected through Azure storage. This path isn't supported. | +| [EnrichedMicrosoft365AuditLogs](/azure/azure-monitor/reference/tables/enrichedmicrosoft365auditlogs) | | +| [Event](/azure/azure-monitor/reference/tables/event) | Partial support . Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension  is collected through Azure storage. This path isn't supported. | | [ExchangeAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeassessmentrecommendation) | | | [ExchangeOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeonlineassessmentrecommendation) | | | [FailedIngestion](/azure/azure-monitor/reference/tables/failedingestion) | | +| [FileMaliciousContentInfo](/azure/azure-monitor/reference/tables/filemaliciouscontentinfo) | | +| [FSPGPGBouncer](/azure/azure-monitor/reference/tables/fspgpgbouncer) | | | [FunctionAppLogs](/azure/azure-monitor/reference/tables/functionapplogs) | | +| [GCPApigee](/azure/azure-monitor/reference/tables/gcpapigee) | | | [GCPAuditLogs](/azure/azure-monitor/reference/tables/gcpauditlogs) | | +| [GCPCDN](/azure/azure-monitor/reference/tables/gcpcdn) | | +| [GCPCloudRun](/azure/azure-monitor/reference/tables/gcpcloudrun) | | +| [GCPCloudSQL](/azure/azure-monitor/reference/tables/gcpcloudsql) | | +| [GCPComputeEngine](/azure/azure-monitor/reference/tables/gcpcomputeengine) | | +| [GCPDNS](/azure/azure-monitor/reference/tables/gcpdns) | | +| [GCPFirewallLogs](/azure/azure-monitor/reference/tables/gcpfirewalllogs) | | +| [GCPIAM](/azure/azure-monitor/reference/tables/gcpiam) | | +| [GCPIDS](/azure/azure-monitor/reference/tables/gcpids) | | +| [GCPLoadBalancer](/azure/azure-monitor/reference/tables/gcploadbalancer) | | +| [GCPMonitoring](/azure/azure-monitor/reference/tables/gcpmonitoring) | | +| [GCPNAT](/azure/azure-monitor/reference/tables/gcpnat) | | +| [GCPNATAudit](/azure/azure-monitor/reference/tables/gcpnataudit) | | +| [GCPResourceManager](/azure/azure-monitor/reference/tables/gcpresourcemanager) | | +| [GCPVPCFlow](/azure/azure-monitor/reference/tables/gcpvpcflow) | | +| [GKEAPIServer](/azure/azure-monitor/reference/tables/gkeapiserver) | | +| [GKEApplication](/azure/azure-monitor/reference/tables/gkeapplication) | | +| [GKEAudit](/azure/azure-monitor/reference/tables/gkeaudit) | | +| [GKEControllerManager](/azure/azure-monitor/reference/tables/gkecontrollermanager) | | +| [GKEHPADecision](/azure/azure-monitor/reference/tables/gkehpadecision) | | +| [GKEScheduler](/azure/azure-monitor/reference/tables/gkescheduler) | | | [GoogleCloudSCC](/azure/azure-monitor/reference/tables/googlecloudscc) | | +| [GoogleWorkspaceReports](/azure/azure-monitor/reference/tables/googleworkspacereports) | | | [HDInsightAmbariClusterAlerts](/azure/azure-monitor/reference/tables/hdinsightambariclusteralerts) | | | [HDInsightAmbariSystemMetrics](/azure/azure-monitor/reference/tables/hdinsightambarisystemmetrics) | | +| [HDInsightGatewayAuditLogs](/azure/azure-monitor/reference/tables/hdinsightgatewayauditlogs) | | | [HDInsightHadoopAndYarnLogs](/azure/azure-monitor/reference/tables/hdinsighthadoopandyarnlogs) | | | [HDInsightHadoopAndYarnMetrics](/azure/azure-monitor/reference/tables/hdinsighthadoopandyarnmetrics) | | | [HDInsightHBaseLogs](/azure/azure-monitor/reference/tables/hdinsighthbaselogs) | | @@ -243,19 +485,24 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [HDInsightSparkBlockManagerEvents](/azure/azure-monitor/reference/tables/hdinsightsparkblockmanagerevents) | | | [HDInsightSparkEnvironmentEvents](/azure/azure-monitor/reference/tables/hdinsightsparkenvironmentevents) | | | [HDInsightSparkExecutorEvents](/azure/azure-monitor/reference/tables/hdinsightsparkexecutorevents) | | +| [HDInsightSparkExtraEvents](/azure/azure-monitor/reference/tables/hdinsightsparkextraevents) | | | [HDInsightSparkJobEvents](/azure/azure-monitor/reference/tables/hdinsightsparkjobevents) | | | [HDInsightSparkLogs](/azure/azure-monitor/reference/tables/hdinsightsparklogs) | | | [HDInsightSparkSQLExecutionEvents](/azure/azure-monitor/reference/tables/hdinsightsparksqlexecutionevents) | | | [HDInsightSparkStageEvents](/azure/azure-monitor/reference/tables/hdinsightsparkstageevents) | | | [HDInsightSparkStageTaskAccumulables](/azure/azure-monitor/reference/tables/hdinsightsparkstagetaskaccumulables) | | | [HDInsightSparkTaskEvents](/azure/azure-monitor/reference/tables/hdinsightsparktaskevents) | | +| [HDInsightStormLogs](/azure/azure-monitor/reference/tables/hdinsightstormlogs) | | +| [HDInsightStormMetrics](/azure/azure-monitor/reference/tables/hdinsightstormmetrics) | | +| [HDInsightStormTopologyMetrics](/azure/azure-monitor/reference/tables/hdinsightstormtopologymetrics) | | | [HealthStateChangeEvent](/azure/azure-monitor/reference/tables/healthstatechangeevent) | | | [HuntingBookmark](/azure/azure-monitor/reference/tables/huntingbookmark) | | | [IdentityDirectoryEvents](/azure/azure-monitor/reference/tables/identitydirectoryevents) | | | [IdentityInfo](/azure/azure-monitor/reference/tables/identityinfo) | | | [IdentityLogonEvents](/azure/azure-monitor/reference/tables/identitylogonevents) | | | [IdentityQueryEvents](/azure/azure-monitor/reference/tables/identityqueryevents) | | -| [InsightsMetrics](/azure/azure-monitor/reference/tables/insightsmetrics) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [IlumioInsights](/azure/azure-monitor/reference/tables/ilumioinsights) | | +| [InsightsMetrics](/azure/azure-monitor/reference/tables/insightsmetrics) | Partial support – some of the data is ingested through internal services that aren't supported. | | [IntuneAuditLogs](/azure/azure-monitor/reference/tables/intuneauditlogs) | | | [IntuneDevices](/azure/azure-monitor/reference/tables/intunedevices) | | | [IntuneOperationalLogs](/azure/azure-monitor/reference/tables/intuneoperationallogs) | | @@ -266,52 +513,128 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [KubePodInventory](/azure/azure-monitor/reference/tables/kubepodinventory) | | | [KubePVInventory](/azure/azure-monitor/reference/tables/kubepvinventory) | | | [KubeServices](/azure/azure-monitor/reference/tables/kubeservices) | | +| [LAJobLogs](/azure/azure-monitor/reference/tables/lajoblogs) | | | [LAQueryLogs](/azure/azure-monitor/reference/tables/laquerylogs) | | +| [LASummaryLogs](/azure/azure-monitor/reference/tables/lasummarylogs) | | +| [LIATrackingEvents](/azure/azure-monitor/reference/tables/liatrackingevents) | | | [LinuxAuditLog](/azure/azure-monitor/reference/tables/linuxauditlog) | | +| [LogicAppWorkflowRuntime](/azure/azure-monitor/reference/tables/logicappworkflowruntime) | | | [McasShadowItReporting](/azure/azure-monitor/reference/tables/mcasshadowitreporting) | | | [MCCEventLogs](/azure/azure-monitor/reference/tables/mcceventlogs) | | +| [MCVPAuditLogs](/azure/azure-monitor/reference/tables/mcvpauditlogs) | | +| [MCVPOperationLogs](/azure/azure-monitor/reference/tables/mcvpoperationlogs) | | +| [MDCDetectionDNSEvents](/azure/azure-monitor/reference/tables/mdcdetectiondnsevents) | | +| [MDCDetectionFimEvents](/azure/azure-monitor/reference/tables/mdcdetectionfimevents) | | +| [MDCDetectionGatingValidationEvents](/azure/azure-monitor/reference/tables/mdcdetectiongatingvalidationevents) | | +| [MDCDetectionK8SApiEvents](/azure/azure-monitor/reference/tables/mdcdetectionk8sapievents) | | +| [MDCFileIntegrityMonitoringEvents](/azure/azure-monitor/reference/tables/mdcfileintegritymonitoringevents) | | +| [MDECustomCollectionDeviceFileEvents](/azure/azure-monitor/reference/tables/mdecustomcollectiondevicefileevents) | | +| [MDPResourceLog](/azure/azure-monitor/reference/tables/mdpresourcelog) | | | [MicrosoftAzureBastionAuditLogs](/azure/azure-monitor/reference/tables/microsoftazurebastionauditlogs) | | | [MicrosoftDataShareReceivedSnapshotLog](/azure/azure-monitor/reference/tables/microsoftdatasharereceivedsnapshotlog) | | | [MicrosoftDataShareSentSnapshotLog](/azure/azure-monitor/reference/tables/microsoftdatasharesentsnapshotlog) | | | [MicrosoftGraphActivityLogs](/azure/azure-monitor/reference/tables/microsoftgraphactivitylogs) | | | [MicrosoftHealthcareApisAuditLogs](/azure/azure-monitor/reference/tables/microsofthealthcareapisauditlogs) | | | [MicrosoftPurviewInformationProtection](/azure/azure-monitor/reference/tables/microsoftpurviewinformationprotection) | | +| [MNFDeviceUpdates](/azure/azure-monitor/reference/tables/mnfdeviceupdates) | | +| [MNFSystemSessionHistoryUpdates](/azure/azure-monitor/reference/tables/mnfsystemsessionhistoryupdates) | | +| [MNFSystemStateMessageUpdates](/azure/azure-monitor/reference/tables/mnfsystemstatemessageupdates) | | +| [MPTOperation](/azure/azure-monitor/reference/tables/mptoperation) | | +| [MySqlAuditLogs](/azure/azure-monitor/reference/tables/mysqlauditlogs) | | +| [MySqlErrorLogs](/azure/azure-monitor/reference/tables/mysqlerrorlogs) | | +| [MySqlSlowLogs](/azure/azure-monitor/reference/tables/mysqlslowlogs) | | +| [NCBMBreakGlassAuditLogs](/azure/azure-monitor/reference/tables/ncbmbreakglassauditlogs) | | +| [NCBMSecurityDefenderLogs](/azure/azure-monitor/reference/tables/ncbmsecuritydefenderlogs) | | +| [NCBMSecurityLogs](/azure/azure-monitor/reference/tables/ncbmsecuritylogs) | | +| [NCBMSystemLogs](/azure/azure-monitor/reference/tables/ncbmsystemlogs) | | +| [NCCKubernetesLogs](/azure/azure-monitor/reference/tables/ncckuberneteslogs) | | +| [NCCPlatformOperationsLogs](/azure/azure-monitor/reference/tables/nccplatformoperationslogs) | | +| [NCCVMOrchestrationLogs](/azure/azure-monitor/reference/tables/nccvmorchestrationlogs) | | +| [NCMClusterOperationsLogs](/azure/azure-monitor/reference/tables/ncmclusteroperationslogs) | | +| [NCSStorageAlerts](/azure/azure-monitor/reference/tables/ncsstoragealerts) | | +| [NCSStorageAudits](/azure/azure-monitor/reference/tables/ncsstorageaudits) | | +| [NCSStorageLogs](/azure/azure-monitor/reference/tables/ncsstoragelogs) | | +| [NetworkAccessAlerts](/azure/azure-monitor/reference/tables/networkaccessalerts) | | +| [NetworkAccessConnectionEvents](/azure/azure-monitor/reference/tables/networkaccessconnectionevents) | | | [NetworkAccessTraffic](/azure/azure-monitor/reference/tables/networkaccesstraffic) | | | [NetworkMonitoring](/azure/azure-monitor/reference/tables/networkmonitoring) | | +| [NetworkSessions](/azure/azure-monitor/reference/tables/networksessions) | | +| [NginxUpstreamUpdateLogs](/azure/azure-monitor/reference/tables/nginxupstreamupdatelogs) | | +| [NGXOperationLogs](/azure/azure-monitor/reference/tables/ngxoperationlogs) | | +| [NGXSecurityLogs](/azure/azure-monitor/reference/tables/ngxsecuritylogs) | | +| [NSPAccessLogs](/azure/azure-monitor/reference/tables/nspaccesslogs) | | +| [NTAInsights](/azure/azure-monitor/reference/tables/ntainsights) | | | [NTAIpDetails](/azure/azure-monitor/reference/tables/ntaipdetails) | | | [NTANetAnalytics](/azure/azure-monitor/reference/tables/ntanetanalytics) | | | [NTATopologyDetails](/azure/azure-monitor/reference/tables/ntatopologydetails) | | | [NWConnectionMonitorPathResult](/azure/azure-monitor/reference/tables/nwconnectionmonitorpathresult) | | | [NWConnectionMonitorTestResult](/azure/azure-monitor/reference/tables/nwconnectionmonitortestresult) | | +| [OEPAirFlowTask](/azure/azure-monitor/reference/tables/oepairflowtask) | | +| [OEPAuditLogs](/azure/azure-monitor/reference/tables/oepauditlogs) | | +| [OEPDataplaneLogs](/azure/azure-monitor/reference/tables/oepdataplanelogs) | | +| [OEPElasticOperator](/azure/azure-monitor/reference/tables/oepelasticoperator) | | +| [OEPElasticsearch](/azure/azure-monitor/reference/tables/oepelasticsearch) | | +| [OEWExperimentAssignmentSummary](/azure/azure-monitor/reference/tables/oewexperimentassignmentsummary) | | +| [OEWExperimentScorecardMetricPairs](/azure/azure-monitor/reference/tables/oewexperimentscorecardmetricpairs) | | +| [OEWExperimentScorecards](/azure/azure-monitor/reference/tables/oewexperimentscorecards) | | | [OfficeActivity](/azure/azure-monitor/reference/tables/officeactivity) | | +| [OktaSystemLogs](/azure/azure-monitor/reference/tables/oktasystemlogs) | | +| [OLPSupplyChainEntityOperations](/azure/azure-monitor/reference/tables/olpsupplychainentityoperations) | | +| [OLPSupplyChainEvents](/azure/azure-monitor/reference/tables/olpsupplychainevents) | | +| [OTelEvents](/azure/azure-monitor/reference/tables/otelevents) | | +| [OTelLogs](/azure/azure-monitor/reference/tables/otellogs) | | +| [OTelResources](/azure/azure-monitor/reference/tables/otelresources) | | +| [OTelSpans](/azure/azure-monitor/reference/tables/otelspans) | | | [Perf](/azure/azure-monitor/reference/tables/perf) | | +| [PFTitleAuditLogs](/azure/azure-monitor/reference/tables/pftitleauditlogs) | | +| [PGSQLAutovacuumStats](/azure/azure-monitor/reference/tables/pgsqlautovacuumstats) | | +| [PGSQLDbTransactionsStats](/azure/azure-monitor/reference/tables/pgsqldbtransactionsstats) | | +| [PGSQLPgStatActivitySessions](/azure/azure-monitor/reference/tables/pgsqlpgstatactivitysessions) | | +| [PGSQLQueryStoreRuntime](/azure/azure-monitor/reference/tables/pgsqlquerystoreruntime) | | +| [PGSQLQueryStoreWaits](/azure/azure-monitor/reference/tables/pgsqlquerystorewaits) | | +| [PGSQLServerLogs](/azure/azure-monitor/reference/tables/pgsqlserverlogs) | | +| [PipelineTestVehicles](/azure/azure-monitor/reference/tables/pipelinetestvehicles) | | +| [PipelineTestVehiclesInternalUseOnly](/azure/azure-monitor/reference/tables/pipelinetestvehiclesinternaluseonly) | | +| [PlatformTelemetryMetricsLaTable](/azure/azure-monitor/reference/tables/platformtelemetrymetricslatable) | | | [PowerAppsActivity](/azure/azure-monitor/reference/tables/powerappsactivity) | | | [PowerAutomateActivity](/azure/azure-monitor/reference/tables/powerautomateactivity) | | | [PowerBIActivity](/azure/azure-monitor/reference/tables/powerbiactivity) | | +| [PowerBIDatasetsTenant](/azure/azure-monitor/reference/tables/powerbidatasetstenant) | | | [PowerBIDatasetsWorkspace](/azure/azure-monitor/reference/tables/powerbidatasetsworkspace) | | | [PowerPlatformAdminActivity](/azure/azure-monitor/reference/tables/powerplatformadminactivity) | | | [PowerPlatformConnectorActivity](/azure/azure-monitor/reference/tables/powerplatformconnectoractivity) | | | [PowerPlatformDlpActivity](/azure/azure-monitor/reference/tables/powerplatformdlpactivity) | | -| ProcessInvestigator | | +| [ProcessInvestigator](/azure/azure-monitor/reference/tables/processinvestigator) | | | [ProjectActivity](/azure/azure-monitor/reference/tables/projectactivity) | | | [ProtectionStatus](/azure/azure-monitor/reference/tables/protectionstatus) | | +| [PurviewDataSensitivityLogs](/azure/azure-monitor/reference/tables/purviewdatasensitivitylogs) | | | [PurviewScanStatusLogs](/azure/azure-monitor/reference/tables/purviewscanstatuslogs) | | -| RomeDetectionEvent | | +| [PurviewSecurityLogs](/azure/azure-monitor/reference/tables/purviewsecuritylogs) | | +| [REDConnectionEvents](/azure/azure-monitor/reference/tables/redconnectionevents) | | +| [RemoteNetworkHealthLogs](/azure/azure-monitor/reference/tables/remotenetworkhealthlogs) | | +| [ResourceManagementPublicAccessLogs](/azure/azure-monitor/reference/tables/resourcemanagementpublicaccesslogs) | | +| [RetinaNetworkFlowLogs](/azure/azure-monitor/reference/tables/retinanetworkflowlogs) | | +| [RomeDetectionEvent](/azure/azure-monitor/reference/tables/romedetectionevent) | | | [SCCMAssessmentRecommendation](/azure/azure-monitor/reference/tables/sccmassessmentrecommendation) | | +| [SCGPoolExecutionLog](/azure/azure-monitor/reference/tables/scgpoolexecutionlog) | | +| [SCGPoolRequestLog](/azure/azure-monitor/reference/tables/scgpoolrequestlog) | | | [SCOMAssessmentRecommendation](/azure/azure-monitor/reference/tables/scomassessmentrecommendation) | | | [SecureScoreControls](/azure/azure-monitor/reference/tables/securescorecontrols) | | | [SecureScores](/azure/azure-monitor/reference/tables/securescores) | | | [SecurityAlert](/azure/azure-monitor/reference/tables/securityalert) | | +| [SecurityAttackPathData](/azure/azure-monitor/reference/tables/securityattackpathdata) | | | [SecurityBaseline](/azure/azure-monitor/reference/tables/securitybaseline) | | | [SecurityBaselineSummary](/azure/azure-monitor/reference/tables/securitybaselinesummary) | | | [SecurityDetection](/azure/azure-monitor/reference/tables/securitydetection) | | -| [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [SecurityIncident](/azure/azure-monitor/reference/tables/securityincident) | | | [SecurityIoTRawEvent](/azure/azure-monitor/reference/tables/securityiotrawevent) | | | [SecurityNestedRecommendation](/azure/azure-monitor/reference/tables/securitynestedrecommendation) | | | [SecurityRecommendation](/azure/azure-monitor/reference/tables/securityrecommendation) | | | [SecurityRegulatoryCompliance](/azure/azure-monitor/reference/tables/securityregulatorycompliance) | | +| [SentinelAudit](/azure/azure-monitor/reference/tables/sentinelaudit) | | | [SentinelHealth](/azure/azure-monitor/reference/tables/sentinelhealth) | | +| [ServiceMap](/azure/azure-monitor/reference/tables/servicemap) | | | [SfBAssessmentRecommendation](/azure/azure-monitor/reference/tables/sfbassessmentrecommendation) | | | [SfBOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/sfbonlineassessmentrecommendation) | | | [SharePointOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/sharepointonlineassessmentrecommendation) | | @@ -325,15 +648,24 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [SqlVulnerabilityAssessmentResult](/azure/azure-monitor/reference/tables/sqlvulnerabilityassessmentresult) | | | [SqlVulnerabilityAssessmentScanStatus](/azure/azure-monitor/reference/tables/sqlvulnerabilityassessmentscanstatus) | | | [StorageBlobLogs](/azure/azure-monitor/reference/tables/storagebloblogs) | | +| [StorageCacheOperationEvents](/azure/azure-monitor/reference/tables/storagecacheoperationevents) | | +| [StorageCacheUpgradeEvents](/azure/azure-monitor/reference/tables/storagecacheupgradeevents) | | +| [StorageCacheWarningEvents](/azure/azure-monitor/reference/tables/storagecachewarningevents) | | | [StorageFileLogs](/azure/azure-monitor/reference/tables/storagefilelogs) | | -| StorageInsightsAccountPropertiesDaily | | -| StorageInsightsDailyMetrics | | -| StorageInsightsHourlyMetrics | | -| StorageInsightsMonthlyMetrics | | -| StorageInsightsWeeklyMetrics | | +| [StorageInsightsAccountPropertiesDaily](/azure/azure-monitor/reference/tables/storageinsightsaccountpropertiesdaily) | | +| [StorageInsightsDailyMetrics](/azure/azure-monitor/reference/tables/storageinsightsdailymetrics) | | +| [StorageInsightsHourlyMetrics](/azure/azure-monitor/reference/tables/storageinsightshourlymetrics) | | +| [StorageInsightsMonthlyMetrics](/azure/azure-monitor/reference/tables/storageinsightsmonthlymetrics) | | +| [StorageInsightsWeeklyMetrics](/azure/azure-monitor/reference/tables/storageinsightsweeklymetrics) | | +| [StorageMalwareScanningResults](/azure/azure-monitor/reference/tables/storagemalwarescanningresults) | | +| [StorageMoverCopyLogsFailed](/azure/azure-monitor/reference/tables/storagemovercopylogsfailed) | | +| [StorageMoverCopyLogsTransferred](/azure/azure-monitor/reference/tables/storagemovercopylogstransferred) | | +| [StorageMoverJobRunLogs](/azure/azure-monitor/reference/tables/storagemoverjobrunlogs) | | | [StorageQueueLogs](/azure/azure-monitor/reference/tables/storagequeuelogs) | | | [StorageTableLogs](/azure/azure-monitor/reference/tables/storagetablelogs) | | | [SucceededIngestion](/azure/azure-monitor/reference/tables/succeededingestion) | | +| [SVMPoolExecutionLog](/azure/azure-monitor/reference/tables/svmpoolexecutionlog) | | +| [SVMPoolRequestLog](/azure/azure-monitor/reference/tables/svmpoolrequestlog) | | | [SynapseBigDataPoolApplicationsEnded](/azure/azure-monitor/reference/tables/synapsebigdatapoolapplicationsended) | | | [SynapseBuiltinSqlPoolRequestsEnded](/azure/azure-monitor/reference/tables/synapsebuiltinsqlpoolrequestsended) | | | [SynapseDXFailedIngestion](/azure/azure-monitor/reference/tables/synapsedxfailedingestion) | | @@ -342,14 +674,21 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [SynapseIntegrationActivityRuns](/azure/azure-monitor/reference/tables/synapseintegrationactivityruns) | | | [SynapseIntegrationPipelineRuns](/azure/azure-monitor/reference/tables/synapseintegrationpipelineruns) | | | [SynapseIntegrationTriggerRuns](/azure/azure-monitor/reference/tables/synapseintegrationtriggerruns) | | +| [SynapseLinkEvent](/azure/azure-monitor/reference/tables/synapselinkevent) | | | [SynapseRbacOperations](/azure/azure-monitor/reference/tables/synapserbacoperations) | | +| [SynapseScopePoolScopeJobsEnded](/azure/azure-monitor/reference/tables/synapsescopepoolscopejobsended) | | +| [SynapseScopePoolScopeJobsStateChange](/azure/azure-monitor/reference/tables/synapsescopepoolscopejobsstatechange) | | | [SynapseSqlPoolDmsWorkers](/azure/azure-monitor/reference/tables/synapsesqlpooldmsworkers) | | | [SynapseSqlPoolExecRequests](/azure/azure-monitor/reference/tables/synapsesqlpoolexecrequests) | | | [SynapseSqlPoolRequestSteps](/azure/azure-monitor/reference/tables/synapsesqlpoolrequeststeps) | | | [SynapseSqlPoolSqlRequests](/azure/azure-monitor/reference/tables/synapsesqlpoolsqlrequests) | | | [SynapseSqlPoolWaits](/azure/azure-monitor/reference/tables/synapsesqlpoolwaits) | | -| [Syslog](/azure/azure-monitor/reference/tables/syslog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [Syslog](/azure/azure-monitor/reference/tables/syslog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [ThreatIntelIndicators](/azure/azure-monitor/reference/tables/threatintelindicators) | | | [ThreatIntelligenceIndicator](/azure/azure-monitor/reference/tables/threatintelligenceindicator) | | +| [ThreatIntelObjects](/azure/azure-monitor/reference/tables/threatintelobjects) | | +| [TOUserAudits](/azure/azure-monitor/reference/tables/touseraudits) | | +| [TOUserDiagnostics](/azure/azure-monitor/reference/tables/touserdiagnostics) | | | [TSIIngress](/azure/azure-monitor/reference/tables/tsiingress) | | | [UCClient](/azure/azure-monitor/reference/tables/ucclient) | | | [UCClientReadinessStatus](/azure/azure-monitor/reference/tables/ucclientreadinessstatus) | | @@ -359,11 +698,14 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [UCDOStatus](/azure/azure-monitor/reference/tables/ucdostatus) | | | [UCServiceUpdateStatus](/azure/azure-monitor/reference/tables/ucserviceupdatestatus) | | | [UCUpdateAlert](/azure/azure-monitor/reference/tables/ucupdatealert) | | -| [Update](/azure/azure-monitor/reference/tables/update) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [Update](/azure/azure-monitor/reference/tables/update) | Partial support – some of the data is ingested through internal services that aren't supported. | | [UpdateRunProgress](/azure/azure-monitor/reference/tables/updaterunprogress) | | | [UpdateSummary](/azure/azure-monitor/reference/tables/updatesummary) | | | [UrlClickEvents](/azure/azure-monitor/reference/tables/urlclickevents) | | -| [W3CIISLog](/azure/azure-monitor/reference/tables/w3ciislog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [VCoreMongoRequests](/azure/azure-monitor/reference/tables/vcoremongorequests) | | +| [VIAudit](/azure/azure-monitor/reference/tables/viaudit) | | +| [VIIndexing](/azure/azure-monitor/reference/tables/viindexing) | | +| [W3CIISLog](/azure/azure-monitor/reference/tables/w3ciislog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [WaaSDeploymentStatus](/azure/azure-monitor/reference/tables/waasdeploymentstatus) | | | [WaaSInsiderStatus](/azure/azure-monitor/reference/tables/waasinsiderstatus) | | | [WaaSUpdateStatus](/azure/azure-monitor/reference/tables/waasupdatestatus) | | @@ -371,11 +713,12 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [WebPubSubConnectivity](/azure/azure-monitor/reference/tables/webpubsubconnectivity) | | | [WebPubSubHttpRequest](/azure/azure-monitor/reference/tables/webpubsubhttprequest) | | | [WebPubSubMessaging](/azure/azure-monitor/reference/tables/webpubsubmessaging) | | +| [Windows365AuditLogs](/azure/azure-monitor/reference/tables/windows365auditlogs) | | | [WindowsClientAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsclientassessmentrecommendation) | | | [WindowsEvent](/azure/azure-monitor/reference/tables/windowsevent) | | | [WindowsFirewall](/azure/azure-monitor/reference/tables/windowsfirewall) | | | [WindowsServerAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsserverassessmentrecommendation) | | -| [WireData](/azure/azure-monitor/reference/tables/wiredata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [WireData](/azure/azure-monitor/reference/tables/wiredata) | Partial support – some of the data is ingested through internal services that aren't supported. | | [WorkloadDiagnosticLogs](/azure/azure-monitor/reference/tables/workloaddiagnosticlogs) | | | [WUDOAggregatedStatus](/azure/azure-monitor/reference/tables/wudoaggregatedstatus) | | | [WUDOStatus](/azure/azure-monitor/reference/tables/wudostatus) | | @@ -387,4 +730,3 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [WVDFeeds](/azure/azure-monitor/reference/tables/wvdfeeds) | | | [WVDHostRegistrations](/azure/azure-monitor/reference/tables/wvdhostregistrations) | | | [WVDManagement](/azure/azure-monitor/reference/tables/wvdmanagement) | | - From 4d3fdeedf685a8670001a87b1d24f2cbea4129c6 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:49:50 -0700 Subject: [PATCH 02/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 1 + 1 file changed, 1 insertion(+) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index a4b829c4a2..6e2e3009e4 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -13,6 +13,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal > We are in a process of adding support for more tables. Please check this article regularly. | Table | Limitations | +|:---|:---| | [AACAudit](/azure/azure-monitor/reference/tables/aacaudit) | | | [AACHttpRequest](/azure/azure-monitor/reference/tables/aachttprequest) | | | [AADB2CRequestLogs](/azure/azure-monitor/reference/tables/aadb2crequestlogs) | | From 965dd67f8bc5c255f5ede92066a2f6156ab7583c Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:50:02 -0700 Subject: [PATCH 03/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 6e2e3009e4..334aded677 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -437,7 +437,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [EmailPostDeliveryEvents](/azure/azure-monitor/reference/tables/emailpostdeliveryevents) | | | [EmailUrlInfo](/azure/azure-monitor/reference/tables/emailurlinfo) | | | [EnrichedMicrosoft365AuditLogs](/azure/azure-monitor/reference/tables/enrichedmicrosoft365auditlogs) | | -| [Event](/azure/azure-monitor/reference/tables/event) | Partial support . Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension  is collected through Azure storage. This path isn't supported. | +| [Event](/azure/azure-monitor/reference/tables/event) | Partial support. Data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving from Diagnostics Extension is collected through Azure storage. This path isn't supported. | | [ExchangeAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeassessmentrecommendation) | | | [ExchangeOnlineAssessmentRecommendation](/azure/azure-monitor/reference/tables/exchangeonlineassessmentrecommendation) | | | [FailedIngestion](/azure/azure-monitor/reference/tables/failedingestion) | | From 0ab5908b3b20b698508fdea4e3da82fc0060e4d0 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:50:15 -0700 Subject: [PATCH 04/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 334aded677..ef11c09ad3 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -503,7 +503,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [IdentityLogonEvents](/azure/azure-monitor/reference/tables/identitylogonevents) | | | [IdentityQueryEvents](/azure/azure-monitor/reference/tables/identityqueryevents) | | | [IlumioInsights](/azure/azure-monitor/reference/tables/ilumioinsights) | | -| [InsightsMetrics](/azure/azure-monitor/reference/tables/insightsmetrics) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [InsightsMetrics](/azure/azure-monitor/reference/tables/insightsmetrics) | Partial support - some of the data is ingested through internal services that aren't supported. | | [IntuneAuditLogs](/azure/azure-monitor/reference/tables/intuneauditlogs) | | | [IntuneDevices](/azure/azure-monitor/reference/tables/intunedevices) | | | [IntuneOperationalLogs](/azure/azure-monitor/reference/tables/intuneoperationallogs) | | From 3fad77c0495580409cde6e61275f603e2de309c2 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:50:28 -0700 Subject: [PATCH 05/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index ef11c09ad3..ee2da0a8d3 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -627,7 +627,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [SecurityBaseline](/azure/azure-monitor/reference/tables/securitybaseline) | | | [SecurityBaselineSummary](/azure/azure-monitor/reference/tables/securitybaselinesummary) | | | [SecurityDetection](/azure/azure-monitor/reference/tables/securitydetection) | | -| [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [SecurityEvent](/azure/azure-monitor/reference/tables/securityevent) | Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [SecurityIncident](/azure/azure-monitor/reference/tables/securityincident) | | | [SecurityIoTRawEvent](/azure/azure-monitor/reference/tables/securityiotrawevent) | | | [SecurityNestedRecommendation](/azure/azure-monitor/reference/tables/securitynestedrecommendation) | | From 85bb36a06ce1378ef62bd2c3d3b9d2e9c4e0d582 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:50:35 -0700 Subject: [PATCH 06/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index ee2da0a8d3..7a5aeda535 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -684,7 +684,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [SynapseSqlPoolRequestSteps](/azure/azure-monitor/reference/tables/synapsesqlpoolrequeststeps) | | | [SynapseSqlPoolSqlRequests](/azure/azure-monitor/reference/tables/synapsesqlpoolsqlrequests) | | | [SynapseSqlPoolWaits](/azure/azure-monitor/reference/tables/synapsesqlpoolwaits) | | -| [Syslog](/azure/azure-monitor/reference/tables/syslog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [Syslog](/azure/azure-monitor/reference/tables/syslog) | Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [ThreatIntelIndicators](/azure/azure-monitor/reference/tables/threatintelindicators) | | | [ThreatIntelligenceIndicator](/azure/azure-monitor/reference/tables/threatintelligenceindicator) | | | [ThreatIntelObjects](/azure/azure-monitor/reference/tables/threatintelobjects) | | From 67a83bd49e86f2ca7e7bff344dc4246355ae5d87 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:50:46 -0700 Subject: [PATCH 07/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 7a5aeda535..5d3d71b994 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -699,7 +699,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [UCDOStatus](/azure/azure-monitor/reference/tables/ucdostatus) | | | [UCServiceUpdateStatus](/azure/azure-monitor/reference/tables/ucserviceupdatestatus) | | | [UCUpdateAlert](/azure/azure-monitor/reference/tables/ucupdatealert) | | -| [Update](/azure/azure-monitor/reference/tables/update) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [Update](/azure/azure-monitor/reference/tables/update) | Partial support - some of the data is ingested through internal services that aren't supported. | | [UpdateRunProgress](/azure/azure-monitor/reference/tables/updaterunprogress) | | | [UpdateSummary](/azure/azure-monitor/reference/tables/updatesummary) | | | [UrlClickEvents](/azure/azure-monitor/reference/tables/urlclickevents) | | From 0e88fc02b655ccb3034e23293480e14e078b0763 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:50:56 -0700 Subject: [PATCH 08/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 5d3d71b994..b27af965dd 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -706,7 +706,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [VCoreMongoRequests](/azure/azure-monitor/reference/tables/vcoremongorequests) | | | [VIAudit](/azure/azure-monitor/reference/tables/viaudit) | | | [VIIndexing](/azure/azure-monitor/reference/tables/viindexing) | | -| [W3CIISLog](/azure/azure-monitor/reference/tables/w3ciislog) | Partial support – data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | +| [W3CIISLog](/azure/azure-monitor/reference/tables/w3ciislog) | Partial support - data arriving from Log Analytics agent (MMA) or Azure Monitor Agent (AMA) is fully supported. Data arriving via Diagnostics Extension agent is collected though storage while this path isn't supported. | | [WaaSDeploymentStatus](/azure/azure-monitor/reference/tables/waasdeploymentstatus) | | | [WaaSInsiderStatus](/azure/azure-monitor/reference/tables/waasinsiderstatus) | | | [WaaSUpdateStatus](/azure/azure-monitor/reference/tables/waasupdatestatus) | | From 0ae3b33cd152d393c8c5ba88430579fa92d185ec Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:51:05 -0700 Subject: [PATCH 09/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index b27af965dd..e366d636a8 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -719,7 +719,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [WindowsEvent](/azure/azure-monitor/reference/tables/windowsevent) | | | [WindowsFirewall](/azure/azure-monitor/reference/tables/windowsfirewall) | | | [WindowsServerAssessmentRecommendation](/azure/azure-monitor/reference/tables/windowsserverassessmentrecommendation) | | -| [WireData](/azure/azure-monitor/reference/tables/wiredata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [WireData](/azure/azure-monitor/reference/tables/wiredata) | Partial support - some of the data is ingested through internal services that aren't supported. | | [WorkloadDiagnosticLogs](/azure/azure-monitor/reference/tables/workloaddiagnosticlogs) | | | [WUDOAggregatedStatus](/azure/azure-monitor/reference/tables/wudoaggregatedstatus) | | | [WUDOStatus](/azure/azure-monitor/reference/tables/wudostatus) | | From ec58a7f1506434d130d1864cf7043f609e3c3a3e Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Fri, 24 Oct 2025 13:51:15 -0700 Subject: [PATCH 10/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Austin McCollum --- articles/azure-monitor/logs/tables-feature-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index e366d636a8..53cf717efe 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -331,7 +331,7 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [ComputerGroup](/azure/azure-monitor/reference/tables/computergroup) | | | [ConfidentialWatchlist](/azure/azure-monitor/reference/tables/confidentialwatchlist) | | | [ConfigurationChange](/azure/azure-monitor/reference/tables/configurationchange) | | -| [ConfigurationData](/azure/azure-monitor/reference/tables/configurationdata) | Partial support – some of the data is ingested through internal services that aren't supported. | +| [ConfigurationData](/azure/azure-monitor/reference/tables/configurationdata) | Partial support - some of the data is ingested through internal services that aren't supported. | | [ContainerAppConsoleLogs](/azure/azure-monitor/reference/tables/containerappconsolelogs) | | | [ContainerAppSystemLogs](/azure/azure-monitor/reference/tables/containerappsystemlogs) | | | [ContainerEvent](/azure/azure-monitor/reference/tables/containerevent) | | From 20cc72fe1315316f212e2dd98c54dd03d2244249 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:11:57 -0700 Subject: [PATCH 11/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 53cf717efe..f9e7193c2f 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -131,7 +131,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AGSGrafanaLoginEvents](/azure/azure-monitor/reference/tables/agsgrafanaloginevents) | | | [AGSGrafanaUsageInsightsEvents](/azure/azure-monitor/reference/tables/agsgrafanausageinsightsevents) | | | [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | -| [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | | [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | | [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | | [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | From e361a649a599f489b7b99a186f09eb2e523cf057 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:12:10 -0700 Subject: [PATCH 12/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index f9e7193c2f..ab3e30ba45 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -132,7 +132,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AGSGrafanaUsageInsightsEvents](/azure/azure-monitor/reference/tables/agsgrafanausageinsightsevents) | | | [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | | [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | -| [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | | [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | | [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | | [AHDSDeidAuditLogs](/azure/azure-monitor/reference/tables/ahdsdeidauditlogs) | | From cd0f4f84e79efa1837d4e5103f4d9c18be1924dd Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:12:28 -0700 Subject: [PATCH 13/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index ab3e30ba45..65578ba833 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -133,7 +133,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AGWAccessLogs](/azure/azure-monitor/reference/tables/agwaccesslogs) | | | [AGWFirewallLogs](/azure/azure-monitor/reference/tables/agwfirewalllogs) | | | [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | -| [AGWPerformanceLogs](/azure/azure-monitor/reference/tables/agwperformancelogs) | | | [AHDSDeidAuditLogs](/azure/azure-monitor/reference/tables/ahdsdeidauditlogs) | | | [AHDSDicomAuditLogs](/azure/azure-monitor/reference/tables/ahdsdicomauditlogs) | | | [AHDSDicomDiagnosticLogs](/azure/azure-monitor/reference/tables/ahdsdicomdiagnosticlogs) | | From 7e0bda2bbd27347550cf92cdef1b82c23595a02a Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:12:43 -0700 Subject: [PATCH 14/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 65578ba833..df8ad6cf5d 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -259,7 +259,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AWSVPCFlowLogsCCP](/azure/azure-monitor/reference/tables/awsvpcflowlogsccp) | | | [AWSWAF](/azure/azure-monitor/reference/tables/awswaf) | | | [AZFWApplicationRule](/azure/azure-monitor/reference/tables/azfwapplicationrule) | | -| [AZFWApplicationRule](/azure/azure-monitor/reference/tables/azfwapplicationrule) | | | [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | | [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | | [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | From 5d788e32bc3320d9ed7c8bce8926d548962cc98c Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:13:04 -0700 Subject: [PATCH 15/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index df8ad6cf5d..d49026afc7 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -260,7 +260,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AWSWAF](/azure/azure-monitor/reference/tables/awswaf) | | | [AZFWApplicationRule](/azure/azure-monitor/reference/tables/azfwapplicationrule) | | | [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | -| [AZFWApplicationRuleAggregation](/azure/azure-monitor/reference/tables/azfwapplicationruleaggregation) | | | [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | | [AZFWDnsQuery](/azure/azure-monitor/reference/tables/azfwdnsquery) | | | [AZFWFatFlow](/azure/azure-monitor/reference/tables/azfwfatflow) | | From fd048895f4cd15f749ed748dfac426a65f7291c6 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:13:15 -0700 Subject: [PATCH 16/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index d49026afc7..4995c061a0 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -271,7 +271,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | | [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | | [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | -| [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | From 7f1211014bd644c8e94a7f6d52e313d6a06398d0 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:13:26 -0700 Subject: [PATCH 17/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 4995c061a0..42115fe941 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -272,7 +272,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AZFWInternalFqdnResolutionFailure](/azure/azure-monitor/reference/tables/azfwinternalfqdnresolutionfailure) | | | [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | -| [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | From 6ea67abfe274abb182a6be3159bbdb4298a0efcc Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:13:36 -0700 Subject: [PATCH 18/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 42115fe941..12251ad8e1 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -273,7 +273,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AZFWNatRule](/azure/azure-monitor/reference/tables/azfwnatrule) | | | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | -| [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | From 49aa460511ff18318131f382529696a1db8d5b0f Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:14:00 -0700 Subject: [PATCH 19/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 12251ad8e1..3c198fb050 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -274,7 +274,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AZFWNatRuleAggregation](/azure/azure-monitor/reference/tables/azfwnatruleaggregation) | | | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | -| [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | | [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | | [AZKVPolicyEvaluationDetailsLogs](/azure/azure-monitor/reference/tables/azkvpolicyevaluationdetailslogs) | | From 77fe3385edfcfef0a6ecb46703652e73b50c8606 Mon Sep 17 00:00:00 2001 From: Ivan Varnitski Date: Mon, 27 Oct 2025 14:14:14 -0700 Subject: [PATCH 20/20] Update articles/azure-monitor/logs/tables-feature-support.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- articles/azure-monitor/logs/tables-feature-support.md | 1 - 1 file changed, 1 deletion(-) diff --git a/articles/azure-monitor/logs/tables-feature-support.md b/articles/azure-monitor/logs/tables-feature-support.md index 3c198fb050..380b614917 100644 --- a/articles/azure-monitor/logs/tables-feature-support.md +++ b/articles/azure-monitor/logs/tables-feature-support.md @@ -275,7 +275,6 @@ The following list identifies the tables in a [Log Analytics workspace](log-anal | [AZFWNetworkRule](/azure/azure-monitor/reference/tables/azfwnetworkrule) | | | [AZFWNetworkRuleAggregation](/azure/azure-monitor/reference/tables/azfwnetworkruleaggregation) | | | [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | -| [AZFWThreatIntel](/azure/azure-monitor/reference/tables/azfwthreatintel) | | | [AZKVPolicyEvaluationDetailsLogs](/azure/azure-monitor/reference/tables/azkvpolicyevaluationdetailslogs) | | | [AZMSApplicationMetricLogs](/azure/azure-monitor/reference/tables/azmsapplicationmetriclogs) | | | [AZMSArchiveLogs](/azure/azure-monitor/reference/tables/azmsarchivelogs) | |