| title | Azure permissions for Monitor - Azure RBAC |
|---|---|
| description | Lists the permissions for the Azure resource providers in the Monitor category. |
| ms.service | role-based-access-control |
| ms.topic | generated-reference |
| author | rolyon |
| manager | pmwongera |
| ms.author | rolyon |
| ms.date | 04/09/2026 |
| ms.custom | generated |
This article lists the permissions for the Azure resource providers in the Monitor category. You can use these permissions in your own Azure custom roles to provide granular access control to resources in Azure. Permission strings have the following format: {Company}.{ProviderName}/{resourceType}/{action}
Analyze all of the alerts in your Log Analytics repository.
Azure service: Azure Monitor
[!div class="mx-tableFixed"]
Action Description Microsoft.AlertsManagement/register/actionSubscription Registration Action Microsoft.AlertsManagement/register/actionRegisters the subscription for the Microsoft Alerts Management Microsoft.AlertsManagement/migrateFromSmartDetection/actionStarts an asynchronous migration process of Smart Detection to smart alerts in an Application Insights resource Microsoft.AlertsManagement/actionRules/readGet all the alert processing rules for the input filters. Microsoft.AlertsManagement/actionRules/writeCreate or update alert processing rule in a given subscription Microsoft.AlertsManagement/actionRules/deleteDelete alert processing rule in a given subscription. Microsoft.AlertsManagement/alertRuleRecommendations/readRead alertRuleRecommendations Microsoft.AlertsManagement/alerts/readGet all the alerts for the input filters. Microsoft.AlertsManagement/alerts/changestate/actionChange the state of the alert. Microsoft.AlertsManagement/alerts/history/readGet history of the alert Microsoft.AlertsManagement/alertsMetaData/readGet alerts meta data for the input parameter. Microsoft.AlertsManagement/alertsSummary/readGet the summary of alerts Microsoft.AlertsManagement/investigations/writeSet Investigation Microsoft.AlertsManagement/investigations/deleteDelete Investigation Microsoft.AlertsManagement/investigations/readRead Investigation Microsoft.AlertsManagement/issues/readRead Issue Microsoft.AlertsManagement/issues/writeWrite Issue Microsoft.AlertsManagement/issues/deleteDelete Issue Microsoft.AlertsManagement/issues/startInvestigation/actionStart a new investigation based on the data in the Issue Microsoft.AlertsManagement/issues/fetchInvestigationResult/actionFetch result of an investigation by its ID Microsoft.AlertsManagement/issues/listAlerts/actionList alerts added to the Issue Microsoft.AlertsManagement/issues/addOrUpdateAlerts/actionAdd alerts to the Issue or update alerts that were already added (one or more) Microsoft.AlertsManagement/issues/listResources/actionList resources added to the Issue Microsoft.AlertsManagement/issues/addOrUpdateResources/actionAdd resources to the Issue or update resources that were already added (one or more) Microsoft.AlertsManagement/migrateFromSmartDetection/readGet the status of an asynchronous Smart Detection to smart alerts migration process Microsoft.AlertsManagement/Operations/readReads the operations provided Microsoft.AlertsManagement/prometheusRuleGroups/writeSet prometheusRuleGroups Microsoft.AlertsManagement/prometheusRuleGroups/deleteDelete prometheusRuleGroups Microsoft.AlertsManagement/prometheusRuleGroups/readRead prometheusRuleGroups Microsoft.AlertsManagement/smartDetectorAlertRules/writeCreate or update Smart Detector alert rule in a given subscription Microsoft.AlertsManagement/smartDetectorAlertRules/readGet all the Smart Detector alert rules for the input filters Microsoft.AlertsManagement/smartDetectorAlertRules/deleteDelete Smart Detector alert rule in a given subscription Microsoft.AlertsManagement/smartGroups/readGet all the smart groups for the input filters Microsoft.AlertsManagement/smartGroups/changestate/actionChange the state of the smart group Microsoft.AlertsManagement/smartGroups/history/readGet history of the smart group Microsoft.AlertsManagement/tenantActivityLogAlerts/writeWrite tenantLevelActivityLogAlerts Microsoft.AlertsManagement/tenantActivityLogAlerts/deleteDelete tenantLevelActivityLogAlerts Microsoft.AlertsManagement/tenantActivityLogAlerts/readRead tenantLevelActivityLogAlerts
Azure service: Azure Managed Grafana
[!div class="mx-tableFixed"]
Action Description Microsoft.Dashboard/grafana/actionOperate grafana Microsoft.Dashboard/checkNameAvailability/actionChecks if grafana resource name is available Microsoft.Dashboard/register/actionRegisters the subscription for the Microsoft.Dashboard resource provider Microsoft.Dashboard/unregister/actionUnregisters the subscription for the Microsoft.Dashboard resource provider Microsoft.Dashboard/dashboards/actionOperate dashboard Microsoft.Dashboard/dashboards/readRead dashboard Microsoft.Dashboard/dashboards/writeWrite dashboard Microsoft.Dashboard/dashboards/deleteDelete dashboard Microsoft.Dashboard/dashboards/dashboardDefinitions/readRead dashboard definition Microsoft.Dashboard/dashboards/dashboardDefinitions/writeWrite dashboard definition Microsoft.Dashboard/dashboards/dashboardDefinitions/deleteDelete dashboard definition Microsoft.Dashboard/grafana/readRead grafana Microsoft.Dashboard/grafana/writeWrite grafana Microsoft.Dashboard/grafana/deleteDelete grafana Microsoft.Dashboard/grafana/PrivateEndpointConnectionsApproval/actionApprove PrivateEndpointConnection Microsoft.Dashboard/grafana/managedPrivateEndpoints/actionOperations on Private Endpoints Microsoft.Dashboard/grafana/grafanaDefinitions/readRead Grafana Definitions Microsoft.Dashboard/grafana/grafanaDefinitions/writeWrite Grafana Definitions Microsoft.Dashboard/grafana/grafanaDefinitions/deleteDelete Grafana Definitions Microsoft.Dashboard/grafana/integrationFabrics/readRead Integration Fabrics Microsoft.Dashboard/grafana/integrationFabrics/writeWrite Integration Fabrics Microsoft.Dashboard/grafana/integrationFabrics/deleteDelete Integration Fabrics Microsoft.Dashboard/grafana/managedPrivateEndpoints/readRead Managed Private Endpoints Microsoft.Dashboard/grafana/managedPrivateEndpoints/writeWrite Managed Private Endpoints Microsoft.Dashboard/grafana/managedPrivateEndpoints/deleteDelete Managed Private Endpoints Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/validate/actionValidate PrivateEndpointConnectionProxy Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/readGet PrivateEndpointConnectionProxy Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/writeCreate/Update PrivateEndpointConnectionProxy Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/deleteDelete PrivateEndpointConnectionProxy Microsoft.Dashboard/grafana/privateEndpointConnections/readGet PrivateEndpointConnection Microsoft.Dashboard/grafana/privateEndpointConnections/writeUpdate PrivateEndpointConnection Microsoft.Dashboard/grafana/privateEndpointConnections/deleteDelete PrivateEndpointConnection Microsoft.Dashboard/grafana/privateLinkResources/readGet PrivateLinkResources Microsoft.Dashboard/locations/readGet locations Microsoft.Dashboard/locations/operationStatuses/readGet operation statuses Microsoft.Dashboard/locations/operationStatuses/writeWrite operation statuses Microsoft.Dashboard/operations/readList operations available on Microsoft.Dashboard resource provider Microsoft.Dashboard/registeredSubscriptions/readGet registered subscription details DataAction Description Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/actionAct as Grafana Admin role Microsoft.Dashboard/grafana/ActAsGrafanaEditor/actionAct as Grafana Editor role Microsoft.Dashboard/grafana/ActAsGrafanaViewer/actionAct as Grafana Viewer role Microsoft.Dashboard/grafana/ActAsGrafanaLimitedViewer/actionAct as Grafana Limited Viewer role
Full observability into your applications, infrastructure, and network.
Azure service: Azure Monitor
[!div class="mx-tableFixed"]
Action Description Microsoft.Insights/Metrics/ActionMetric Action Microsoft.Insights/Register/ActionRegister the Microsoft Insights provider Microsoft.Insights/Unregister/ActionRegister the Microsoft Insights provider Microsoft.Insights/ListMigrationDate/ActionGet back Subscription migration date Microsoft.Insights/MigrateToNewpricingModel/ActionMigrate subscription to new pricing model Microsoft.Insights/RollbackToLegacyPricingModel/ActionRollback subscription to legacy pricing model Microsoft.Insights/ActionGroups/WriteCreate or update an action group Microsoft.Insights/ActionGroups/DeleteDelete an action group Microsoft.Insights/ActionGroups/ReadRead an action group Microsoft.Insights/actionGroups/NetworkSecurityPerimeterAssociationProxies/ReadRead a action group endpoint NSP association proxy Microsoft.Insights/actionGroups/NetworkSecurityPerimeterAssociationProxies/WriteCreate or update a action group endpoint NSP association proxy Microsoft.Insights/actionGroups/NetworkSecurityPerimeterAssociationProxies/DeleteDelete a action group endpoint NSP association proxy Microsoft.Insights/actionGroups/NetworkSecurityPerimeterConfigurations/ReadRead action group endpoint effective NSP configuration Microsoft.Insights/actionGroups/NetworkSecurityPerimeterConfigurations/Reconcile/ActionReconcile action group endpoint NSP configuration Microsoft.Insights/ActivityLogAlerts/WriteCreate or update an activity log alert Microsoft.Insights/ActivityLogAlerts/DeleteDelete an activity log alert Microsoft.Insights/ActivityLogAlerts/ReadRead an activity log alert Microsoft.Insights/ActivityLogAlerts/Activated/ActionActivity Log Alert activated Microsoft.Insights/AlertRules/WriteCreate or update a classic metric alert Microsoft.Insights/AlertRules/DeleteDelete a classic metric alert Microsoft.Insights/AlertRules/ReadRead a classic metric alert Microsoft.Insights/AlertRules/Activated/ActionClassic metric alert activated Microsoft.Insights/AlertRules/Resolved/ActionClassic metric alert resolved Microsoft.Insights/AlertRules/Throttled/ActionClassic metric alert rule throttled Microsoft.Insights/AlertRules/Incidents/ReadRead a classic metric alert incident Microsoft.Insights/AutoscaleSettings/WriteCreate or update an autoscale setting Microsoft.Insights/AutoscaleSettings/DeleteDelete an autoscale setting Microsoft.Insights/AutoscaleSettings/ReadRead an autoscale setting Microsoft.Insights/AutoscaleSettings/Scaleup/ActionAutoscale scale up initiated Microsoft.Insights/AutoscaleSettings/PredictiveScaleup/ActionPredictive Autoscale scale up initiated Microsoft.Insights/AutoscaleSettings/Scaledown/ActionAutoscale scale down initiated Microsoft.Insights/AutoscaleSettings/PredictiveScaleupResult/ActionPredictive Autoscale scale up completed Microsoft.Insights/AutoscaleSettings/ScaleupResult/ActionAutoscale scale up completed Microsoft.Insights/AutoscaleSettings/ScaledownResult/ActionAutoscale scale down completed Microsoft.Insights/AutoscaleSettings/providers/Microsoft.Insights/diagnosticSettings/ReadRead a resource diagnostic setting Microsoft.Insights/AutoscaleSettings/providers/Microsoft.Insights/diagnosticSettings/WriteCreate or update a resource diagnostic setting Microsoft.Insights/AutoscaleSettings/providers/Microsoft.Insights/logDefinitions/ReadRead log definitions Microsoft.Insights/AutoscaleSettings/providers/Microsoft.Insights/MetricDefinitions/ReadRead metric definitions Microsoft.Insights/Baseline/ReadRead a metric baseline (preview) Microsoft.Insights/CalculateBaseline/ReadCalculate baseline for metric values (preview) Microsoft.Insights/Components/AnalyticsTables/ActionApplication Insights analytics table action Microsoft.Insights/Components/ApiKeys/ActionGenerating an Application Insights API key Microsoft.Insights/Components/Purge/ActionPurging data from Application Insights Microsoft.Insights/Components/DailyCapReached/ActionReached the daily cap for Application Insights component Microsoft.Insights/Components/DailyCapWarningThresholdReached/ActionReached the daily cap warning threshold for Application Insights component Microsoft.Insights/Components/WriteWriting to an application insights component configuration Microsoft.Insights/Components/DeleteDeleting an application insights component configuration Microsoft.Insights/Components/ReadReading an application insights component configuration Microsoft.Insights/Components/ExportConfiguration/ActionApplication Insights export settings action Microsoft.Insights/Components/Move/ActionMove an Application Insights Component to another resource group or subscription Microsoft.Insights/Components/AnalyticsItems/DeleteDeleting an Application Insights analytics item Microsoft.Insights/Components/AnalyticsItems/ReadReading an Application Insights analytics item Microsoft.Insights/Components/AnalyticsItems/WriteWriting an Application Insights analytics item Microsoft.Insights/Components/AnalyticsTables/DeleteDeleting an Application Insights analytics table schema Microsoft.Insights/Components/AnalyticsTables/ReadReading an Application Insights analytics table schema Microsoft.Insights/Components/AnalyticsTables/WriteWriting an Application Insights analytics table schema Microsoft.Insights/Components/Annotations/DeleteDeleting an Application Insights annotation Microsoft.Insights/Components/Annotations/ReadReading an Application Insights annotation Microsoft.Insights/Components/Annotations/WriteWriting an Application Insights annotation Microsoft.Insights/Components/Api/ReadReading Application Insights component data API Microsoft.Insights/Components/ApiKeys/DeleteDeleting an Application Insights API key Microsoft.Insights/Components/ApiKeys/ReadReading an Application Insights API key Microsoft.Insights/Components/BillingPlanForComponent/ReadReading a billing plan for Application Insights component Microsoft.Insights/Components/CurrentBillingFeatures/ReadReading current billing features for Application Insights component Microsoft.Insights/Components/CurrentBillingFeatures/WriteWriting current billing features for Application Insights component Microsoft.Insights/Components/DefaultWorkItemConfig/ReadReading an Application Insights default ALM integration configuration Microsoft.Insights/Components/Events/ReadGet logs from Application Insights using OData query format Microsoft.Insights/Components/ExportConfiguration/DeleteDeleting Application Insights export settings Microsoft.Insights/Components/ExportConfiguration/ReadReading Application Insights export settings Microsoft.Insights/Components/ExportConfiguration/WriteWriting Application Insights export settings Microsoft.Insights/Components/ExtendQueries/ReadReading Application Insights component extended query results Microsoft.Insights/Components/Favorites/DeleteDeleting an Application Insights favorite Microsoft.Insights/Components/Favorites/ReadReading an Application Insights favorite Microsoft.Insights/Components/Favorites/WriteWriting an Application Insights favorite Microsoft.Insights/Components/FeatureCapabilities/ReadReading Application Insights component feature capabilities Microsoft.Insights/Components/GetAvailableBillingFeatures/ReadReading Application Insights component available billing features Microsoft.Insights/Components/GetToken/ReadReading an Application Insights component token Microsoft.Insights/Components/linkedStorageAccounts/ReadRead linked storage account Microsoft.Insights/Components/linkedStorageAccounts/WriteCreate or modify linked storage account Microsoft.Insights/Components/MetricDefinitions/ReadReading Application Insights component metric definitions Microsoft.Insights/Components/Metrics/ReadReading Application Insights component metrics Microsoft.Insights/Components/MyAnalyticsItems/DeleteDeleting an Application Insights personal analytics item Microsoft.Insights/Components/MyAnalyticsItems/WriteWriting an Application Insights personal analytics item Microsoft.Insights/Components/MyAnalyticsItems/ReadReading an Application Insights personal analytics item Microsoft.Insights/Components/MyFavorites/ReadReading an Application Insights personal favorite Microsoft.Insights/Components/Operations/ReadGet status of long-running operations in Application Insights Microsoft.Insights/Components/PricingPlans/ReadReading an Application Insights component pricing plan Microsoft.Insights/Components/PricingPlans/WriteWriting an Application Insights component pricing plan Microsoft.Insights/Components/ProactiveDetectionConfigs/ReadReading Application Insights proactive detection configuration Microsoft.Insights/Components/ProactiveDetectionConfigs/WriteWriting Application Insights proactive detection configuration Microsoft.Insights/Components/providers/Microsoft.Insights/diagnosticSettings/ReadRead a resource diagnostic setting Microsoft.Insights/Components/providers/Microsoft.Insights/diagnosticSettings/WriteCreate or update a resource diagnostic setting Microsoft.Insights/Components/providers/Microsoft.Insights/logDefinitions/ReadRead log definitions Microsoft.Insights/Components/providers/Microsoft.Insights/MetricDefinitions/ReadRead metric definitions Microsoft.Insights/Components/Query/ReadRun queries against Application Insights logs Microsoft.Insights/Components/QuotaStatus/ReadReading Application Insights component quota status Microsoft.Insights/Components/SyntheticMonitorLocations/ReadReading Application Insights webtest locations Microsoft.Insights/Components/Webtests/ReadReading a webtest configuration Microsoft.Insights/Components/WorkItemConfigs/DeleteDeleting an Application Insights ALM integration configuration Microsoft.Insights/Components/WorkItemConfigs/ReadReading an Application Insights ALM integration configuration Microsoft.Insights/Components/WorkItemConfigs/WriteWriting an Application Insights ALM integration configuration Microsoft.Insights/CreateNotifications/WriteSend test notifications to the provided receiver list Microsoft.Insights/DataCollectionEndpoints/ReadRead a data collection endpoint Microsoft.Insights/DataCollectionEndpoints/WriteCreate or update a data collection endpoint Microsoft.Insights/DataCollectionEndpoints/DeleteDelete a data collection endpoint Microsoft.Insights/DataCollectionEndpoints/TriggerFailover/ActionTrigger failover on a data collection endpoint Microsoft.Insights/DataCollectionEndpoints/TriggerFailback/ActionTrigger failback on a data collection endpoint Microsoft.Insights/DataCollectionEndpoints/NetworkSecurityPerimeterAssociationProxies/ReadRead a data collection endpoint NSP association proxy Microsoft.Insights/DataCollectionEndpoints/NetworkSecurityPerimeterAssociationProxies/WriteCreate or update a data collection endpoint NSP association proxy Microsoft.Insights/DataCollectionEndpoints/NetworkSecurityPerimeterAssociationProxies/DeleteDelete a data collection endpoint NSP association proxy Microsoft.Insights/DataCollectionEndpoints/NetworkSecurityPerimeterConfigurations/ReadRead data collection endpoint effective NSP configuration Microsoft.Insights/DataCollectionEndpoints/NetworkSecurityPerimeterConfigurations/Reconcile/ActionReconcile data collection endpoint NSP configuration Microsoft.Insights/DataCollectionEndpoints/ScopedPrivateLinkProxies/ReadRead a data collection endpoint private link proxy Microsoft.Insights/DataCollectionEndpoints/ScopedPrivateLinkProxies/WriteCreate or update a data collection endpoint private link proxy Microsoft.Insights/DataCollectionEndpoints/ScopedPrivateLinkProxies/DeleteDelete a data collection endpoint private link proxy Microsoft.Insights/DataCollectionRuleAssociations/ReadRead a resource's association with a data collection rule Microsoft.Insights/DataCollectionRuleAssociations/WriteCreate or update a resource's association with a data collection rule Microsoft.Insights/DataCollectionRuleAssociations/DeleteDelete a resource's association with a data collection rule Microsoft.Insights/DataCollectionRules/ReadRead a data collection rule Microsoft.Insights/DataCollectionRules/WriteCreate or update a data collection rule Microsoft.Insights/DataCollectionRules/DeleteDelete a data collection rule Microsoft.Insights/DiagnosticSettings/WriteCreate or update a resource diagnostic setting Microsoft.Insights/DiagnosticSettings/DeleteDelete a resource diagnostic setting Microsoft.Insights/DiagnosticSettings/ReadRead a resource diagnostic setting Microsoft.Insights/DiagnosticSettingsCategories/ReadRead diagnostic settings categories Microsoft.Insights/EventCategories/ReadRead available Activity Log event categories Microsoft.Insights/eventtypes/digestevents/ReadRead management event type digest Microsoft.Insights/eventtypes/values/ReadRead Activity Log events Microsoft.Insights/ExtendedDiagnosticSettings/WriteCreate or update a network flow log diagnostic setting Microsoft.Insights/ExtendedDiagnosticSettings/DeleteDelete a network flow log diagnostic setting Microsoft.Insights/ExtendedDiagnosticSettings/ReadRead a network flow log diagnostic setting Microsoft.Insights/generateLiveToken/ReadLive Metrics get token Microsoft.Insights/ListMigrationDate/ReadGet back subscription migration date Microsoft.Insights/LogDefinitions/ReadRead log definitions Microsoft.Insights/LogProfiles/WriteCreate or update an Activity Log log profile Microsoft.Insights/LogProfiles/DeleteDelete an Activity Log log profile Microsoft.Insights/LogProfiles/ReadRead an Activity Log log profile Microsoft.Insights/Logs/ReadReading data from all your logs Microsoft.Insights/Logs/AADDomainServicesAccountLogon/ReadRead data from the AADDomainServicesAccountLogon table Microsoft.Insights/Logs/AADDomainServicesAccountManagement/ReadRead data from the AADDomainServicesAccountManagement table Microsoft.Insights/Logs/AADDomainServicesDirectoryServiceAccess/ReadRead data from the AADDomainServicesDirectoryServiceAccess table Microsoft.Insights/Logs/AADDomainServicesLogonLogoff/ReadRead data from the AADDomainServicesLogonLogoff table Microsoft.Insights/Logs/AADDomainServicesPolicyChange/ReadRead data from the AADDomainServicesPolicyChange table Microsoft.Insights/Logs/AADDomainServicesPrivilegeUse/ReadRead data from the AADDomainServicesPrivilegeUse table Microsoft.Insights/Logs/AADDomainServicesSystemSecurity/ReadRead data from the AADDomainServicesSystemSecurity table Microsoft.Insights/Logs/AADManagedIdentitySignInLogs/ReadRead data from the AADManagedIdentitySignInLogs table Microsoft.Insights/Logs/AADNonInteractiveUserSignInLogs/ReadRead data from the AADNonInteractiveUserSignInLogs table Microsoft.Insights/Logs/AADServicePrincipalSignInLogs/ReadRead data from the AADServicePrincipalSignInLogs table Microsoft.Insights/Logs/ADAssessmentRecommendation/ReadRead data from the ADAssessmentRecommendation table Microsoft.Insights/Logs/AddonAzureBackupAlerts/ReadRead data from the AddonAzureBackupAlerts table Microsoft.Insights/Logs/AddonAzureBackupJobs/ReadRead data from the AddonAzureBackupJobs table Microsoft.Insights/Logs/AddonAzureBackupPolicy/ReadRead data from the AddonAzureBackupPolicy table Microsoft.Insights/Logs/AddonAzureBackupProtectedInstance/ReadRead data from the AddonAzureBackupProtectedInstance table Microsoft.Insights/Logs/AddonAzureBackupStorage/ReadRead data from the AddonAzureBackupStorage table Microsoft.Insights/Logs/ADFActivityRun/ReadRead data from the ADFActivityRun table Microsoft.Insights/Logs/ADFPipelineRun/ReadRead data from the ADFPipelineRun table Microsoft.Insights/Logs/ADFSSISIntegrationRuntimeLogs/ReadRead data from the ADFSSISIntegrationRuntimeLogs table Microsoft.Insights/Logs/ADFSSISPackageEventMessageContext/ReadRead data from the ADFSSISPackageEventMessageContext table Microsoft.Insights/Logs/ADFSSISPackageEventMessages/ReadRead data from the ADFSSISPackageEventMessages table Microsoft.Insights/Logs/ADFSSISPackageExecutableStatistics/ReadRead data from the ADFSSISPackageExecutableStatistics table Microsoft.Insights/Logs/ADFSSISPackageExecutionComponentPhases/ReadRead data from the ADFSSISPackageExecutionComponentPhases table Microsoft.Insights/Logs/ADFSSISPackageExecutionDataStatistics/ReadRead data from the ADFSSISPackageExecutionDataStatistics table Microsoft.Insights/Logs/ADFTriggerRun/ReadRead data from the ADFTriggerRun table Microsoft.Insights/Logs/ADReplicationResult/ReadRead data from the ADReplicationResult table Microsoft.Insights/Logs/ADSecurityAssessmentRecommendation/ReadRead data from the ADSecurityAssessmentRecommendation table Microsoft.Insights/Logs/ADTDigitalTwinsOperation/ReadRead data from the ADTDigitalTwinsOperation table Microsoft.Insights/Logs/ADTEventRoutesOperation/ReadRead data from the ADTEventRoutesOperation table Microsoft.Insights/Logs/ADTModelsOperation/ReadRead data from the ADTModelsOperation table Microsoft.Insights/Logs/ADTQueryOperation/ReadRead data from the ADTQueryOperation table Microsoft.Insights/Logs/AegDeliveryFailureLogs/ReadRead data from the AegDeliveryFailureLogs table Microsoft.Insights/Logs/AegPublishFailureLogs/ReadRead data from the AegPublishFailureLogs table Microsoft.Insights/Logs/Alert/ReadRead data from the Alert table Microsoft.Insights/Logs/AlertHistory/ReadRead data from the AlertHistory table Microsoft.Insights/Logs/AmlComputeClusterEvent/ReadRead data from the AmlComputeClusterEvent table Microsoft.Insights/Logs/AmlComputeClusterNodeEvent/ReadRead data from the AmlComputeClusterNodeEvent table Microsoft.Insights/Logs/AmlComputeCpuGpuUtilization/ReadRead data from the AmlComputeCpuGpuUtilization table Microsoft.Insights/Logs/AmlComputeJobEvent/ReadRead data from the AmlComputeJobEvent table Microsoft.Insights/Logs/AmlRunStatusChangedEvent/ReadRead data from the AmlRunStatusChangedEvent table Microsoft.Insights/Logs/ApiManagementGatewayLogs/ReadRead data from the ApiManagementGatewayLogs table Microsoft.Insights/Logs/AppAvailabilityResults/ReadRead data from the AppAvailabilityResults table Microsoft.Insights/Logs/AppBrowserTimings/ReadRead data from the AppBrowserTimings table Microsoft.Insights/Logs/AppCenterError/ReadRead data from the AppCenterError table Microsoft.Insights/Logs/AppDependencies/ReadRead data from the AppDependencies table Microsoft.Insights/Logs/AppEvents/ReadRead data from the AppEvents table Microsoft.Insights/Logs/AppExceptions/ReadRead data from the AppExceptions table Microsoft.Insights/Logs/ApplicationInsights/ReadRead data from the ApplicationInsights table Microsoft.Insights/Logs/AppMetrics/ReadRead data from the AppMetrics table Microsoft.Insights/Logs/AppPageViews/ReadRead data from the AppPageViews table Microsoft.Insights/Logs/AppPerformanceCounters/ReadRead data from the AppPerformanceCounters table Microsoft.Insights/Logs/AppPlatformLogsforSpring/ReadRead data from the AppPlatformLogsforSpring table Microsoft.Insights/Logs/AppPlatformSystemLogs/ReadRead data from the AppPlatformSystemLogs table Microsoft.Insights/Logs/AppRequests/ReadRead data from the AppRequests table Microsoft.Insights/Logs/AppServiceAntivirusScanLogs/ReadRead data from the AppServiceAntivirusScanLogs table Microsoft.Insights/Logs/AppServiceAppLogs/ReadRead data from the AppServiceAppLogs table Microsoft.Insights/Logs/AppServiceAuditLogs/ReadRead data from the AppServiceAuditLogs table Microsoft.Insights/Logs/AppServiceConsoleLogs/ReadRead data from the AppServiceConsoleLogs table Microsoft.Insights/Logs/AppServiceEnvironmentPlatformLogs/ReadRead data from the AppServiceEnvironmentPlatformLogs table Microsoft.Insights/Logs/AppServiceFileAuditLogs/ReadRead data from the AppServiceFileAuditLogs table Microsoft.Insights/Logs/AppServiceHTTPLogs/ReadRead data from the AppServiceHTTPLogs table Microsoft.Insights/Logs/AppServicePlatformLogs/ReadRead data from the AppServicePlatformLogs table Microsoft.Insights/Logs/AppSystemEvents/ReadRead data from the AppSystemEvents table Microsoft.Insights/Logs/AppTraces/ReadRead data from the AppTraces table Microsoft.Insights/Logs/AuditLogs/ReadRead data from the AuditLogs table Microsoft.Insights/Logs/AutoscaleEvaluationsLog/ReadRead data from the AutoscaleEvaluationsLog table Microsoft.Insights/Logs/AutoscaleScaleActionsLog/ReadRead data from the AutoscaleScaleActionsLog table Microsoft.Insights/Logs/AWSCloudTrail/ReadRead data from the AWSCloudTrail table Microsoft.Insights/Logs/AzureActivity/ReadRead data from the AzureActivity table Microsoft.Insights/Logs/AzureAssessmentRecommendation/ReadRead data from the AzureAssessmentRecommendation table Microsoft.Insights/Logs/AzureDevOpsAuditing/ReadRead data from the AzureDevOpsAuditing table Microsoft.Insights/Logs/AzureDiagnostics/ReadRead data from the AzureDiagnostics table Microsoft.Insights/Logs/AzureMetrics/ReadRead data from the AzureMetrics table Microsoft.Insights/Logs/BaiClusterEvent/ReadRead data from the BaiClusterEvent table Microsoft.Insights/Logs/BaiClusterNodeEvent/ReadRead data from the BaiClusterNodeEvent table Microsoft.Insights/Logs/BaiJobEvent/ReadRead data from the BaiJobEvent table Microsoft.Insights/Logs/BehaviorAnalytics/ReadRead data from the BehaviorAnalytics table Microsoft.Insights/Logs/BlockchainApplicationLog/ReadRead data from the BlockchainApplicationLog table Microsoft.Insights/Logs/BlockchainProxyLog/ReadRead data from the BlockchainProxyLog table Microsoft.Insights/Logs/BoundPort/ReadRead data from the BoundPort table Microsoft.Insights/Logs/CommonSecurityLog/ReadRead data from the CommonSecurityLog table Microsoft.Insights/Logs/ComputerGroup/ReadRead data from the ComputerGroup table Microsoft.Insights/Logs/ConfigurationChange/ReadRead data from the ConfigurationChange table Microsoft.Insights/Logs/ConfigurationData/ReadRead data from the ConfigurationData table Microsoft.Insights/Logs/ContainerImageInventory/ReadRead data from the ContainerImageInventory table Microsoft.Insights/Logs/ContainerInventory/ReadRead data from the ContainerInventory table Microsoft.Insights/Logs/ContainerLog/ReadRead data from the ContainerLog table Microsoft.Insights/Logs/ContainerNodeInventory/ReadRead data from the ContainerNodeInventory table Microsoft.Insights/Logs/ContainerRegistryLoginEvents/ReadRead data from the ContainerRegistryLoginEvents table Microsoft.Insights/Logs/ContainerRegistryRepositoryEvents/ReadRead data from the ContainerRegistryRepositoryEvents table Microsoft.Insights/Logs/ContainerServiceLog/ReadRead data from the ContainerServiceLog table Microsoft.Insights/Logs/CoreAzureBackup/ReadRead data from the CoreAzureBackup table Microsoft.Insights/Logs/DatabricksAccounts/ReadRead data from the DatabricksAccounts table Microsoft.Insights/Logs/DatabricksClusters/ReadRead data from the DatabricksClusters table Microsoft.Insights/Logs/DatabricksDBFS/ReadRead data from the DatabricksDBFS table Microsoft.Insights/Logs/DatabricksInstancePools/ReadRead data from the DatabricksInstancePools table Microsoft.Insights/Logs/DatabricksJobs/ReadRead data from the DatabricksJobs table Microsoft.Insights/Logs/DatabricksNotebook/ReadRead data from the DatabricksNotebook table Microsoft.Insights/Logs/DatabricksSecrets/ReadRead data from the DatabricksSecrets table Microsoft.Insights/Logs/DatabricksSQLPermissions/ReadRead data from the DatabricksSQLPermissions table Microsoft.Insights/Logs/DatabricksSSH/ReadRead data from the DatabricksSSH table Microsoft.Insights/Logs/DatabricksTables/ReadRead data from the DatabricksTables table Microsoft.Insights/Logs/DatabricksWorkspace/ReadRead data from the DatabricksWorkspace table Microsoft.Insights/Logs/DeviceAppCrash/ReadRead data from the DeviceAppCrash table Microsoft.Insights/Logs/DeviceAppLaunch/ReadRead data from the DeviceAppLaunch table Microsoft.Insights/Logs/DeviceCalendar/ReadRead data from the DeviceCalendar table Microsoft.Insights/Logs/DeviceCleanup/ReadRead data from the DeviceCleanup table Microsoft.Insights/Logs/DeviceConnectSession/ReadRead data from the DeviceConnectSession table Microsoft.Insights/Logs/DeviceEtw/ReadRead data from the DeviceEtw table Microsoft.Insights/Logs/DeviceHardwareHealth/ReadRead data from the DeviceHardwareHealth table Microsoft.Insights/Logs/DeviceHealth/ReadRead data from the DeviceHealth table Microsoft.Insights/Logs/DeviceHeartbeat/ReadRead data from the DeviceHeartbeat table Microsoft.Insights/Logs/DeviceSkypeHeartbeat/ReadRead data from the DeviceSkypeHeartbeat table Microsoft.Insights/Logs/DeviceSkypeSignIn/ReadRead data from the DeviceSkypeSignIn table Microsoft.Insights/Logs/DeviceSleepState/ReadRead data from the DeviceSleepState table Microsoft.Insights/Logs/DHAppFailure/ReadRead data from the DHAppFailure table Microsoft.Insights/Logs/DHAppReliability/ReadRead data from the DHAppReliability table Microsoft.Insights/Logs/DHCPActivity/ReadRead data from the DHCPActivity table Microsoft.Insights/Logs/DHDriverReliability/ReadRead data from the DHDriverReliability table Microsoft.Insights/Logs/DHLogonFailures/ReadRead data from the DHLogonFailures table Microsoft.Insights/Logs/DHLogonMetrics/ReadRead data from the DHLogonMetrics table Microsoft.Insights/Logs/DHOSCrashData/ReadRead data from the DHOSCrashData table Microsoft.Insights/Logs/DHOSReliability/ReadRead data from the DHOSReliability table Microsoft.Insights/Logs/DHWipAppLearning/ReadRead data from the DHWipAppLearning table Microsoft.Insights/Logs/DnsEvents/ReadRead data from the DnsEvents table Microsoft.Insights/Logs/DnsInventory/ReadRead data from the DnsInventory table Microsoft.Insights/Logs/Dynamics365Activity/ReadRead data from the Dynamics365Activity table Microsoft.Insights/Logs/ETWEvent/ReadRead data from the ETWEvent table Microsoft.Insights/Logs/Event/ReadRead data from the Event table Microsoft.Insights/Logs/ExchangeAssessmentRecommendation/ReadRead data from the ExchangeAssessmentRecommendation table Microsoft.Insights/Logs/ExchangeOnlineAssessmentRecommendation/ReadRead data from the ExchangeOnlineAssessmentRecommendation table Microsoft.Insights/Logs/FailedIngestion/ReadRead data from the FailedIngestion table Microsoft.Insights/Logs/FunctionAppLogs/ReadRead data from the FunctionAppLogs table Microsoft.Insights/Logs/Heartbeat/ReadRead data from the Heartbeat table Microsoft.Insights/Logs/HuntingBookmark/ReadRead data from the HuntingBookmark table Microsoft.Insights/Logs/IISAssessmentRecommendation/ReadRead data from the IISAssessmentRecommendation table Microsoft.Insights/Logs/InboundConnection/ReadRead data from the InboundConnection table Microsoft.Insights/Logs/InsightsMetrics/ReadRead data from the InsightsMetrics table Microsoft.Insights/Logs/IntuneAuditLogs/ReadRead data from the IntuneAuditLogs table Microsoft.Insights/Logs/IntuneDeviceComplianceOrg/ReadRead data from the IntuneDeviceComplianceOrg table Microsoft.Insights/Logs/IntuneOperationalLogs/ReadRead data from the IntuneOperationalLogs table Microsoft.Insights/Logs/IoTHubDistributedTracing/ReadRead data from the IoTHubDistributedTracing table Microsoft.Insights/Logs/KubeEvents/ReadRead data from the KubeEvents table Microsoft.Insights/Logs/KubeHealth/ReadRead data from the KubeHealth table Microsoft.Insights/Logs/KubeMonAgentEvents/ReadRead data from the KubeMonAgentEvents table Microsoft.Insights/Logs/KubeNodeInventory/ReadRead data from the KubeNodeInventory table Microsoft.Insights/Logs/KubePodInventory/ReadRead data from the KubePodInventory table Microsoft.Insights/Logs/KubeServices/ReadRead data from the KubeServices table Microsoft.Insights/Logs/LinuxAuditLog/ReadRead data from the LinuxAuditLog table Microsoft.Insights/Logs/MAApplication/ReadRead data from the MAApplication table Microsoft.Insights/Logs/MAApplicationHealth/ReadRead data from the MAApplicationHealth table Microsoft.Insights/Logs/MAApplicationHealthAlternativeVersions/ReadRead data from the MAApplicationHealthAlternativeVersions table Microsoft.Insights/Logs/MAApplicationHealthIssues/ReadRead data from the MAApplicationHealthIssues table Microsoft.Insights/Logs/MAApplicationInstance/ReadRead data from the MAApplicationInstance table Microsoft.Insights/Logs/MAApplicationInstanceReadiness/ReadRead data from the MAApplicationInstanceReadiness table Microsoft.Insights/Logs/MAApplicationReadiness/ReadRead data from the MAApplicationReadiness table Microsoft.Insights/Logs/MADeploymentPlan/ReadRead data from the MADeploymentPlan table Microsoft.Insights/Logs/MADevice/ReadRead data from the MADevice table Microsoft.Insights/Logs/MADeviceNotEnrolled/ReadRead data from the MADeviceNotEnrolled table Microsoft.Insights/Logs/MADeviceNRT/ReadRead data from the MADeviceNRT table Microsoft.Insights/Logs/MADevicePnPHealth/ReadRead data from the MADevicePnPHealth table Microsoft.Insights/Logs/MADevicePnPHealthAlternativeVersions/ReadRead data from the MADevicePnPHealthAlternativeVersions table Microsoft.Insights/Logs/MADevicePnPHealthIssues/ReadRead data from the MADevicePnPHealthIssues table Microsoft.Insights/Logs/MADeviceReadiness/ReadRead data from the MADeviceReadiness table Microsoft.Insights/Logs/MADriverInstanceReadiness/ReadRead data from the MADriverInstanceReadiness table Microsoft.Insights/Logs/MADriverReadiness/ReadRead data from the MADriverReadiness table Microsoft.Insights/Logs/MAOfficeAddin/ReadRead data from the MAOfficeAddin table Microsoft.Insights/Logs/MAOfficeAddinEntityHealth/ReadRead data from the MAOfficeAddinEntityHealth table Microsoft.Insights/Logs/MAOfficeAddinHealth/ReadRead data from the MAOfficeAddinHealth table Microsoft.Insights/Logs/MAOfficeAddinHealthEventNRT/ReadRead data from the MAOfficeAddinHealthEventNRT table Microsoft.Insights/Logs/MAOfficeAddinHealthIssues/ReadRead data from the MAOfficeAddinHealthIssues table Microsoft.Insights/Logs/MAOfficeAddinInstance/ReadRead data from the MAOfficeAddinInstance table Microsoft.Insights/Logs/MAOfficeAddinInstanceReadiness/ReadRead data from the MAOfficeAddinInstanceReadiness table Microsoft.Insights/Logs/MAOfficeAddinReadiness/ReadRead data from the MAOfficeAddinReadiness table Microsoft.Insights/Logs/MAOfficeApp/ReadRead data from the MAOfficeApp table Microsoft.Insights/Logs/MAOfficeAppCrashesNRT/ReadRead data from the MAOfficeAppCrashesNRT table Microsoft.Insights/Logs/MAOfficeAppHealth/ReadRead data from the MAOfficeAppHealth table Microsoft.Insights/Logs/MAOfficeAppInstance/ReadRead data from the MAOfficeAppInstance table Microsoft.Insights/Logs/MAOfficeAppInstanceHealth/ReadRead data from the MAOfficeAppInstanceHealth table Microsoft.Insights/Logs/MAOfficeAppReadiness/ReadRead data from the MAOfficeAppReadiness table Microsoft.Insights/Logs/MAOfficeAppSessionsNRT/ReadRead data from the MAOfficeAppSessionsNRT table Microsoft.Insights/Logs/MAOfficeBuildInfo/ReadRead data from the MAOfficeBuildInfo table Microsoft.Insights/Logs/MAOfficeCurrencyAssessment/ReadRead data from the MAOfficeCurrencyAssessment table Microsoft.Insights/Logs/MAOfficeCurrencyAssessmentDailyCounts/ReadRead data from the MAOfficeCurrencyAssessmentDailyCounts table Microsoft.Insights/Logs/MAOfficeDeploymentStatus/ReadRead data from the MAOfficeDeploymentStatus table Microsoft.Insights/Logs/MAOfficeDeploymentStatusNRT/ReadRead data from the MAOfficeDeploymentStatusNRT table Microsoft.Insights/Logs/MAOfficeMacroErrorNRT/ReadRead data from the MAOfficeMacroErrorNRT table Microsoft.Insights/Logs/MAOfficeMacroGlobalHealth/ReadRead data from the MAOfficeMacroGlobalHealth table Microsoft.Insights/Logs/MAOfficeMacroHealth/ReadRead data from the MAOfficeMacroHealth table Microsoft.Insights/Logs/MAOfficeMacroHealthIssues/ReadRead data from the MAOfficeMacroHealthIssues table Microsoft.Insights/Logs/MAOfficeMacroIssueInstanceReadiness/ReadRead data from the MAOfficeMacroIssueInstanceReadiness table Microsoft.Insights/Logs/MAOfficeMacroIssueReadiness/ReadRead data from the MAOfficeMacroIssueReadiness table Microsoft.Insights/Logs/MAOfficeMacroSummary/ReadRead data from the MAOfficeMacroSummary table Microsoft.Insights/Logs/MAOfficeSuite/ReadRead data from the MAOfficeSuite table Microsoft.Insights/Logs/MAOfficeSuiteInstance/ReadRead data from the MAOfficeSuiteInstance table Microsoft.Insights/Logs/MAProposedPilotDevices/ReadRead data from the MAProposedPilotDevices table Microsoft.Insights/Logs/MAWindowsBuildInfo/ReadRead data from the MAWindowsBuildInfo table Microsoft.Insights/Logs/MAWindowsCurrencyAssessment/ReadRead data from the MAWindowsCurrencyAssessment table Microsoft.Insights/Logs/MAWindowsCurrencyAssessmentDailyCounts/ReadRead data from the MAWindowsCurrencyAssessmentDailyCounts table Microsoft.Insights/Logs/MAWindowsDeploymentStatus/ReadRead data from the MAWindowsDeploymentStatus table Microsoft.Insights/Logs/MAWindowsDeploymentStatusNRT/ReadRead data from the MAWindowsDeploymentStatusNRT table Microsoft.Insights/Logs/MAWindowsSysReqInstanceReadiness/ReadRead data from the MAWindowsSysReqInstanceReadiness table Microsoft.Insights/Logs/McasShadowItReporting/ReadRead data from the McasShadowItReporting table Microsoft.Insights/Logs/MicrosoftAzureBastionAuditLogs/ReadRead data from the MicrosoftAzureBastionAuditLogs table Microsoft.Insights/Logs/MicrosoftDataShareReceivedSnapshotLog/ReadRead data from the MicrosoftDataShareReceivedSnapshotLog table Microsoft.Insights/Logs/MicrosoftDataShareSentSnapshotLog/ReadRead data from the MicrosoftDataShareSentSnapshotLog table Microsoft.Insights/Logs/MicrosoftDataShareShareLog/ReadRead data from the MicrosoftDataShareShareLog table Microsoft.Insights/Logs/MicrosoftDynamicsTelemetryPerformanceLogs/ReadRead data from the MicrosoftDynamicsTelemetryPerformanceLogs table Microsoft.Insights/Logs/MicrosoftDynamicsTelemetrySystemMetricsLogs/ReadRead data from the MicrosoftDynamicsTelemetrySystemMetricsLogs table Microsoft.Insights/Logs/MicrosoftHealthcareApisAuditLogs/ReadRead data from the MicrosoftHealthcareApisAuditLogs table Microsoft.Insights/Logs/NetworkMonitoring/ReadRead data from the NetworkMonitoring table Microsoft.Insights/Logs/OfficeActivity/ReadRead data from the OfficeActivity table Microsoft.Insights/Logs/Operation/ReadRead data from the Operation table Microsoft.Insights/Logs/OutboundConnection/ReadRead data from the OutboundConnection table Microsoft.Insights/Logs/Perf/ReadRead data from the Perf table Microsoft.Insights/Logs/ProtectionStatus/ReadRead data from the ProtectionStatus table Microsoft.Insights/Logs/ReservedAzureCommonFields/ReadRead data from the ReservedAzureCommonFields table Microsoft.Insights/Logs/ReservedCommonFields/ReadRead data from the ReservedCommonFields table Microsoft.Insights/Logs/SCCMAssessmentRecommendation/ReadRead data from the SCCMAssessmentRecommendation table Microsoft.Insights/Logs/SCOMAssessmentRecommendation/ReadRead data from the SCOMAssessmentRecommendation table Microsoft.Insights/Logs/SecurityAlert/ReadRead data from the SecurityAlert table Microsoft.Insights/Logs/SecurityBaseline/ReadRead data from the SecurityBaseline table Microsoft.Insights/Logs/SecurityBaselineSummary/ReadRead data from the SecurityBaselineSummary table Microsoft.Insights/Logs/SecurityDetection/ReadRead data from the SecurityDetection table Microsoft.Insights/Logs/SecurityEvent/ReadRead data from the SecurityEvent table Microsoft.Insights/Logs/SecurityIncident/ReadRead data from the SecurityIncident table Microsoft.Insights/Logs/SecurityIoTRawEvent/ReadRead data from the SecurityIoTRawEvent table Microsoft.Insights/Logs/SecurityNestedRecommendation/ReadRead data from the SecurityNestedRecommendation table Microsoft.Insights/Logs/SecurityRecommendation/ReadRead data from the SecurityRecommendation table Microsoft.Insights/Logs/ServiceFabricOperationalEvent/ReadRead data from the ServiceFabricOperationalEvent table Microsoft.Insights/Logs/ServiceFabricReliableActorEvent/ReadRead data from the ServiceFabricReliableActorEvent table Microsoft.Insights/Logs/ServiceFabricReliableServiceEvent/ReadRead data from the ServiceFabricReliableServiceEvent table Microsoft.Insights/Logs/SfBAssessmentRecommendation/ReadRead data from the SfBAssessmentRecommendation table Microsoft.Insights/Logs/SfBOnlineAssessmentRecommendation/ReadRead data from the SfBOnlineAssessmentRecommendation table Microsoft.Insights/Logs/SharePointOnlineAssessmentRecommendation/ReadRead data from the SharePointOnlineAssessmentRecommendation table Microsoft.Insights/Logs/SignalRServiceDiagnosticLogs/ReadRead data from the SignalRServiceDiagnosticLogs table Microsoft.Insights/Logs/SigninLogs/ReadRead data from the SigninLogs table Microsoft.Insights/Logs/SPAssessmentRecommendation/ReadRead data from the SPAssessmentRecommendation table Microsoft.Insights/Logs/SQLAssessmentRecommendation/ReadRead data from the SQLAssessmentRecommendation table Microsoft.Insights/Logs/SqlDataClassification/ReadRead data from the SqlDataClassification table Microsoft.Insights/Logs/SQLQueryPerformance/ReadRead data from the SQLQueryPerformance table Microsoft.Insights/Logs/SqlVulnerabilityAssessmentResult/ReadRead data from the SqlVulnerabilityAssessmentResult table Microsoft.Insights/Logs/StorageBlobLogs/ReadRead data from the StorageBlobLogs table Microsoft.Insights/Logs/StorageFileLogs/ReadRead data from the StorageFileLogs table Microsoft.Insights/Logs/StorageQueueLogs/ReadRead data from the StorageQueueLogs table Microsoft.Insights/Logs/StorageTableLogs/ReadRead data from the StorageTableLogs table Microsoft.Insights/Logs/SucceededIngestion/ReadRead data from the SucceededIngestion table Microsoft.Insights/Logs/Syslog/ReadRead data from the Syslog table Microsoft.Insights/Logs/SysmonEvent/ReadRead data from the SysmonEvent table Microsoft.Insights/Logs/Tables.Custom/ReadReading data from any custom log Microsoft.Insights/Logs/ThreatIntelligenceIndicator/ReadRead data from the ThreatIntelligenceIndicator table Microsoft.Insights/Logs/TSIIngress/ReadRead data from the TSIIngress table Microsoft.Insights/Logs/UAApp/ReadRead data from the UAApp table Microsoft.Insights/Logs/UAComputer/ReadRead data from the UAComputer table Microsoft.Insights/Logs/UAComputerRank/ReadRead data from the UAComputerRank table Microsoft.Insights/Logs/UADriver/ReadRead data from the UADriver table Microsoft.Insights/Logs/UADriverProblemCodes/ReadRead data from the UADriverProblemCodes table Microsoft.Insights/Logs/UAFeedback/ReadRead data from the UAFeedback table Microsoft.Insights/Logs/UAHardwareSecurity/ReadRead data from the UAHardwareSecurity table Microsoft.Insights/Logs/UAIESiteDiscovery/ReadRead data from the UAIESiteDiscovery table Microsoft.Insights/Logs/UAOfficeAddIn/ReadRead data from the UAOfficeAddIn table Microsoft.Insights/Logs/UAProposedActionPlan/ReadRead data from the UAProposedActionPlan table Microsoft.Insights/Logs/UASysReqIssue/ReadRead data from the UASysReqIssue table Microsoft.Insights/Logs/UAUpgradedComputer/ReadRead data from the UAUpgradedComputer table Microsoft.Insights/Logs/Update/ReadRead data from the Update table Microsoft.Insights/Logs/UpdateRunProgress/ReadRead data from the UpdateRunProgress table Microsoft.Insights/Logs/UpdateSummary/ReadRead data from the UpdateSummary table Microsoft.Insights/Logs/Usage/ReadRead data from the Usage table Microsoft.Insights/Logs/UserAccessAnalytics/ReadRead data from the UserAccessAnalytics table Microsoft.Insights/Logs/UserPeerAnalytics/ReadRead data from the UserPeerAnalytics table Microsoft.Insights/Logs/VMBoundPort/ReadRead data from the VMBoundPort table Microsoft.Insights/Logs/VMComputer/ReadRead data from the VMComputer table Microsoft.Insights/Logs/VMConnection/ReadRead data from the VMConnection table Microsoft.Insights/Logs/VMProcess/ReadRead data from the VMProcess table Microsoft.Insights/Logs/W3CIISLog/ReadRead data from the W3CIISLog table Microsoft.Insights/Logs/WaaSDeploymentStatus/ReadRead data from the WaaSDeploymentStatus table Microsoft.Insights/Logs/WaaSInsiderStatus/ReadRead data from the WaaSInsiderStatus table Microsoft.Insights/Logs/WaaSUpdateStatus/ReadRead data from the WaaSUpdateStatus table Microsoft.Insights/Logs/WDAVStatus/ReadRead data from the WDAVStatus table Microsoft.Insights/Logs/WDAVThreat/ReadRead data from the WDAVThreat table Microsoft.Insights/Logs/WindowsClientAssessmentRecommendation/ReadRead data from the WindowsClientAssessmentRecommendation table Microsoft.Insights/Logs/WindowsEvent/ReadRead data from the WindowsEvent table Microsoft.Insights/Logs/WindowsFirewall/ReadRead data from the WindowsFirewall table Microsoft.Insights/Logs/WindowsServerAssessmentRecommendation/ReadRead data from the WindowsServerAssessmentRecommendation table Microsoft.Insights/Logs/WireData/ReadRead data from the WireData table Microsoft.Insights/Logs/WorkloadMonitoringPerf/ReadRead data from the WorkloadMonitoringPerf table Microsoft.Insights/Logs/WUDOAggregatedStatus/ReadRead data from the WUDOAggregatedStatus table Microsoft.Insights/Logs/WUDOStatus/ReadRead data from the WUDOStatus table Microsoft.Insights/Logs/WVDCheckpoints/ReadRead data from the WVDCheckpoints table Microsoft.Insights/Logs/WVDConnections/ReadRead data from the WVDConnections table Microsoft.Insights/Logs/WVDErrors/ReadRead data from the WVDErrors table Microsoft.Insights/Logs/WVDFeeds/ReadRead data from the WVDFeeds table Microsoft.Insights/Logs/WVDHostRegistrations/ReadRead data from the WVDHostRegistrations table Microsoft.Insights/Logs/WVDManagement/ReadRead data from the WVDManagement table Microsoft.Insights/MetricAlerts/WriteCreate or update a metric alert Microsoft.Insights/MetricAlerts/DeleteDelete a metric alert Microsoft.Insights/MetricAlerts/ReadRead a metric alert Microsoft.Insights/MetricAlerts/Status/ReadRead metric alert status Microsoft.Insights/MetricBaselines/ReadRead metric baselines Microsoft.Insights/MetricDefinitions/ReadRead metric definitions Microsoft.Insights/MetricDefinitions/Microsoft.Insights/ReadRead metric definitions Microsoft.Insights/MetricDefinitions/providers/Microsoft.Insights/ReadRead metric definitions Microsoft.Insights/Metricnamespaces/ReadRead metric namespaces Microsoft.Insights/Metrics/ReadRead metrics Microsoft.Insights/Metrics/Microsoft.Insights/ReadRead metrics Microsoft.Insights/Metrics/providers/Metrics/ReadRead metrics Microsoft.Insights/MonitoredObjects/ReadRead a monitored object Microsoft.Insights/MonitoredObjects/WriteCreate or update a monitored object Microsoft.Insights/MonitoredObjects/DeleteDelete a monitored object Microsoft.Insights/NotificationStatus/ReadGet the test notification status/detail Microsoft.Insights/Operations/ReadRead operations Microsoft.Insights/PrivateLinkScopeOperationStatuses/ReadRead a private link scoped operation status Microsoft.Insights/PrivateLinkScopes/ReadRead a private link scope Microsoft.Insights/PrivateLinkScopes/WriteCreate or update a private link scope Microsoft.Insights/PrivateLinkScopes/DeleteDelete a private link scope Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnectionsApproval/actionApprove or reject a connection to a Private Endpoint resource of Microsoft.Network provider Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnectionProxies/ReadRead a private endpoint connection proxy Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnectionProxies/WriteCreate or update a private endpoint connection proxy Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnectionProxies/DeleteDelete a private endpoint connection proxy Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnectionProxies/Validate/ActionValidate a private endpoint connection proxy Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnections/ReadRead a private endpoint connection Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnections/WriteCreate or update a private endpoint connection Microsoft.Insights/PrivateLinkScopes/PrivateEndpointConnections/DeleteDelete a private endpoint connection Microsoft.Insights/PrivateLinkScopes/PrivateLinkResources/ReadRead a private link resource Microsoft.Insights/PrivateLinkScopes/ScopedResources/ReadRead a private link scoped resource Microsoft.Insights/PrivateLinkScopes/ScopedResources/WriteCreate or update a private link scoped resource Microsoft.Insights/PrivateLinkScopes/ScopedResources/DeleteDelete a private link scoped resource Microsoft.Insights/ScheduledQueryRules/WriteWriting a scheduled query rule Microsoft.Insights/ScheduledQueryRules/ReadReading a scheduled query rule Microsoft.Insights/ScheduledQueryRules/DeleteDeleting a scheduled query rule Microsoft.Insights/ScheduledQueryRules/NetworkSecurityPerimeterAssociationProxies/ReadReading a network security perimeter association proxy for scheduled query rules Microsoft.Insights/ScheduledQueryRules/NetworkSecurityPerimeterAssociationProxies/WriteWriting a network security perimeter association proxy for scheduled query rules Microsoft.Insights/ScheduledQueryRules/NetworkSecurityPerimeterAssociationProxies/DeleteDeleting a network security perimeter association proxy for scheduled query rules Microsoft.Insights/ScheduledQueryRules/networkSecurityPerimeterConfigurations/ReadReading a network security perimeter configuration for scheduled query rules Microsoft.Insights/ScheduledQueryRules/networkSecurityPerimeterConfigurations/Reconcile/ActionReconciling network security perimeter configuration for scheduled query rules Microsoft.Insights/Snapshots/ReadRead snapshots generated by Snapshot Debugger Microsoft.Insights/TenantActionGroups/WriteCreate or update a tenant action group Microsoft.Insights/TenantActionGroups/DeleteDelete a tenant action group Microsoft.Insights/TenantActionGroups/ReadRead a tenant action group Microsoft.Insights/Tenants/Register/ActionInitializes the Microsoft Insights provider Microsoft.Insights/topology/ReadRead Topology Microsoft.Insights/transactions/ReadRead Transactions Microsoft.Insights/Webtests/WriteWriting to a webtest configuration Microsoft.Insights/Webtests/DeleteDeleting a webtest configuration Microsoft.Insights/Webtests/ReadReading a webtest configuration Microsoft.Insights/Webtests/GetToken/ReadReading a webtest token Microsoft.Insights/Webtests/MetricDefinitions/ReadReading a webtest metric definitions Microsoft.Insights/Webtests/Metrics/ReadReading a webtest metrics Microsoft.Insights/Workbooks/WriteCreate or update a workbook Microsoft.Insights/Workbooks/DeleteDelete a workbook Microsoft.Insights/Workbooks/ReadRead a workbook Microsoft.Insights/Workbooks/Revisions/ReadGet the workbook revisions Microsoft.Insights/WorkbookTemplates/WriteCreate or update a workbook template Microsoft.Insights/WorkbookTemplates/DeleteDelete a workbook template Microsoft.Insights/WorkbookTemplates/ReadRead a workbook template DataAction Description Microsoft.Insights/DataCollectionRules/Data/WriteSend data to a data collection rule Microsoft.Insights/Metrics/WriteWrite metrics Microsoft.Insights/Telemetry/WriteWrite telemetry
Azure service: Azure Monitor
[!div class="mx-tableFixed"]
Action Description microsoft.monitor/register/actionRegisters the subscription for the Microsoft.Monitor resource provider microsoft.monitor/unregister/actionUnregisters the subscription for the Microsoft.Monitor resource provider microsoft.monitor/accounts/readRead any Monitoring Account microsoft.monitor/accounts/writeCreate or Update any Monitoring Account microsoft.monitor/accounts/deleteDelete any Monitoring Account microsoft.monitor/accounts/privateEndpointConnectionsApproval/actionGive approval to any Monitoring Account Private Endpoint Connection microsoft.monitor/accounts/accessPolicies/readRead any Monitoring Account Access Policy microsoft.monitor/accounts/accessPolicies/writeCreate or Update any Monitoring Account Access Policy microsoft.monitor/accounts/accessPolicies/deleteDelete any Monitoring Account Access Policy microsoft.monitor/accounts/exportRules/readRead any Export Rule microsoft.monitor/accounts/exportRules/writeCreate or Update any Export Rule microsoft.monitor/accounts/exportRules/deleteDelete any Export Rule microsoft.monitor/accounts/issues/readRead an Issue microsoft.monitor/accounts/issues/writeCreate or Update an Issue microsoft.monitor/accounts/issues/deleteDelete an Issue microsoft.monitor/accounts/issues/startInvestigation/actionStart Investigation for an Issue microsoft.monitor/accounts/issues/addOrUpdateAlerts/actionAdd or Update Issue Related Alerts microsoft.monitor/accounts/issues/addOrUpdateResources/actionAdd or Update Issue Related Resources microsoft.monitor/accounts/issues/fetchInvestigationResult/readFetch Investigation Result for an Issue microsoft.monitor/accounts/issues/getInvestigationResult/readGet Investigation Result for an Issue microsoft.monitor/accounts/issues/listAlerts/readList Issue Related Alerts microsoft.monitor/accounts/issues/listResources/readList Issue Related Resources microsoft.monitor/accounts/metricsContainers/readRead Monitoring Account Metrics Container microsoft.monitor/accounts/metricsContainers/writeWrite Monitoring Account Metrics Container microsoft.monitor/accounts/privateEndpointConnectionProxies/readRead any Monitoring Account Private Endpoint Connection Proxy microsoft.monitor/accounts/privateEndpointConnectionProxies/writeCreate or Update any Monitoring Account Private Endpoint Connection Proxy microsoft.monitor/accounts/privateEndpointConnectionProxies/deleteDelete any Monitoring Account Private Endpoint Connection Proxy microsoft.monitor/accounts/privateEndpointConnectionProxies/validate/actionPerform validation on any Monitoring Account Private Endpoint Connection Proxy microsoft.monitor/accounts/privateEndpointConnectionProxies/operationResults/readRead Status of any Private Endpoint Connection Proxy Asynchronous Operation microsoft.monitor/accounts/privateEndpointConnections/readRead any Monitoring Account Private Endpoint Connection microsoft.monitor/accounts/privateEndpointConnections/writeCreate or Update any Monitoring Account Private Endpoint Connection microsoft.monitor/accounts/privateEndpointConnections/deleteDelete any Monitoring Account Private Endpoint Connection microsoft.monitor/accounts/privateEndpointConnections/operationResults/readRead Status of any Private Endpoint Connections Asynchronous Operation microsoft.monitor/accounts/privateLinkResources/readRead all Monitoring Account Private Link Resources microsoft.monitor/crossTenantPermissions/readRead Cross-Tenant Permissions for the given scope microsoft.monitor/crossTenantPermissions/writeCreate or Update Cross-Tenant Permissions for the given scope microsoft.monitor/crossTenantPermissions/deleteDelete Cross-Tenant Permissions for the given scope microsoft.monitor/investigations/readRead any Investigation microsoft.monitor/investigations/writeCreate or Update any Investigation microsoft.monitor/investigations/deleteDelete any Investigation microsoft.monitor/locations/operationStatuses/readRead any Operation Status microsoft.monitor/locations/operationStatuses/writeCreate or Update any Operation Status microsoft.monitor/operations/readRead All Operations microsoft.monitor/pipelineGroups/readRead any Pipeline Group microsoft.monitor/pipelineGroups/writeCreate or Update any Pipeline Group microsoft.monitor/pipelineGroups/deleteDelete any Pipeline Group microsoft.monitor/settings/readRead Azure Monitor settings for the given scope microsoft.monitor/settings/writeCreate or Update Azure Monitor settings for the given scope microsoft.monitor/settings/deleteDelete Azure Monitor Settings for the given scope microsoft.monitor/slis/readRead any SLI microsoft.monitor/slis/writeCreate or Update any SLI microsoft.monitor/slis/deleteDelete any SLI DataAction Description microsoft.monitor/accounts/data/metrics/readRead metrics data in any Monitoring Account microsoft.monitor/accounts/data/metrics/writeWrite metrics data to any Monitoring Account
Azure service: Azure Monitor
[!div class="mx-tableFixed"]
Action Description Microsoft.OperationalInsights/register/actionRegister a subscription to a resource provider. Microsoft.OperationalInsights/unregister/actionUnRegister a subscription to a resource provider. Microsoft.OperationalInsights/querypacks/actionPerform Query Pack Action. Microsoft.OperationalInsights/clusters/readGet Cluster Microsoft.OperationalInsights/clusters/writeCreate or updates a Cluster Microsoft.OperationalInsights/clusters/deleteDelete Cluster Microsoft.OperationalInsights/clusters/operationresults/readGets the result of the asynchronous clusters operation. Microsoft.OperationalInsights/deletedworkspaces/readLists workspaces in soft deleted period. Microsoft.OperationalInsights/linktargets/readLists workspaces in soft deleted period. Microsoft.OperationalInsights/locations/operationstatuses/readGet Log Analytics Azure Async Operation Status Microsoft.OperationalInsights/locations/workspaces/failover/actionInitiates workspace failover to replication location. Microsoft.OperationalInsights/operations/readLists all of the available OperationalInsights REST API operations. Microsoft.OperationalInsights/querypacks/readGet Query Pack. Microsoft.OperationalInsights/querypacks/writeCreate or update Query Pack. Microsoft.OperationalInsights/querypacks/deleteDelete Query Pack. Microsoft.OperationalInsights/querypacks/queries/actionPerform Action on Queries in Query Pack. Microsoft.OperationalInsights/querypacks/queries/readGet Query Pack Queries. Microsoft.OperationalInsights/querypacks/queries/writeCreate or update Query Pack Queries. Microsoft.OperationalInsights/querypacks/queries/deleteDelete Query Pack Queries. Microsoft.OperationalInsights/workspaces/writeCreates a new workspace or links to an existing workspace by providing the customer id from the existing workspace. Microsoft.OperationalInsights/workspaces/readGets an existing workspace Microsoft.OperationalInsights/workspaces/deleteDeletes a workspace. If the workspace was linked to an existing workspace at creation time then the workspace it was linked to is not deleted. Microsoft.OperationalInsights/workspaces/failback/actionInitiates workspace failback. Microsoft.OperationalInsights/workspaces/sharedkeys/actionRetrieves the shared keys for the workspace. These keys are used to connect Microsoft Operational Insights agents to the workspace. Microsoft.OperationalInsights/workspaces/listKeys/actionRetrieves the list keys for the workspace. These keys are used to connect Microsoft Operational Insights agents to the workspace. Microsoft.OperationalInsights/workspaces/regenerateSharedKey/actionRegenerates the specified workspace shared key Microsoft.OperationalInsights/workspaces/search/actionExecutes a search query Microsoft.OperationalInsights/workspaces/purge/actionDelete specified data by query from workspace. Microsoft.OperationalInsights/workspaces/customfields/actionExtract custom fields. Microsoft.OperationalInsights/workspaces/analytics/query/actionSearch using new engine. Microsoft.OperationalInsights/workspaces/analytics/query/schema/readGet search schema V2. Microsoft.OperationalInsights/workspaces/api/query/actionSearch using new engine. Microsoft.OperationalInsights/workspaces/api/query/schema/readGet search schema V2. Microsoft.OperationalInsights/workspaces/availableservicetiers/readList of all the available service tiers for workspace. Microsoft.OperationalInsights/workspaces/configurationscopes/readGet configuration scope in a workspace. Microsoft.OperationalInsights/workspaces/configurationscopes/writeCreate configuration scope in a workspace. Microsoft.OperationalInsights/workspaces/configurationscopes/deleteDelete configuration scope in a workspace. Microsoft.OperationalInsights/workspaces/customfields/writeCreate or update a custom field. Microsoft.OperationalInsights/workspaces/customfields/readGet a custom field. Microsoft.OperationalInsights/workspaces/customfields/deleteDelete a custom field. Microsoft.OperationalInsights/workspaces/dataexports/readGet data export. Microsoft.OperationalInsights/workspaces/dataexports/writeCreate or update specific data export. Microsoft.OperationalInsights/workspaces/dataexports/deleteDelete specific Data Export/ Microsoft.OperationalInsights/workspaces/datasources/readGet data source under a workspace. Microsoft.OperationalInsights/workspaces/datasources/writeUpsert Data Source Microsoft.OperationalInsights/workspaces/datasources/deleteDelete data source under a workspace. Microsoft.OperationalInsights/workspaces/features/clientGroups/members/readGet the Client Groups Members of a resource. Microsoft.OperationalInsights/workspaces/features/generateMap/readGet the Service Map of a resource. Microsoft.OperationalInsights/workspaces/features/machineGroups/readGet the Service Map Machine Groups of a resource. Microsoft.OperationalInsights/workspaces/features/serverGroups/members/readGet the Server Groups Members of a resource. Microsoft.OperationalInsights/workspaces/gateways/deleteRemoves a gateway configured for the workspace. Microsoft.OperationalInsights/workspaces/intelligencepacks/readLists all intelligence packs that are visible for a given workspace and also lists whether the pack is enabled or disabled for that workspace. Microsoft.OperationalInsights/workspaces/intelligencepacks/enable/actionEnables an intelligence pack for a given workspace. Microsoft.OperationalInsights/workspaces/intelligencepacks/disable/actionDisables an intelligence pack for a given workspace. Microsoft.OperationalInsights/workspaces/linkedservices/readGet linked services under given workspace. Microsoft.OperationalInsights/workspaces/linkedservices/writeCreate or update linked services under given workspace. Microsoft.OperationalInsights/workspaces/linkedservices/deleteDelete linked services under given workspace. Microsoft.OperationalInsights/workspaces/linkedstorageaccounts/readGet a Log Analytics Workspace Linked Storage Account. Microsoft.OperationalInsights/workspaces/linkedstorageaccounts/writePut a Log Analytics Workspace Linked Storage Account. Microsoft.OperationalInsights/workspaces/linkedstorageaccounts/deleteDelete a Log Analytics Workspace Linked Storage Account. Microsoft.OperationalInsights/workspaces/listKeys/readRetrieves the list keys for the workspace. These keys are used to connect Microsoft Operational Insights agents to the workspace. Microsoft.OperationalInsights/workspaces/managementgroups/readGets the names and metadata for System Center Operations Manager management groups connected to this workspace. Microsoft.OperationalInsights/workspaces/metricDefinitions/readGet Metric Definitions under workspace Microsoft.OperationalInsights/workspaces/networkSecurityPerimeterAssociationProxies/writeWrite Network Security Perimeter Association Proxies. Microsoft.OperationalInsights/workspaces/networkSecurityPerimeterAssociationProxies/readRead Network Security Perimeter Association Proxies. Microsoft.OperationalInsights/workspaces/networkSecurityPerimeterAssociationProxies/deleteDelete Network Security Perimeter Association Proxies. Microsoft.OperationalInsights/workspaces/networkSecurityPerimeterConfigurations/reconcile/actionReconcile operation for Network Security Perimeter Configurations. Microsoft.OperationalInsights/workspaces/networkSecurityPerimeterConfigurations/readRead Network Security Perimeter Configurations. Microsoft.OperationalInsights/workspaces/notificationsettings/readGet the user's notification settings for the workspace. Microsoft.OperationalInsights/workspaces/notificationsettings/writeSet the user's notification settings for the workspace. Microsoft.OperationalInsights/workspaces/notificationsettings/deleteDelete the user's notification settings for the workspace. Microsoft.OperationalInsights/workspaces/operations/readGets the status of an OperationalInsights workspace operation. Microsoft.OperationalInsights/workspaces/providers/Microsoft.Insights/diagnosticSettings/ReadGets the diagnostic setting for the resource Microsoft.OperationalInsights/workspaces/providers/Microsoft.Insights/diagnosticSettings/WriteCreates or updates the diagnostic setting for the resource Microsoft.OperationalInsights/workspaces/providers/Microsoft.Insights/logDefinitions/readGets the available logs for a Workspace Microsoft.OperationalInsights/workspaces/query/readRun queries over the data in the workspace Microsoft.OperationalInsights/workspaces/query/AACAudit/readRead data from the AACAudit table Microsoft.OperationalInsights/workspaces/query/AACHttpRequest/readRead data from the AACHttpRequest table Microsoft.OperationalInsights/workspaces/query/AADB2CRequestLogs/readRead data from the AADB2CRequestLogs table Microsoft.OperationalInsights/workspaces/query/AADCustomSecurityAttributeAuditLogs/readRead data from the AADCustomSecurityAttributeAuditLogs table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesAccountLogon/readRead data from the AADDomainServicesAccountLogon table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesAccountManagement/readRead data from the AADDomainServicesAccountManagement table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesDirectoryServiceAccess/readRead data from the AADDomainServicesDirectoryServiceAccess table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesDNSAuditsDynamicUpdates/readRead data from the AADDomainServicesDNSAuditsDynamicUpdates table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesDNSAuditsGeneral/readRead data from the AADDomainServicesDNSAuditsGeneral table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesLogonLogoff/readRead data from the AADDomainServicesLogonLogoff table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesPolicyChange/readRead data from the AADDomainServicesPolicyChange table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesPrivilegeUse/readRead data from the AADDomainServicesPrivilegeUse table Microsoft.OperationalInsights/workspaces/query/AADDomainServicesSystemSecurity/readRead data from the AADDomainServicesSystemSecurity table Microsoft.OperationalInsights/workspaces/query/AADGraphActivityLogs/readRead data from the AADGraphActivityLogs table Microsoft.OperationalInsights/workspaces/query/AADManagedIdentitySignInLogs/readRead data from the AADManagedIdentitySignInLogs table Microsoft.OperationalInsights/workspaces/query/AADNonInteractiveUserSignInLogs/readRead data from the AADNonInteractiveUserSignInLogs table Microsoft.OperationalInsights/workspaces/query/AADProvisioningLogs/readRead data from the AADProvisioningLogs table Microsoft.OperationalInsights/workspaces/query/AADRiskyServicePrincipals/readRead data from the AADRiskyServicePrincipals table Microsoft.OperationalInsights/workspaces/query/AADRiskyUsers/readRead data from the AADRiskyUsers table Microsoft.OperationalInsights/workspaces/query/AADServicePrincipalRiskEvents/readRead data from the AADServicePrincipalRiskEvents table Microsoft.OperationalInsights/workspaces/query/AADServicePrincipalSignInLogs/readRead data from the AADServicePrincipalSignInLogs table Microsoft.OperationalInsights/workspaces/query/AADUserRiskEvents/readRead data from the AADUserRiskEvents table Microsoft.OperationalInsights/workspaces/query/ABAPAuditLog/readRead data from the ABAPAuditLog table Microsoft.OperationalInsights/workspaces/query/ABAPAuthorizationDetails/readRead data from the ABAPAuthorizationDetails table Microsoft.OperationalInsights/workspaces/query/ABAPChangeDocsLog/readRead data from the ABAPChangeDocsLog table Microsoft.OperationalInsights/workspaces/query/ABAPTableDataLog/readRead data from the ABAPTableDataLog table Microsoft.OperationalInsights/workspaces/query/ABAPUserDetails/readRead data from the ABAPUserDetails table Microsoft.OperationalInsights/workspaces/query/ABSBotRequests/readRead data from the ABSBotRequests table Microsoft.OperationalInsights/workspaces/query/ACICollaborationAudit/readRead data from the ACICollaborationAudit table Microsoft.OperationalInsights/workspaces/query/ACLTransactionLogs/readRead data from the ACLTransactionLogs table Microsoft.OperationalInsights/workspaces/query/ACLUserDefinedLogs/readRead data from the ACLUserDefinedLogs table Microsoft.OperationalInsights/workspaces/query/ACRConnectedClientList/readRead data from the ACRConnectedClientList table Microsoft.OperationalInsights/workspaces/query/ACREntraAuthenticationAuditLog/readRead data from the ACREntraAuthenticationAuditLog table Microsoft.OperationalInsights/workspaces/query/ACSAdvancedMessagingOperations/readRead data from the ACSAdvancedMessagingOperations table Microsoft.OperationalInsights/workspaces/query/ACSAuthIncomingOperations/readRead data from the ACSAuthIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ACSBillingUsage/readRead data from the ACSBillingUsage table Microsoft.OperationalInsights/workspaces/query/ACSCallAutomationIncomingOperations/readRead data from the ACSCallAutomationIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ACSCallAutomationMediaSummary/readRead data from the ACSCallAutomationMediaSummary table Microsoft.OperationalInsights/workspaces/query/ACSCallAutomationStreamingUsage/readRead data from the ACSCallAutomationStreamingUsage table Microsoft.OperationalInsights/workspaces/query/ACSCallClientMediaStatsTimeSeries/readRead data from the ACSCallClientMediaStatsTimeSeries table Microsoft.OperationalInsights/workspaces/query/ACSCallClientOperations/readRead data from the ACSCallClientOperations table Microsoft.OperationalInsights/workspaces/query/ACSCallClientServiceRequestAndOutcome/readRead data from the ACSCallClientServiceRequestAndOutcome table Microsoft.OperationalInsights/workspaces/query/ACSCallClosedCaptionsSummary/readRead data from the ACSCallClosedCaptionsSummary table Microsoft.OperationalInsights/workspaces/query/ACSCallDiagnostics/readRead data from the ACSCallDiagnostics table Microsoft.OperationalInsights/workspaces/query/ACSCallDiagnosticsUpdates/readRead data from the ACSCallDiagnosticsUpdates table Microsoft.OperationalInsights/workspaces/query/ACSCallingMetrics/readRead data from the ACSCallingMetrics table Microsoft.OperationalInsights/workspaces/query/ACSCallRecordingIncomingOperations/readRead data from the ACSCallRecordingIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ACSCallRecordingSummary/readRead data from the ACSCallRecordingSummary table Microsoft.OperationalInsights/workspaces/query/ACSCallSummary/readRead data from the ACSCallSummary table Microsoft.OperationalInsights/workspaces/query/ACSCallSummaryUpdates/readRead data from the ACSCallSummaryUpdates table Microsoft.OperationalInsights/workspaces/query/ACSCallSurvey/readRead data from the ACSCallSurvey table Microsoft.OperationalInsights/workspaces/query/ACSChatIncomingOperations/readRead data from the ACSChatIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ACSEmailSendMailOperational/readRead data from the ACSEmailSendMailOperational table Microsoft.OperationalInsights/workspaces/query/ACSEmailStatusUpdateOperational/readRead data from the ACSEmailStatusUpdateOperational table Microsoft.OperationalInsights/workspaces/query/ACSEmailUserEngagementOperational/readRead data from the ACSEmailUserEngagementOperational table Microsoft.OperationalInsights/workspaces/query/ACSJobRouterIncomingOperations/readRead data from the ACSJobRouterIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ACSOptOutManagementOperations/readRead data from the ACSOptOutManagementOperations table Microsoft.OperationalInsights/workspaces/query/ACSRoomsIncomingOperations/readRead data from the ACSRoomsIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ACSSMSIncomingOperations/readRead data from the ACSSMSIncomingOperations table Microsoft.OperationalInsights/workspaces/query/ADAssessmentRecommendation/readRead data from the ADAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/AddonAzureBackupAlerts/readRead data from the AddonAzureBackupAlerts table Microsoft.OperationalInsights/workspaces/query/AddonAzureBackupJobs/readRead data from the AddonAzureBackupJobs table Microsoft.OperationalInsights/workspaces/query/AddonAzureBackupPolicy/readRead data from the AddonAzureBackupPolicy table Microsoft.OperationalInsights/workspaces/query/AddonAzureBackupProtectedInstance/readRead data from the AddonAzureBackupProtectedInstance table Microsoft.OperationalInsights/workspaces/query/AddonAzureBackupStorage/readRead data from the AddonAzureBackupStorage table Microsoft.OperationalInsights/workspaces/query/ADFActivityRun/readRead data from the ADFActivityRun table Microsoft.OperationalInsights/workspaces/query/ADFAirflowSchedulerLogs/readRead data from the ADFAirflowSchedulerLogs table Microsoft.OperationalInsights/workspaces/query/ADFAirflowTaskLogs/readRead data from the ADFAirflowTaskLogs table Microsoft.OperationalInsights/workspaces/query/ADFAirflowWebLogs/readRead data from the ADFAirflowWebLogs table Microsoft.OperationalInsights/workspaces/query/ADFAirflowWorkerLogs/readRead data from the ADFAirflowWorkerLogs table Microsoft.OperationalInsights/workspaces/query/ADFPipelineRun/readRead data from the ADFPipelineRun table Microsoft.OperationalInsights/workspaces/query/ADFSandboxActivityRun/readRead data from the ADFSandboxActivityRun table Microsoft.OperationalInsights/workspaces/query/ADFSandboxPipelineRun/readRead data from the ADFSandboxPipelineRun table Microsoft.OperationalInsights/workspaces/query/ADFSSignInLogs/readRead data from the ADFSSignInLogs table Microsoft.OperationalInsights/workspaces/query/ADFSSISIntegrationRuntimeLogs/readRead data from the ADFSSISIntegrationRuntimeLogs table Microsoft.OperationalInsights/workspaces/query/ADFSSISPackageEventMessageContext/readRead data from the ADFSSISPackageEventMessageContext table Microsoft.OperationalInsights/workspaces/query/ADFSSISPackageEventMessages/readRead data from the ADFSSISPackageEventMessages table Microsoft.OperationalInsights/workspaces/query/ADFSSISPackageExecutableStatistics/readRead data from the ADFSSISPackageExecutableStatistics table Microsoft.OperationalInsights/workspaces/query/ADFSSISPackageExecutionComponentPhases/readRead data from the ADFSSISPackageExecutionComponentPhases table Microsoft.OperationalInsights/workspaces/query/ADFSSISPackageExecutionDataStatistics/readRead data from the ADFSSISPackageExecutionDataStatistics table Microsoft.OperationalInsights/workspaces/query/ADFTriggerRun/readRead data from the ADFTriggerRun table Microsoft.OperationalInsights/workspaces/query/ADReplicationResult/readRead data from the ADReplicationResult table Microsoft.OperationalInsights/workspaces/query/ADSecurityAssessmentRecommendation/readRead data from the ADSecurityAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/ADTDataHistoryOperation/readRead data from the ADTDataHistoryOperation table Microsoft.OperationalInsights/workspaces/query/ADTDigitalTwinsOperation/readRead data from the ADTDigitalTwinsOperation table Microsoft.OperationalInsights/workspaces/query/ADTEventRoutesOperation/readRead data from the ADTEventRoutesOperation table Microsoft.OperationalInsights/workspaces/query/ADTModelsOperation/readRead data from the ADTModelsOperation table Microsoft.OperationalInsights/workspaces/query/ADTQueryOperation/readRead data from the ADTQueryOperation table Microsoft.OperationalInsights/workspaces/query/ADXCommand/readRead data from the ADXCommand table Microsoft.OperationalInsights/workspaces/query/ADXDataOperation/readRead data from the ADXDataOperation table Microsoft.OperationalInsights/workspaces/query/ADXIngestionBatching/readRead data from the ADXIngestionBatching table Microsoft.OperationalInsights/workspaces/query/ADXJournal/readRead data from the ADXJournal table Microsoft.OperationalInsights/workspaces/query/ADXQuery/readRead data from the ADXQuery table Microsoft.OperationalInsights/workspaces/query/ADXTableDetails/readRead data from the ADXTableDetails table Microsoft.OperationalInsights/workspaces/query/ADXTableUsageStatistics/readRead data from the ADXTableUsageStatistics table Microsoft.OperationalInsights/workspaces/query/AegDataPlaneRequests/readRead data from the AegDataPlaneRequests table Microsoft.OperationalInsights/workspaces/query/AegDeliveryFailureLogs/readRead data from the AegDeliveryFailureLogs table Microsoft.OperationalInsights/workspaces/query/AegPublishFailureLogs/readRead data from the AegPublishFailureLogs table Microsoft.OperationalInsights/workspaces/query/AEWAssignmentBlobLogs/readRead data from the AEWAssignmentBlobLogs table Microsoft.OperationalInsights/workspaces/query/AEWAuditLogs/readRead data from the AEWAuditLogs table Microsoft.OperationalInsights/workspaces/query/AEWComputePipelinesLogs/readRead data from the AEWComputePipelinesLogs table Microsoft.OperationalInsights/workspaces/query/AEWExperimentAssignmentSummary/readRead data from the AEWExperimentAssignmentSummary table Microsoft.OperationalInsights/workspaces/query/AEWExperimentScorecardMetricPairs/readRead data from the AEWExperimentScorecardMetricPairs table Microsoft.OperationalInsights/workspaces/query/AEWExperimentScorecards/readRead data from the AEWExperimentScorecards table Microsoft.OperationalInsights/workspaces/query/AFSAuditLogs/readRead data from the AFSAuditLogs table Microsoft.OperationalInsights/workspaces/query/AGCAccessLogs/readRead data from the AGCAccessLogs table Microsoft.OperationalInsights/workspaces/query/AGCFirewallLogs/readRead data from the AGCFirewallLogs table Microsoft.OperationalInsights/workspaces/query/AggregatedSecurityAlert/readRead data from the AggregatedSecurityAlert table Microsoft.OperationalInsights/workspaces/query/AgriFoodApplicationAuditLogs/readRead data from the AgriFoodApplicationAuditLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodFarmManagementLogs/readRead data from the AgriFoodFarmManagementLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodFarmOperationLogs/readRead data from the AgriFoodFarmOperationLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodInsightLogs/readRead data from the AgriFoodInsightLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodJobProcessedLogs/readRead data from the AgriFoodJobProcessedLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodModelInferenceLogs/readRead data from the AgriFoodModelInferenceLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodProviderAuthLogs/readRead data from the AgriFoodProviderAuthLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodSatelliteLogs/readRead data from the AgriFoodSatelliteLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodSensorManagementLogs/readRead data from the AgriFoodSensorManagementLogs table Microsoft.OperationalInsights/workspaces/query/AgriFoodWeatherLogs/readRead data from the AgriFoodWeatherLogs table Microsoft.OperationalInsights/workspaces/query/AGSGrafanaLoginEvents/readRead data from the AGSGrafanaLoginEvents table Microsoft.OperationalInsights/workspaces/query/AGSGrafanaUsageInsightsEvents/readRead data from the AGSGrafanaUsageInsightsEvents table Microsoft.OperationalInsights/workspaces/query/AGSUpdateEvents/readRead data from the AGSUpdateEvents table Microsoft.OperationalInsights/workspaces/query/AGWAccessLogs/readRead data from the AGWAccessLogs table Microsoft.OperationalInsights/workspaces/query/AGWFirewallLogs/readRead data from the AGWFirewallLogs table Microsoft.OperationalInsights/workspaces/query/AGWPerformanceLogs/readRead data from the AGWPerformanceLogs table Microsoft.OperationalInsights/workspaces/query/AHCIDiagnosticLogs/readRead data from the AHCIDiagnosticLogs table Microsoft.OperationalInsights/workspaces/query/AHDSDeidAuditLogs/readRead data from the AHDSDeidAuditLogs table Microsoft.OperationalInsights/workspaces/query/AHDSDicomAuditLogs/readRead data from the AHDSDicomAuditLogs table Microsoft.OperationalInsights/workspaces/query/AHDSDicomDiagnosticLogs/readRead data from the AHDSDicomDiagnosticLogs table Microsoft.OperationalInsights/workspaces/query/AHDSMedTechDiagnosticLogs/readRead data from the AHDSMedTechDiagnosticLogs table Microsoft.OperationalInsights/workspaces/query/AirflowDagProcessingLogs/readRead data from the AirflowDagProcessingLogs table Microsoft.OperationalInsights/workspaces/query/AKSAudit/readRead data from the AKSAudit table Microsoft.OperationalInsights/workspaces/query/AKSAuditAdmin/readRead data from the AKSAuditAdmin table Microsoft.OperationalInsights/workspaces/query/AKSControlPlane/readRead data from the AKSControlPlane table Microsoft.OperationalInsights/workspaces/query/ALBHealthEvent/readRead data from the ALBHealthEvent table Microsoft.OperationalInsights/workspaces/query/Alert/readRead data from the Alert table Microsoft.OperationalInsights/workspaces/query/AlertEvidence/readRead data from the AlertEvidence table Microsoft.OperationalInsights/workspaces/query/AlertHistory/readRead data from the AlertHistory table Microsoft.OperationalInsights/workspaces/query/AlertInfo/readRead data from the AlertInfo table Microsoft.OperationalInsights/workspaces/query/AmlComputeClusterEvent/readRead data from the AmlComputeClusterEvent table Microsoft.OperationalInsights/workspaces/query/AmlComputeClusterNodeEvent/readRead data from the AmlComputeClusterNodeEvent table Microsoft.OperationalInsights/workspaces/query/AmlComputeCpuGpuUtilization/readRead data from the AmlComputeCpuGpuUtilization table Microsoft.OperationalInsights/workspaces/query/AmlComputeInstanceEvent/readRead data from the AmlComputeInstanceEvent table Microsoft.OperationalInsights/workspaces/query/AmlComputeJobEvent/readRead data from the AmlComputeJobEvent table Microsoft.OperationalInsights/workspaces/query/AmlDataLabelEvent/readRead data from the AmlDataLabelEvent table Microsoft.OperationalInsights/workspaces/query/AmlDataSetEvent/readRead data from the AmlDataSetEvent table Microsoft.OperationalInsights/workspaces/query/AmlDataStoreEvent/readRead data from the AmlDataStoreEvent table Microsoft.OperationalInsights/workspaces/query/AmlDeploymentEvent/readRead data from the AmlDeploymentEvent table Microsoft.OperationalInsights/workspaces/query/AmlEnvironmentEvent/readRead data from the AmlEnvironmentEvent table Microsoft.OperationalInsights/workspaces/query/AmlInferencingEvent/readRead data from the AmlInferencingEvent table Microsoft.OperationalInsights/workspaces/query/AmlModelsEvent/readRead data from the AmlModelsEvent table Microsoft.OperationalInsights/workspaces/query/AmlOnlineEndpointConsoleLog/readRead data from the AmlOnlineEndpointConsoleLog table Microsoft.OperationalInsights/workspaces/query/AmlOnlineEndpointEventLog/readRead data from the AmlOnlineEndpointEventLog table Microsoft.OperationalInsights/workspaces/query/AmlOnlineEndpointTrafficLog/readRead data from the AmlOnlineEndpointTrafficLog table Microsoft.OperationalInsights/workspaces/query/AmlPipelineEvent/readRead data from the AmlPipelineEvent table Microsoft.OperationalInsights/workspaces/query/AmlRegistryReadEventsLog/readRead data from the AmlRegistryReadEventsLog table Microsoft.OperationalInsights/workspaces/query/AmlRegistryWriteEventsLog/readRead data from the AmlRegistryWriteEventsLog table Microsoft.OperationalInsights/workspaces/query/AmlRunEvent/readRead data from the AmlRunEvent table Microsoft.OperationalInsights/workspaces/query/AmlRunStatusChangedEvent/readRead data from the AmlRunStatusChangedEvent table Microsoft.OperationalInsights/workspaces/query/AMSKeyDeliveryRequests/readRead data from the AMSKeyDeliveryRequests table Microsoft.OperationalInsights/workspaces/query/AMSLiveEventOperations/readRead data from the AMSLiveEventOperations table Microsoft.OperationalInsights/workspaces/query/AMSMediaAccountHealth/readRead data from the AMSMediaAccountHealth table Microsoft.OperationalInsights/workspaces/query/AMSStreamingEndpointRequests/readRead data from the AMSStreamingEndpointRequests table Microsoft.OperationalInsights/workspaces/query/AMWMetricsUsageDetails/readRead data from the AMWMetricsUsageDetails table Microsoft.OperationalInsights/workspaces/query/ANFFileAccess/readRead data from the ANFFileAccess table Microsoft.OperationalInsights/workspaces/query/Anomalies/readRead data from the Anomalies table Microsoft.OperationalInsights/workspaces/query/AOIDatabaseQuery/readRead data from the AOIDatabaseQuery table Microsoft.OperationalInsights/workspaces/query/AOIDigestion/readRead data from the AOIDigestion table Microsoft.OperationalInsights/workspaces/query/AOIStorage/readRead data from the AOIStorage table Microsoft.OperationalInsights/workspaces/query/ApiManagementGatewayLlmLog/readRead data from the ApiManagementGatewayLlmLog table Microsoft.OperationalInsights/workspaces/query/ApiManagementGatewayLogs/readRead data from the ApiManagementGatewayLogs table Microsoft.OperationalInsights/workspaces/query/ApiManagementGatewayMCPLog/readRead data from the ApiManagementGatewayMCPLog table Microsoft.OperationalInsights/workspaces/query/ApiManagementWebSocketConnectionLogs/readRead data from the ApiManagementWebSocketConnectionLogs table Microsoft.OperationalInsights/workspaces/query/APIMDevPortalAuditDiagnosticLog/readRead data from the APIMDevPortalAuditDiagnosticLog table Microsoft.OperationalInsights/workspaces/query/AppAvailabilityResults/readRead data from the AppAvailabilityResults table Microsoft.OperationalInsights/workspaces/query/AppBrowserTimings/readRead data from the AppBrowserTimings table Microsoft.OperationalInsights/workspaces/query/AppCenterError/readRead data from the AppCenterError table Microsoft.OperationalInsights/workspaces/query/AppDependencies/readRead data from the AppDependencies table Microsoft.OperationalInsights/workspaces/query/AppEnvSessionConsoleLogs/readRead data from the AppEnvSessionConsoleLogs table Microsoft.OperationalInsights/workspaces/query/AppEnvSessionLifecycleLogs/readRead data from the AppEnvSessionLifecycleLogs table Microsoft.OperationalInsights/workspaces/query/AppEnvSessionPoolEventLogs/readRead data from the AppEnvSessionPoolEventLogs table Microsoft.OperationalInsights/workspaces/query/AppEnvSpringAppConsoleLogs/readRead data from the AppEnvSpringAppConsoleLogs table Microsoft.OperationalInsights/workspaces/query/AppEvents/readRead data from the AppEvents table Microsoft.OperationalInsights/workspaces/query/AppExceptions/readRead data from the AppExceptions table Microsoft.OperationalInsights/workspaces/query/AppGenAIContent/readRead data from the AppGenAIContent table Microsoft.OperationalInsights/workspaces/query/ApplicationInsights/readRead data from the ApplicationInsights table Microsoft.OperationalInsights/workspaces/query/AppMetrics/readRead data from the AppMetrics table Microsoft.OperationalInsights/workspaces/query/AppPageViews/readRead data from the AppPageViews table Microsoft.OperationalInsights/workspaces/query/AppPerformanceCounters/readRead data from the AppPerformanceCounters table Microsoft.OperationalInsights/workspaces/query/AppPlatformBuildLogs/readRead data from the AppPlatformBuildLogs table Microsoft.OperationalInsights/workspaces/query/AppPlatformContainerEventLogs/readRead data from the AppPlatformContainerEventLogs table Microsoft.OperationalInsights/workspaces/query/AppPlatformIngressLogs/readRead data from the AppPlatformIngressLogs table Microsoft.OperationalInsights/workspaces/query/AppPlatformLogsforSpring/readRead data from the AppPlatformLogsforSpring table Microsoft.OperationalInsights/workspaces/query/AppPlatformSystemLogs/readRead data from the AppPlatformSystemLogs table Microsoft.OperationalInsights/workspaces/query/AppRequests/readRead data from the AppRequests table Microsoft.OperationalInsights/workspaces/query/AppServiceAntivirusScanAuditLogs/readRead data from the AppServiceAntivirusScanAuditLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceAppLogs/readRead data from the AppServiceAppLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceAuditLogs/readRead data from the AppServiceAuditLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceAuthenticationLogs/readRead data from the AppServiceAuthenticationLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceConsoleLogs/readRead data from the AppServiceConsoleLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceEnvironmentPlatformLogs/readRead data from the AppServiceEnvironmentPlatformLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceFileAuditLogs/readRead data from the AppServiceFileAuditLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceHTTPLogs/readRead data from the AppServiceHTTPLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceIPSecAuditLogs/readRead data from the AppServiceIPSecAuditLogs table Microsoft.OperationalInsights/workspaces/query/AppServicePlatformLogs/readRead data from the AppServicePlatformLogs table Microsoft.OperationalInsights/workspaces/query/AppServiceServerlessSecurityPluginData/readRead data from the AppServiceServerlessSecurityPluginData table Microsoft.OperationalInsights/workspaces/query/AppSystemEvents/readRead data from the AppSystemEvents table Microsoft.OperationalInsights/workspaces/query/AppTraces/readRead data from the AppTraces table Microsoft.OperationalInsights/workspaces/query/ArcK8sAudit/readRead data from the ArcK8sAudit table Microsoft.OperationalInsights/workspaces/query/ArcK8sAuditAdmin/readRead data from the ArcK8sAuditAdmin table Microsoft.OperationalInsights/workspaces/query/ArcK8sControlPlane/readRead data from the ArcK8sControlPlane table Microsoft.OperationalInsights/workspaces/query/ASCAuditLogs/readRead data from the ASCAuditLogs table Microsoft.OperationalInsights/workspaces/query/ASCDeviceEvents/readRead data from the ASCDeviceEvents table Microsoft.OperationalInsights/workspaces/query/ASimAlertEventLogs/readRead data from the ASimAlertEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimAuditEventLogs/readRead data from the ASimAuditEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimAuthenticationEventLogs/readRead data from the ASimAuthenticationEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimDhcpEventLogs/readRead data from the ASimDhcpEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimDnsActivityLogs/readRead data from the ASimDnsActivityLogs table Microsoft.OperationalInsights/workspaces/query/ASimFileEventLogs/readRead data from the ASimFileEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimNetworkSessionLogs/readRead data from the ASimNetworkSessionLogs table Microsoft.OperationalInsights/workspaces/query/ASimProcessEventLogs/readRead data from the ASimProcessEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimRegistryEventLogs/readRead data from the ASimRegistryEventLogs table Microsoft.OperationalInsights/workspaces/query/ASimUserManagementActivityLogs/readRead data from the ASimUserManagementActivityLogs table Microsoft.OperationalInsights/workspaces/query/ASimWebSessionLogs/readRead data from the ASimWebSessionLogs table Microsoft.OperationalInsights/workspaces/query/ASRJobs/readRead data from the ASRJobs table Microsoft.OperationalInsights/workspaces/query/ASRReplicatedItems/readRead data from the ASRReplicatedItems table Microsoft.OperationalInsights/workspaces/query/ASRv2HealthEvents/readRead data from the ASRv2HealthEvents table Microsoft.OperationalInsights/workspaces/query/ASRv2JobEvents/readRead data from the ASRv2JobEvents table Microsoft.OperationalInsights/workspaces/query/ASRv2ProtectedItems/readRead data from the ASRv2ProtectedItems table Microsoft.OperationalInsights/workspaces/query/ASRv2ReplicationExtensions/readRead data from the ASRv2ReplicationExtensions table Microsoft.OperationalInsights/workspaces/query/ASRv2ReplicationPolicies/readRead data from the ASRv2ReplicationPolicies table Microsoft.OperationalInsights/workspaces/query/ASRv2ReplicationVaults/readRead data from the ASRv2ReplicationVaults table Microsoft.OperationalInsights/workspaces/query/ATCExpressRouteCircuitIpfix/readRead data from the ATCExpressRouteCircuitIpfix table Microsoft.OperationalInsights/workspaces/query/ATCMicrosoftPeeringMetadata/readRead data from the ATCMicrosoftPeeringMetadata table Microsoft.OperationalInsights/workspaces/query/ATCPrivatePeeringMetadata/readRead data from the ATCPrivatePeeringMetadata table Microsoft.OperationalInsights/workspaces/query/AuditLogs/readRead data from the AuditLogs table Microsoft.OperationalInsights/workspaces/query/AutoscaleEvaluationsLog/readRead data from the AutoscaleEvaluationsLog table Microsoft.OperationalInsights/workspaces/query/AutoscaleScaleActionsLog/readRead data from the AutoscaleScaleActionsLog table Microsoft.OperationalInsights/workspaces/query/AVNMConnectivityConfigurationChange/readRead data from the AVNMConnectivityConfigurationChange table Microsoft.OperationalInsights/workspaces/query/AVNMIPAMPoolAllocationChange/readRead data from the AVNMIPAMPoolAllocationChange table Microsoft.OperationalInsights/workspaces/query/AVNMNetworkGroupMembershipChange/readRead data from the AVNMNetworkGroupMembershipChange table Microsoft.OperationalInsights/workspaces/query/AVNMRuleCollectionChange/readRead data from the AVNMRuleCollectionChange table Microsoft.OperationalInsights/workspaces/query/AVSEsxiFirewallSyslog/readRead data from the AVSEsxiFirewallSyslog table Microsoft.OperationalInsights/workspaces/query/AVSEsxiSyslog/readRead data from the AVSEsxiSyslog table Microsoft.OperationalInsights/workspaces/query/AVSNsxEdgeSyslog/readRead data from the AVSNsxEdgeSyslog table Microsoft.OperationalInsights/workspaces/query/AVSNsxManagerSyslog/readRead data from the AVSNsxManagerSyslog table Microsoft.OperationalInsights/workspaces/query/AVSSyslog/readRead data from the AVSSyslog table Microsoft.OperationalInsights/workspaces/query/AVSVcSyslog/readRead data from the AVSVcSyslog table Microsoft.OperationalInsights/workspaces/query/AWSALBAccessLogs/readRead data from the AWSALBAccessLogs table Microsoft.OperationalInsights/workspaces/query/AWSCloudTrail/readRead data from the AWSCloudTrail table Microsoft.OperationalInsights/workspaces/query/AWSCloudWatch/readRead data from the AWSCloudWatch table Microsoft.OperationalInsights/workspaces/query/AWSEKSLogs/readRead data from the AWSEKSLogs table Microsoft.OperationalInsights/workspaces/query/AWSELBFlowLogs/readRead data from the AWSELBFlowLogs table Microsoft.OperationalInsights/workspaces/query/AWSGuardDuty/readRead data from the AWSGuardDuty table Microsoft.OperationalInsights/workspaces/query/AWSNetworkFirewallAlert/readRead data from the AWSNetworkFirewallAlert table Microsoft.OperationalInsights/workspaces/query/AWSNetworkFirewallFlow/readRead data from the AWSNetworkFirewallFlow table Microsoft.OperationalInsights/workspaces/query/AWSNetworkFirewallTls/readRead data from the AWSNetworkFirewallTls table Microsoft.OperationalInsights/workspaces/query/AWSNLBAccessLogs/readRead data from the AWSNLBAccessLogs table Microsoft.OperationalInsights/workspaces/query/AWSRoute53Resolver/readRead data from the AWSRoute53Resolver table Microsoft.OperationalInsights/workspaces/query/AWSS3ServerAccess/readRead data from the AWSS3ServerAccess table Microsoft.OperationalInsights/workspaces/query/AWSSecurityHubFindings/readRead data from the AWSSecurityHubFindings table Microsoft.OperationalInsights/workspaces/query/AWSVPCFlow/readRead data from the AWSVPCFlow table Microsoft.OperationalInsights/workspaces/query/AWSWAF/readRead data from the AWSWAF table Microsoft.OperationalInsights/workspaces/query/AZFWApplicationRule/readRead data from the AZFWApplicationRule table Microsoft.OperationalInsights/workspaces/query/AZFWApplicationRuleAggregation/readRead data from the AZFWApplicationRuleAggregation table Microsoft.OperationalInsights/workspaces/query/AZFWDnsFlowTrace/readRead data from the AZFWDnsFlowTrace table Microsoft.OperationalInsights/workspaces/query/AZFWDnsQuery/readRead data from the AZFWDnsQuery table Microsoft.OperationalInsights/workspaces/query/AZFWFatFlow/readRead data from the AZFWFatFlow table Microsoft.OperationalInsights/workspaces/query/AZFWFlowTrace/readRead data from the AZFWFlowTrace table Microsoft.OperationalInsights/workspaces/query/AZFWIdpsSignature/readRead data from the AZFWIdpsSignature table Microsoft.OperationalInsights/workspaces/query/AZFWInternalFqdnResolutionFailure/readRead data from the AZFWInternalFqdnResolutionFailure table Microsoft.OperationalInsights/workspaces/query/AZFWNatRule/readRead data from the AZFWNatRule table Microsoft.OperationalInsights/workspaces/query/AZFWNatRuleAggregation/readRead data from the AZFWNatRuleAggregation table Microsoft.OperationalInsights/workspaces/query/AZFWNetworkRule/readRead data from the AZFWNetworkRule table Microsoft.OperationalInsights/workspaces/query/AZFWNetworkRuleAggregation/readRead data from the AZFWNetworkRuleAggregation table Microsoft.OperationalInsights/workspaces/query/AZFWThreatIntel/readRead data from the AZFWThreatIntel table Microsoft.OperationalInsights/workspaces/query/AZKVAuditLogs/readRead data from the AZKVAuditLogs table Microsoft.OperationalInsights/workspaces/query/AZKVPolicyEvaluationDetailsLogs/readRead data from the AZKVPolicyEvaluationDetailsLogs table Microsoft.OperationalInsights/workspaces/query/AZMSApplicationMetricLogs/readRead data from the AZMSApplicationMetricLogs table Microsoft.OperationalInsights/workspaces/query/AZMSArchiveLogs/readRead data from the AZMSArchiveLogs table Microsoft.OperationalInsights/workspaces/query/AZMSAutoscaleLogs/readRead data from the AZMSAutoscaleLogs table Microsoft.OperationalInsights/workspaces/query/AZMSCustomerManagedKeyUserLogs/readRead data from the AZMSCustomerManagedKeyUserLogs table Microsoft.OperationalInsights/workspaces/query/AZMSDiagnosticErrorLogs/readRead data from the AZMSDiagnosticErrorLogs table Microsoft.OperationalInsights/workspaces/query/AZMSHybridConnectionsEvents/readRead data from the AZMSHybridConnectionsEvents table Microsoft.OperationalInsights/workspaces/query/AZMSKafkaCoordinatorLogs/readRead data from the AZMSKafkaCoordinatorLogs table Microsoft.OperationalInsights/workspaces/query/AZMSKafkaUserErrorLogs/readRead data from the AZMSKafkaUserErrorLogs table Microsoft.OperationalInsights/workspaces/query/AZMSOperationalLogs/readRead data from the AZMSOperationalLogs table Microsoft.OperationalInsights/workspaces/query/AZMSRunTimeAuditLogs/readRead data from the AZMSRunTimeAuditLogs table Microsoft.OperationalInsights/workspaces/query/AZMSVnetConnectionEvents/readRead data from the AZMSVnetConnectionEvents table Microsoft.OperationalInsights/workspaces/query/AzureActivity/readRead data from the AzureActivity table Microsoft.OperationalInsights/workspaces/query/AzureActivityV2/readRead data from the AzureActivityV2 table Microsoft.OperationalInsights/workspaces/query/AzureAssessmentRecommendation/readRead data from the AzureAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/AzureAttestationDiagnostics/readRead data from the AzureAttestationDiagnostics table Microsoft.OperationalInsights/workspaces/query/AzureBackupOperations/readRead data from the AzureBackupOperations table Microsoft.OperationalInsights/workspaces/query/AzureDevOpsAuditing/readRead data from the AzureDevOpsAuditing table Microsoft.OperationalInsights/workspaces/query/AzureDiagnostics/readRead data from the AzureDiagnostics table Microsoft.OperationalInsights/workspaces/query/AzureLoadTestingOperation/readRead data from the AzureLoadTestingOperation table Microsoft.OperationalInsights/workspaces/query/AzureMetrics/readRead data from the AzureMetrics table Microsoft.OperationalInsights/workspaces/query/AzureMetricsV2/readRead data from the AzureMetricsV2 table Microsoft.OperationalInsights/workspaces/query/AzureMonitorPipelineLogErrors/readRead data from the AzureMonitorPipelineLogErrors table Microsoft.OperationalInsights/workspaces/query/BehaviorAnalytics/readRead data from the BehaviorAnalytics table Microsoft.OperationalInsights/workspaces/query/BehaviorEntities/readRead data from the BehaviorEntities table Microsoft.OperationalInsights/workspaces/query/BehaviorInfo/readRead data from the BehaviorInfo table Microsoft.OperationalInsights/workspaces/query/BlockchainApplicationLog/readRead data from the BlockchainApplicationLog table Microsoft.OperationalInsights/workspaces/query/BlockchainProxyLog/readRead data from the BlockchainProxyLog table Microsoft.OperationalInsights/workspaces/query/CampaignInfo/readRead data from the CampaignInfo table Microsoft.OperationalInsights/workspaces/query/CassandraAudit/readRead data from the CassandraAudit table Microsoft.OperationalInsights/workspaces/query/CassandraLogs/readRead data from the CassandraLogs table Microsoft.OperationalInsights/workspaces/query/CCFApplicationLogs/readRead data from the CCFApplicationLogs table Microsoft.OperationalInsights/workspaces/query/CDBCassandraRequests/readRead data from the CDBCassandraRequests table Microsoft.OperationalInsights/workspaces/query/CDBControlPlaneRequests/readRead data from the CDBControlPlaneRequests table Microsoft.OperationalInsights/workspaces/query/CDBDataPlaneRequests/readRead data from the CDBDataPlaneRequests table Microsoft.OperationalInsights/workspaces/query/CDBDataPlaneRequests15M/readRead data from the CDBDataPlaneRequests15M table Microsoft.OperationalInsights/workspaces/query/CDBDataPlaneRequests5M/readRead data from the CDBDataPlaneRequests5M table Microsoft.OperationalInsights/workspaces/query/CDBGremlinRequests/readRead data from the CDBGremlinRequests table Microsoft.OperationalInsights/workspaces/query/CDBMongoRequests/readRead data from the CDBMongoRequests table Microsoft.OperationalInsights/workspaces/query/CDBPartitionKeyRUConsumption/readRead data from the CDBPartitionKeyRUConsumption table Microsoft.OperationalInsights/workspaces/query/CDBPartitionKeyStatistics/readRead data from the CDBPartitionKeyStatistics table Microsoft.OperationalInsights/workspaces/query/CDBQueryRuntimeStatistics/readRead data from the CDBQueryRuntimeStatistics table Microsoft.OperationalInsights/workspaces/query/CDBTableApiRequests/readRead data from the CDBTableApiRequests table Microsoft.OperationalInsights/workspaces/query/ChaosStudioExperimentEventLogs/readRead data from the ChaosStudioExperimentEventLogs table Microsoft.OperationalInsights/workspaces/query/CIEventsAudit/readRead data from the CIEventsAudit table Microsoft.OperationalInsights/workspaces/query/CIEventsOperational/readRead data from the CIEventsOperational table Microsoft.OperationalInsights/workspaces/query/CloudAppEvents/readRead data from the CloudAppEvents table Microsoft.OperationalInsights/workspaces/query/CloudHsmServiceOperationAuditLogs/readRead data from the CloudHsmServiceOperationAuditLogs table Microsoft.OperationalInsights/workspaces/query/CommonSecurityLog/readRead data from the CommonSecurityLog table Microsoft.OperationalInsights/workspaces/query/CommunicationComplianceActivity/readRead data from the CommunicationComplianceActivity table Microsoft.OperationalInsights/workspaces/query/ComputerGroup/readRead data from the ComputerGroup table Microsoft.OperationalInsights/workspaces/query/ConfidentialWatchlist/readRead data from the ConfidentialWatchlist table Microsoft.OperationalInsights/workspaces/query/ConfigurationChange/readRead data from the ConfigurationChange table Microsoft.OperationalInsights/workspaces/query/ConfigurationData/readRead data from the ConfigurationData table Microsoft.OperationalInsights/workspaces/query/ContainerAppConsoleLogs/readRead data from the ContainerAppConsoleLogs table Microsoft.OperationalInsights/workspaces/query/ContainerAppSystemLogs/readRead data from the ContainerAppSystemLogs table Microsoft.OperationalInsights/workspaces/query/ContainerEvent/readRead data from the ContainerEvent table Microsoft.OperationalInsights/workspaces/query/ContainerImageInventory/readRead data from the ContainerImageInventory table Microsoft.OperationalInsights/workspaces/query/ContainerInstanceLog/readRead data from the ContainerInstanceLog table Microsoft.OperationalInsights/workspaces/query/ContainerInventory/readRead data from the ContainerInventory table Microsoft.OperationalInsights/workspaces/query/ContainerLog/readRead data from the ContainerLog table Microsoft.OperationalInsights/workspaces/query/ContainerLogV2/readRead data from the ContainerLogV2 table Microsoft.OperationalInsights/workspaces/query/ContainerNetworkLogs/readRead data from the ContainerNetworkLogs table Microsoft.OperationalInsights/workspaces/query/ContainerNodeInventory/readRead data from the ContainerNodeInventory table Microsoft.OperationalInsights/workspaces/query/ContainerRegistryLoginEvents/readRead data from the ContainerRegistryLoginEvents table Microsoft.OperationalInsights/workspaces/query/ContainerRegistryRepositoryEvents/readRead data from the ContainerRegistryRepositoryEvents table Microsoft.OperationalInsights/workspaces/query/ContainerServiceLog/readRead data from the ContainerServiceLog table Microsoft.OperationalInsights/workspaces/query/CopilotActivity/readRead data from the CopilotActivity table Microsoft.OperationalInsights/workspaces/query/CoreAzureBackup/readRead data from the CoreAzureBackup table Microsoft.OperationalInsights/workspaces/query/CrowdStrikeAlerts/readRead data from the CrowdStrikeAlerts table Microsoft.OperationalInsights/workspaces/query/CrowdStrikeCases/readRead data from the CrowdStrikeCases table Microsoft.OperationalInsights/workspaces/query/CrowdStrikeDetections/readRead data from the CrowdStrikeDetections table Microsoft.OperationalInsights/workspaces/query/CrowdStrikeHosts/readRead data from the CrowdStrikeHosts table Microsoft.OperationalInsights/workspaces/query/CrowdStrikeIncidents/readRead data from the CrowdStrikeIncidents table Microsoft.OperationalInsights/workspaces/query/CrowdStrikeVulnerabilities/readRead data from the CrowdStrikeVulnerabilities table Microsoft.OperationalInsights/workspaces/query/DatabricksAccounts/readRead data from the DatabricksAccounts table Microsoft.OperationalInsights/workspaces/query/DatabricksApps/readRead data from the DatabricksApps table Microsoft.OperationalInsights/workspaces/query/DatabricksBrickStoreHttpGateway/readRead data from the DatabricksBrickStoreHttpGateway table Microsoft.OperationalInsights/workspaces/query/DatabricksBudgetPolicyCentral/readRead data from the DatabricksBudgetPolicyCentral table Microsoft.OperationalInsights/workspaces/query/DatabricksCapsule8Dataplane/readRead data from the DatabricksCapsule8Dataplane table Microsoft.OperationalInsights/workspaces/query/DatabricksClamAVScan/readRead data from the DatabricksClamAVScan table Microsoft.OperationalInsights/workspaces/query/DatabricksCloudStorageMetadata/readRead data from the DatabricksCloudStorageMetadata table Microsoft.OperationalInsights/workspaces/query/DatabricksClusterLibraries/readRead data from the DatabricksClusterLibraries table Microsoft.OperationalInsights/workspaces/query/DatabricksClusterPolicies/readRead data from the DatabricksClusterPolicies table Microsoft.OperationalInsights/workspaces/query/DatabricksClusters/readRead data from the DatabricksClusters table Microsoft.OperationalInsights/workspaces/query/DatabricksDashboards/readRead data from the DatabricksDashboards table Microsoft.OperationalInsights/workspaces/query/DatabricksDatabricksSQL/readRead data from the DatabricksDatabricksSQL table Microsoft.OperationalInsights/workspaces/query/DatabricksDataMonitoring/readRead data from the DatabricksDataMonitoring table Microsoft.OperationalInsights/workspaces/query/DatabricksDataRooms/readRead data from the DatabricksDataRooms table Microsoft.OperationalInsights/workspaces/query/DatabricksDBFS/readRead data from the DatabricksDBFS table Microsoft.OperationalInsights/workspaces/query/DatabricksDeltaPipelines/readRead data from the DatabricksDeltaPipelines table Microsoft.OperationalInsights/workspaces/query/DatabricksFeatureStore/readRead data from the DatabricksFeatureStore table Microsoft.OperationalInsights/workspaces/query/DatabricksFiles/readRead data from the DatabricksFiles table Microsoft.OperationalInsights/workspaces/query/DatabricksFilesystem/readRead data from the DatabricksFilesystem table Microsoft.OperationalInsights/workspaces/query/DatabricksGenie/readRead data from the DatabricksGenie table Microsoft.OperationalInsights/workspaces/query/DatabricksGitCredentials/readRead data from the DatabricksGitCredentials table Microsoft.OperationalInsights/workspaces/query/DatabricksGlobalInitScripts/readRead data from the DatabricksGlobalInitScripts table Microsoft.OperationalInsights/workspaces/query/DatabricksGroups/readRead data from the DatabricksGroups table Microsoft.OperationalInsights/workspaces/query/DatabricksIAMRole/readRead data from the DatabricksIAMRole table Microsoft.OperationalInsights/workspaces/query/DatabricksIngestion/readRead data from the DatabricksIngestion table Microsoft.OperationalInsights/workspaces/query/DatabricksInstancePools/readRead data from the DatabricksInstancePools table Microsoft.OperationalInsights/workspaces/query/DatabricksJobs/readRead data from the DatabricksJobs table Microsoft.OperationalInsights/workspaces/query/DatabricksLakeviewConfig/readRead data from the DatabricksLakeviewConfig table Microsoft.OperationalInsights/workspaces/query/DatabricksLineageTracking/readRead data from the DatabricksLineageTracking table Microsoft.OperationalInsights/workspaces/query/DatabricksMarketplaceConsumer/readRead data from the DatabricksMarketplaceConsumer table Microsoft.OperationalInsights/workspaces/query/DatabricksMarketplaceProvider/readRead data from the DatabricksMarketplaceProvider table Microsoft.OperationalInsights/workspaces/query/DatabricksMLflowAcledArtifact/readRead data from the DatabricksMLflowAcledArtifact table Microsoft.OperationalInsights/workspaces/query/DatabricksMLflowExperiment/readRead data from the DatabricksMLflowExperiment table Microsoft.OperationalInsights/workspaces/query/DatabricksModelRegistry/readRead data from the DatabricksModelRegistry table Microsoft.OperationalInsights/workspaces/query/DatabricksNotebook/readRead data from the DatabricksNotebook table Microsoft.OperationalInsights/workspaces/query/DatabricksOnlineTables/readRead data from the DatabricksOnlineTables table Microsoft.OperationalInsights/workspaces/query/DatabricksPartnerHub/readRead data from the DatabricksPartnerHub table Microsoft.OperationalInsights/workspaces/query/DatabricksPredictiveOptimization/readRead data from the DatabricksPredictiveOptimization table Microsoft.OperationalInsights/workspaces/query/DatabricksRBAC/readRead data from the DatabricksRBAC table Microsoft.OperationalInsights/workspaces/query/DatabricksRemoteHistoryService/readRead data from the DatabricksRemoteHistoryService table Microsoft.OperationalInsights/workspaces/query/DatabricksRepos/readRead data from the DatabricksRepos table Microsoft.OperationalInsights/workspaces/query/DatabricksRFA/readRead data from the DatabricksRFA table Microsoft.OperationalInsights/workspaces/query/DatabricksSecrets/readRead data from the DatabricksSecrets table Microsoft.OperationalInsights/workspaces/query/DatabricksServerlessRealTimeInference/readRead data from the DatabricksServerlessRealTimeInference table Microsoft.OperationalInsights/workspaces/query/DatabricksSQL/readRead data from the DatabricksSQL table Microsoft.OperationalInsights/workspaces/query/DatabricksSQLPermissions/readRead data from the DatabricksSQLPermissions table Microsoft.OperationalInsights/workspaces/query/DatabricksSSH/readRead data from the DatabricksSSH table Microsoft.OperationalInsights/workspaces/query/DatabricksTables/readRead data from the DatabricksTables table Microsoft.OperationalInsights/workspaces/query/DatabricksUnityCatalog/readRead data from the DatabricksUnityCatalog table Microsoft.OperationalInsights/workspaces/query/DatabricksVectorSearch/readRead data from the DatabricksVectorSearch table Microsoft.OperationalInsights/workspaces/query/DatabricksWebhookNotifications/readRead data from the DatabricksWebhookNotifications table Microsoft.OperationalInsights/workspaces/query/DatabricksWebTerminal/readRead data from the DatabricksWebTerminal table Microsoft.OperationalInsights/workspaces/query/DatabricksWorkspace/readRead data from the DatabricksWorkspace table Microsoft.OperationalInsights/workspaces/query/DatabricksWorkspaceFiles/readRead data from the DatabricksWorkspaceFiles table Microsoft.OperationalInsights/workspaces/query/DataSetOutput/readRead data from the DataSetOutput table Microsoft.OperationalInsights/workspaces/query/DataSetRuns/readRead data from the DataSetRuns table Microsoft.OperationalInsights/workspaces/query/DataTransferOperations/readRead data from the DataTransferOperations table Microsoft.OperationalInsights/workspaces/query/DataverseActivity/readRead data from the DataverseActivity table Microsoft.OperationalInsights/workspaces/query/DCRLogErrors/readRead data from the DCRLogErrors table Microsoft.OperationalInsights/workspaces/query/DCRLogTroubleshooting/readRead data from the DCRLogTroubleshooting table Microsoft.OperationalInsights/workspaces/query/DefenderIoTRawEvent/readRead data from the DefenderIoTRawEvent table Microsoft.OperationalInsights/workspaces/query/DevCenterAgentHealthLogs/readRead data from the DevCenterAgentHealthLogs table Microsoft.OperationalInsights/workspaces/query/DevCenterBillingEventLogs/readRead data from the DevCenterBillingEventLogs table Microsoft.OperationalInsights/workspaces/query/DevCenterConnectionLogs/readRead data from the DevCenterConnectionLogs table Microsoft.OperationalInsights/workspaces/query/DevCenterDiagnosticLogs/readRead data from the DevCenterDiagnosticLogs table Microsoft.OperationalInsights/workspaces/query/DevCenterResourceOperationLogs/readRead data from the DevCenterResourceOperationLogs table Microsoft.OperationalInsights/workspaces/query/DeviceAppCrash/readRead data from the DeviceAppCrash table Microsoft.OperationalInsights/workspaces/query/DeviceAppLaunch/readRead data from the DeviceAppLaunch table Microsoft.OperationalInsights/workspaces/query/DeviceBehaviorEntities/readRead data from the DeviceBehaviorEntities table Microsoft.OperationalInsights/workspaces/query/DeviceBehaviorInfo/readRead data from the DeviceBehaviorInfo table Microsoft.OperationalInsights/workspaces/query/DeviceCalendar/readRead data from the DeviceCalendar table Microsoft.OperationalInsights/workspaces/query/DeviceCleanup/readRead data from the DeviceCleanup table Microsoft.OperationalInsights/workspaces/query/DeviceConnectSession/readRead data from the DeviceConnectSession table Microsoft.OperationalInsights/workspaces/query/DeviceCustomFileEvents/readRead data from the DeviceCustomFileEvents table Microsoft.OperationalInsights/workspaces/query/DeviceCustomImageLoadEvents/readRead data from the DeviceCustomImageLoadEvents table Microsoft.OperationalInsights/workspaces/query/DeviceCustomNetworkEvents/readRead data from the DeviceCustomNetworkEvents table Microsoft.OperationalInsights/workspaces/query/DeviceCustomProcessEvents/readRead data from the DeviceCustomProcessEvents table Microsoft.OperationalInsights/workspaces/query/DeviceCustomScriptEvents/readRead data from the DeviceCustomScriptEvents table Microsoft.OperationalInsights/workspaces/query/DeviceEtw/readRead data from the DeviceEtw table Microsoft.OperationalInsights/workspaces/query/DeviceEvents/readRead data from the DeviceEvents table Microsoft.OperationalInsights/workspaces/query/DeviceFileCertificateInfo/readRead data from the DeviceFileCertificateInfo table Microsoft.OperationalInsights/workspaces/query/DeviceFileEvents/readRead data from the DeviceFileEvents table Microsoft.OperationalInsights/workspaces/query/DeviceHardwareHealth/readRead data from the DeviceHardwareHealth table Microsoft.OperationalInsights/workspaces/query/DeviceHealth/readRead data from the DeviceHealth table Microsoft.OperationalInsights/workspaces/query/DeviceHeartbeat/readRead data from the DeviceHeartbeat table Microsoft.OperationalInsights/workspaces/query/DeviceImageLoadEvents/readRead data from the DeviceImageLoadEvents table Microsoft.OperationalInsights/workspaces/query/DeviceInfo/readRead data from the DeviceInfo table Microsoft.OperationalInsights/workspaces/query/DeviceLogonEvents/readRead data from the DeviceLogonEvents table Microsoft.OperationalInsights/workspaces/query/DeviceNetworkEvents/readRead data from the DeviceNetworkEvents table Microsoft.OperationalInsights/workspaces/query/DeviceNetworkInfo/readRead data from the DeviceNetworkInfo table Microsoft.OperationalInsights/workspaces/query/DeviceProcessEvents/readRead data from the DeviceProcessEvents table Microsoft.OperationalInsights/workspaces/query/DeviceRegistryEvents/readRead data from the DeviceRegistryEvents table Microsoft.OperationalInsights/workspaces/query/DeviceSkypeHeartbeat/readRead data from the DeviceSkypeHeartbeat table Microsoft.OperationalInsights/workspaces/query/DeviceSkypeSignIn/readRead data from the DeviceSkypeSignIn table Microsoft.OperationalInsights/workspaces/query/DeviceTvmSecureConfigurationAssessment/readRead data from the DeviceTvmSecureConfigurationAssessment table Microsoft.OperationalInsights/workspaces/query/DeviceTvmSecureConfigurationAssessmentKB/readRead data from the DeviceTvmSecureConfigurationAssessmentKB table Microsoft.OperationalInsights/workspaces/query/DeviceTvmSoftwareInventory/readRead data from the DeviceTvmSoftwareInventory table Microsoft.OperationalInsights/workspaces/query/DeviceTvmSoftwareVulnerabilities/readRead data from the DeviceTvmSoftwareVulnerabilities table Microsoft.OperationalInsights/workspaces/query/DeviceTvmSoftwareVulnerabilitiesKB/readRead data from the DeviceTvmSoftwareVulnerabilitiesKB table Microsoft.OperationalInsights/workspaces/query/DHAppReliability/readRead data from the DHAppReliability table Microsoft.OperationalInsights/workspaces/query/DHDriverReliability/readRead data from the DHDriverReliability table Microsoft.OperationalInsights/workspaces/query/DHLogonFailures/readRead data from the DHLogonFailures table Microsoft.OperationalInsights/workspaces/query/DHLogonMetrics/readRead data from the DHLogonMetrics table Microsoft.OperationalInsights/workspaces/query/DHOSCrashData/readRead data from the DHOSCrashData table Microsoft.OperationalInsights/workspaces/query/DHOSReliability/readRead data from the DHOSReliability table Microsoft.OperationalInsights/workspaces/query/DHWipAppLearning/readRead data from the DHWipAppLearning table Microsoft.OperationalInsights/workspaces/query/DnsAuditEvents/readRead data from the DnsAuditEvents table Microsoft.OperationalInsights/workspaces/query/DnsEvents/readRead data from the DnsEvents table Microsoft.OperationalInsights/workspaces/query/DnsInventory/readRead data from the DnsInventory table Microsoft.OperationalInsights/workspaces/query/DNSQueryLogs/readRead data from the DNSQueryLogs table Microsoft.OperationalInsights/workspaces/query/DSMAzureBlobStorageLogs/readRead data from the DSMAzureBlobStorageLogs table Microsoft.OperationalInsights/workspaces/query/DSMDataClassificationLogs/readRead data from the DSMDataClassificationLogs table Microsoft.OperationalInsights/workspaces/query/DSMDataLabelingLogs/readRead data from the DSMDataLabelingLogs table Microsoft.OperationalInsights/workspaces/query/DurableTaskSchedulerLogs/readRead data from the DurableTaskSchedulerLogs table Microsoft.OperationalInsights/workspaces/query/DynamicEventCollection/readRead data from the DynamicEventCollection table Microsoft.OperationalInsights/workspaces/query/Dynamics365Activity/readRead data from the Dynamics365Activity table Microsoft.OperationalInsights/workspaces/query/DynamicSummary/readRead data from the DynamicSummary table Microsoft.OperationalInsights/workspaces/query/EdgeActionConsoleLog/readRead data from the EdgeActionConsoleLog table Microsoft.OperationalInsights/workspaces/query/EdgeActionServiceLog/readRead data from the EdgeActionServiceLog table Microsoft.OperationalInsights/workspaces/query/EGNFailedHttpDataPlaneOperations/readRead data from the EGNFailedHttpDataPlaneOperations table Microsoft.OperationalInsights/workspaces/query/EGNFailedMqttConnections/readRead data from the EGNFailedMqttConnections table Microsoft.OperationalInsights/workspaces/query/EGNFailedMqttPublishedMessages/readRead data from the EGNFailedMqttPublishedMessages table Microsoft.OperationalInsights/workspaces/query/EGNFailedMqttSubscriptions/readRead data from the EGNFailedMqttSubscriptions table Microsoft.OperationalInsights/workspaces/query/EGNMqttDisconnections/readRead data from the EGNMqttDisconnections table Microsoft.OperationalInsights/workspaces/query/EGNSuccessfulHttpDataPlaneOperations/readRead data from the EGNSuccessfulHttpDataPlaneOperations table Microsoft.OperationalInsights/workspaces/query/EGNSuccessfulMqttConnections/readRead data from the EGNSuccessfulMqttConnections table Microsoft.OperationalInsights/workspaces/query/EmailAttachmentInfo/readRead data from the EmailAttachmentInfo table Microsoft.OperationalInsights/workspaces/query/EmailEvents/readRead data from the EmailEvents table Microsoft.OperationalInsights/workspaces/query/EmailPostDeliveryEvents/readRead data from the EmailPostDeliveryEvents table Microsoft.OperationalInsights/workspaces/query/EmailUrlInfo/readRead data from the EmailUrlInfo table Microsoft.OperationalInsights/workspaces/query/EnrichedMicrosoft365AuditLogs/readRead data from the EnrichedMicrosoft365AuditLogs table Microsoft.OperationalInsights/workspaces/query/ETWEvent/readRead data from the ETWEvent table Microsoft.OperationalInsights/workspaces/query/Event/readRead data from the Event table Microsoft.OperationalInsights/workspaces/query/ExchangeAssessmentRecommendation/readRead data from the ExchangeAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/ExchangeOnlineAssessmentRecommendation/readRead data from the ExchangeOnlineAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/FailedIngestion/readRead data from the FailedIngestion table Microsoft.OperationalInsights/workspaces/query/FileMaliciousContentInfo/readRead data from the FileMaliciousContentInfo table Microsoft.OperationalInsights/workspaces/query/FunctionAppLogs/readRead data from the FunctionAppLogs table Microsoft.OperationalInsights/workspaces/query/GCPApigee/readRead data from the GCPApigee table Microsoft.OperationalInsights/workspaces/query/GCPAuditLogs/readRead data from the GCPAuditLogs table Microsoft.OperationalInsights/workspaces/query/GCPCDN/readRead data from the GCPCDN table Microsoft.OperationalInsights/workspaces/query/GCPCloudRun/readRead data from the GCPCloudRun table Microsoft.OperationalInsights/workspaces/query/GCPCloudSQL/readRead data from the GCPCloudSQL table Microsoft.OperationalInsights/workspaces/query/GCPComputeEngine/readRead data from the GCPComputeEngine table Microsoft.OperationalInsights/workspaces/query/GCPDNS/readRead data from the GCPDNS table Microsoft.OperationalInsights/workspaces/query/GCPFirewallLogs/readRead data from the GCPFirewallLogs table Microsoft.OperationalInsights/workspaces/query/GCPIAM/readRead data from the GCPIAM table Microsoft.OperationalInsights/workspaces/query/GCPIDS/readRead data from the GCPIDS table Microsoft.OperationalInsights/workspaces/query/GCPLoadBalancer/readRead data from the GCPLoadBalancer table Microsoft.OperationalInsights/workspaces/query/GCPMonitoring/readRead data from the GCPMonitoring table Microsoft.OperationalInsights/workspaces/query/GCPNAT/readRead data from the GCPNAT table Microsoft.OperationalInsights/workspaces/query/GCPNATAudit/readRead data from the GCPNATAudit table Microsoft.OperationalInsights/workspaces/query/GCPResourceManager/readRead data from the GCPResourceManager table Microsoft.OperationalInsights/workspaces/query/GCPVPCFlow/readRead data from the GCPVPCFlow table Microsoft.OperationalInsights/workspaces/query/GKEAPIServer/readRead data from the GKEAPIServer table Microsoft.OperationalInsights/workspaces/query/GKEApplication/readRead data from the GKEApplication table Microsoft.OperationalInsights/workspaces/query/GKEAudit/readRead data from the GKEAudit table Microsoft.OperationalInsights/workspaces/query/GKEControllerManager/readRead data from the GKEControllerManager table Microsoft.OperationalInsights/workspaces/query/GKEHPADecision/readRead data from the GKEHPADecision table Microsoft.OperationalInsights/workspaces/query/GKEScheduler/readRead data from the GKEScheduler table Microsoft.OperationalInsights/workspaces/query/GoogleCloudSCC/readRead data from the GoogleCloudSCC table Microsoft.OperationalInsights/workspaces/query/GoogleWorkspaceReports/readRead data from the GoogleWorkspaceReports table Microsoft.OperationalInsights/workspaces/query/HDInsightAmbariClusterAlerts/readRead data from the HDInsightAmbariClusterAlerts table Microsoft.OperationalInsights/workspaces/query/HDInsightAmbariSystemMetrics/readRead data from the HDInsightAmbariSystemMetrics table Microsoft.OperationalInsights/workspaces/query/HDInsightGatewayAuditLogs/readRead data from the HDInsightGatewayAuditLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightHadoopAndYarnLogs/readRead data from the HDInsightHadoopAndYarnLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightHadoopAndYarnMetrics/readRead data from the HDInsightHadoopAndYarnMetrics table Microsoft.OperationalInsights/workspaces/query/HDInsightHBaseLogs/readRead data from the HDInsightHBaseLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightHBaseMetrics/readRead data from the HDInsightHBaseMetrics table Microsoft.OperationalInsights/workspaces/query/HDInsightHiveAndLLAPLogs/readRead data from the HDInsightHiveAndLLAPLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightHiveAndLLAPMetrics/readRead data from the HDInsightHiveAndLLAPMetrics table Microsoft.OperationalInsights/workspaces/query/HDInsightHiveQueryAppStats/readRead data from the HDInsightHiveQueryAppStats table Microsoft.OperationalInsights/workspaces/query/HDInsightHiveTezAppStats/readRead data from the HDInsightHiveTezAppStats table Microsoft.OperationalInsights/workspaces/query/HDInsightJupyterNotebookEvents/readRead data from the HDInsightJupyterNotebookEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightKafkaLogs/readRead data from the HDInsightKafkaLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightKafkaMetrics/readRead data from the HDInsightKafkaMetrics table Microsoft.OperationalInsights/workspaces/query/HDInsightKafkaServerLog/readRead data from the HDInsightKafkaServerLog table Microsoft.OperationalInsights/workspaces/query/HDInsightOozieLogs/readRead data from the HDInsightOozieLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightRangerAuditLogs/readRead data from the HDInsightRangerAuditLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightSecurityLogs/readRead data from the HDInsightSecurityLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkApplicationEvents/readRead data from the HDInsightSparkApplicationEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkBlockManagerEvents/readRead data from the HDInsightSparkBlockManagerEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkEnvironmentEvents/readRead data from the HDInsightSparkEnvironmentEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkExecutorEvents/readRead data from the HDInsightSparkExecutorEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkExtraEvents/readRead data from the HDInsightSparkExtraEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkJobEvents/readRead data from the HDInsightSparkJobEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkLogs/readRead data from the HDInsightSparkLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkSQLExecutionEvents/readRead data from the HDInsightSparkSQLExecutionEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkStageEvents/readRead data from the HDInsightSparkStageEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkStageTaskAccumulables/readRead data from the HDInsightSparkStageTaskAccumulables table Microsoft.OperationalInsights/workspaces/query/HDInsightSparkTaskEvents/readRead data from the HDInsightSparkTaskEvents table Microsoft.OperationalInsights/workspaces/query/HDInsightStormLogs/readRead data from the HDInsightStormLogs table Microsoft.OperationalInsights/workspaces/query/HDInsightStormMetrics/readRead data from the HDInsightStormMetrics table Microsoft.OperationalInsights/workspaces/query/HDInsightStormTopologyMetrics/readRead data from the HDInsightStormTopologyMetrics table Microsoft.OperationalInsights/workspaces/query/HealthStateChangeEvent/readRead data from the HealthStateChangeEvent table Microsoft.OperationalInsights/workspaces/query/Heartbeat/readRead data from the Heartbeat table Microsoft.OperationalInsights/workspaces/query/HuntingBookmark/readRead data from the HuntingBookmark table Microsoft.OperationalInsights/workspaces/query/IdentityDirectoryEvents/readRead data from the IdentityDirectoryEvents table Microsoft.OperationalInsights/workspaces/query/IdentityInfo/readRead data from the IdentityInfo table Microsoft.OperationalInsights/workspaces/query/IdentityLogonEvents/readRead data from the IdentityLogonEvents table Microsoft.OperationalInsights/workspaces/query/IdentityQueryEvents/readRead data from the IdentityQueryEvents table Microsoft.OperationalInsights/workspaces/query/IlumioInsights/readRead data from the IlumioInsights table Microsoft.OperationalInsights/workspaces/query/InsightsMetrics/readRead data from the InsightsMetrics table Microsoft.OperationalInsights/workspaces/query/IntuneAuditLogs/readRead data from the IntuneAuditLogs table Microsoft.OperationalInsights/workspaces/query/IntuneDeviceComplianceOrg/readRead data from the IntuneDeviceComplianceOrg table Microsoft.OperationalInsights/workspaces/query/IntuneDevices/readRead data from the IntuneDevices table Microsoft.OperationalInsights/workspaces/query/IntuneOperationalLogs/readRead data from the IntuneOperationalLogs table Microsoft.OperationalInsights/workspaces/query/KeyVaults/readRead data from the KeyVaults table Microsoft.OperationalInsights/workspaces/query/KubeEvents/readRead data from the KubeEvents table Microsoft.OperationalInsights/workspaces/query/KubeHealth/readRead data from the KubeHealth table Microsoft.OperationalInsights/workspaces/query/KubeMonAgentEvents/readRead data from the KubeMonAgentEvents table Microsoft.OperationalInsights/workspaces/query/KubeNodeInventory/readRead data from the KubeNodeInventory table Microsoft.OperationalInsights/workspaces/query/KubePodInventory/readRead data from the KubePodInventory table Microsoft.OperationalInsights/workspaces/query/KubePVInventory/readRead data from the KubePVInventory table Microsoft.OperationalInsights/workspaces/query/KubeServices/readRead data from the KubeServices table Microsoft.OperationalInsights/workspaces/query/LAJobLogs/readRead data from the LAJobLogs table Microsoft.OperationalInsights/workspaces/query/LAQueryLogs/readRead data from the LAQueryLogs table Microsoft.OperationalInsights/workspaces/query/LASummaryLogs/readRead data from the LASummaryLogs table Microsoft.OperationalInsights/workspaces/query/LIATrackingEvents/readRead data from the LIATrackingEvents table Microsoft.OperationalInsights/workspaces/query/LinuxAuditLog/readRead data from the LinuxAuditLog table Microsoft.OperationalInsights/workspaces/query/LogicAppWorkflowRuntime/readRead data from the LogicAppWorkflowRuntime table Microsoft.OperationalInsights/workspaces/query/MAApplication/readRead data from the MAApplication table Microsoft.OperationalInsights/workspaces/query/MAApplicationHealth/readRead data from the MAApplicationHealth table Microsoft.OperationalInsights/workspaces/query/MAApplicationHealthAlternativeVersions/readRead data from the MAApplicationHealthAlternativeVersions table Microsoft.OperationalInsights/workspaces/query/MAApplicationHealthIssues/readRead data from the MAApplicationHealthIssues table Microsoft.OperationalInsights/workspaces/query/MAApplicationInstance/readRead data from the MAApplicationInstance table Microsoft.OperationalInsights/workspaces/query/MAApplicationInstanceReadiness/readRead data from the MAApplicationInstanceReadiness table Microsoft.OperationalInsights/workspaces/query/MAApplicationReadiness/readRead data from the MAApplicationReadiness table Microsoft.OperationalInsights/workspaces/query/MADeploymentPlan/readRead data from the MADeploymentPlan table Microsoft.OperationalInsights/workspaces/query/MADevice/readRead data from the MADevice table Microsoft.OperationalInsights/workspaces/query/MADeviceNotEnrolled/readRead data from the MADeviceNotEnrolled table Microsoft.OperationalInsights/workspaces/query/MADeviceNRT/readRead data from the MADeviceNRT table Microsoft.OperationalInsights/workspaces/query/MADeviceReadiness/readRead data from the MADeviceReadiness table Microsoft.OperationalInsights/workspaces/query/MADriverInstanceReadiness/readRead data from the MADriverInstanceReadiness table Microsoft.OperationalInsights/workspaces/query/MADriverReadiness/readRead data from the MADriverReadiness table Microsoft.OperationalInsights/workspaces/query/MAOfficeAddin/readRead data from the MAOfficeAddin table Microsoft.OperationalInsights/workspaces/query/MAOfficeAddinHealthEventNRT/readRead data from the MAOfficeAddinHealthEventNRT table Microsoft.OperationalInsights/workspaces/query/MAOfficeAddinInstance/readRead data from the MAOfficeAddinInstance table Microsoft.OperationalInsights/workspaces/query/MAOfficeAddinReadiness/readRead data from the MAOfficeAddinReadiness table Microsoft.OperationalInsights/workspaces/query/MAOfficeAppInstance/readRead data from the MAOfficeAppInstance table Microsoft.OperationalInsights/workspaces/query/MAOfficeAppReadiness/readRead data from the MAOfficeAppReadiness table Microsoft.OperationalInsights/workspaces/query/MAOfficeBuildInfo/readRead data from the MAOfficeBuildInfo table Microsoft.OperationalInsights/workspaces/query/MAOfficeCurrencyAssessment/readRead data from the MAOfficeCurrencyAssessment table Microsoft.OperationalInsights/workspaces/query/MAOfficeSuiteInstance/readRead data from the MAOfficeSuiteInstance table Microsoft.OperationalInsights/workspaces/query/MAProposedPilotDevices/readRead data from the MAProposedPilotDevices table Microsoft.OperationalInsights/workspaces/query/MAWindowsBuildInfo/readRead data from the MAWindowsBuildInfo table Microsoft.OperationalInsights/workspaces/query/MAWindowsCurrencyAssessment/readRead data from the MAWindowsCurrencyAssessment table Microsoft.OperationalInsights/workspaces/query/MAWindowsCurrencyAssessmentDailyCounts/readRead data from the MAWindowsCurrencyAssessmentDailyCounts table Microsoft.OperationalInsights/workspaces/query/MAWindowsDeploymentStatus/readRead data from the MAWindowsDeploymentStatus table Microsoft.OperationalInsights/workspaces/query/McasShadowItReporting/readRead data from the McasShadowItReporting table Microsoft.OperationalInsights/workspaces/query/MCCEventLogs/readRead data from the MCCEventLogs table Microsoft.OperationalInsights/workspaces/query/MCVPAuditLogs/readRead data from the MCVPAuditLogs table Microsoft.OperationalInsights/workspaces/query/MCVPOperationLogs/readRead data from the MCVPOperationLogs table Microsoft.OperationalInsights/workspaces/query/MDCDetectionDNSEvents/readRead data from the MDCDetectionDNSEvents table Microsoft.OperationalInsights/workspaces/query/MDCDetectionFimEvents/readRead data from the MDCDetectionFimEvents table Microsoft.OperationalInsights/workspaces/query/MDCDetectionGatingValidationEvents/readRead data from the MDCDetectionGatingValidationEvents table Microsoft.OperationalInsights/workspaces/query/MDCDetectionK8SApiEvents/readRead data from the MDCDetectionK8SApiEvents table Microsoft.OperationalInsights/workspaces/query/MDCDetectionProcessV2Events/readRead data from the MDCDetectionProcessV2Events table Microsoft.OperationalInsights/workspaces/query/MDCFileIntegrityMonitoringEvents/readRead data from the MDCFileIntegrityMonitoringEvents table Microsoft.OperationalInsights/workspaces/query/MDECustomCollectionDeviceFileEvents/readRead data from the MDECustomCollectionDeviceFileEvents table Microsoft.OperationalInsights/workspaces/query/MDPResourceLog/readRead data from the MDPResourceLog table Microsoft.OperationalInsights/workspaces/query/MeshControlPlane/readRead data from the MeshControlPlane table Microsoft.OperationalInsights/workspaces/query/MicrosoftAzureBastionAuditLogs/readRead data from the MicrosoftAzureBastionAuditLogs table Microsoft.OperationalInsights/workspaces/query/MicrosoftDataShareReceivedSnapshotLog/readRead data from the MicrosoftDataShareReceivedSnapshotLog table Microsoft.OperationalInsights/workspaces/query/MicrosoftDataShareSentSnapshotLog/readRead data from the MicrosoftDataShareSentSnapshotLog table Microsoft.OperationalInsights/workspaces/query/MicrosoftDataShareShareLog/readRead data from the MicrosoftDataShareShareLog table Microsoft.OperationalInsights/workspaces/query/MicrosoftGraphActivityLogs/readRead data from the MicrosoftGraphActivityLogs table Microsoft.OperationalInsights/workspaces/query/MicrosoftHealthcareApisAuditLogs/readRead data from the MicrosoftHealthcareApisAuditLogs table Microsoft.OperationalInsights/workspaces/query/MicrosoftPurviewInformationProtection/readRead data from the MicrosoftPurviewInformationProtection table Microsoft.OperationalInsights/workspaces/query/MicrosoftServicePrincipalSignInLogs/readRead data from the MicrosoftServicePrincipalSignInLogs table Microsoft.OperationalInsights/workspaces/query/MNFDeviceUpdates/readRead data from the MNFDeviceUpdates table Microsoft.OperationalInsights/workspaces/query/MNFSystemSessionHistoryUpdates/readRead data from the MNFSystemSessionHistoryUpdates table Microsoft.OperationalInsights/workspaces/query/MNFSystemStateMessageUpdates/readRead data from the MNFSystemStateMessageUpdates table Microsoft.OperationalInsights/workspaces/query/MPCIngestionLogs/readRead data from the MPCIngestionLogs table Microsoft.OperationalInsights/workspaces/query/MySqlAuditLogs/readRead data from the MySqlAuditLogs table Microsoft.OperationalInsights/workspaces/query/MySqlSlowLogs/readRead data from the MySqlSlowLogs table Microsoft.OperationalInsights/workspaces/query/NatGatewayFlowlogsV1/readRead data from the NatGatewayFlowlogsV1 table Microsoft.OperationalInsights/workspaces/query/NCBMBreakGlassAuditLogs/readRead data from the NCBMBreakGlassAuditLogs table Microsoft.OperationalInsights/workspaces/query/NCBMSecurityDefenderLogs/readRead data from the NCBMSecurityDefenderLogs table Microsoft.OperationalInsights/workspaces/query/NCBMSecurityLogs/readRead data from the NCBMSecurityLogs table Microsoft.OperationalInsights/workspaces/query/NCBMSystemLogs/readRead data from the NCBMSystemLogs table Microsoft.OperationalInsights/workspaces/query/NCCIDRACLogs/readRead data from the NCCIDRACLogs table Microsoft.OperationalInsights/workspaces/query/NCCKubernetesAPIAuditLogs/readRead data from the NCCKubernetesAPIAuditLogs table Microsoft.OperationalInsights/workspaces/query/NCCKubernetesLogs/readRead data from the NCCKubernetesLogs table Microsoft.OperationalInsights/workspaces/query/NCCPlatformOperationsLogs/readRead data from the NCCPlatformOperationsLogs table Microsoft.OperationalInsights/workspaces/query/NCCVMOrchestrationLogs/readRead data from the NCCVMOrchestrationLogs table Microsoft.OperationalInsights/workspaces/query/NCMClusterOperationsLogs/readRead data from the NCMClusterOperationsLogs table Microsoft.OperationalInsights/workspaces/query/NCSStorageAlerts/readRead data from the NCSStorageAlerts table Microsoft.OperationalInsights/workspaces/query/NCSStorageAudits/readRead data from the NCSStorageAudits table Microsoft.OperationalInsights/workspaces/query/NCSStorageLogs/readRead data from the NCSStorageLogs table Microsoft.OperationalInsights/workspaces/query/NetworkAccessAlerts/readRead data from the NetworkAccessAlerts table Microsoft.OperationalInsights/workspaces/query/NetworkAccessConnectionEvents/readRead data from the NetworkAccessConnectionEvents table Microsoft.OperationalInsights/workspaces/query/NetworkAccessGenerativeAIInsights/readRead data from the NetworkAccessGenerativeAIInsights table Microsoft.OperationalInsights/workspaces/query/NetworkAccessTraffic/readRead data from the NetworkAccessTraffic table Microsoft.OperationalInsights/workspaces/query/NetworkMonitoring/readRead data from the NetworkMonitoring table Microsoft.OperationalInsights/workspaces/query/NetworkSessions/readRead data from the NetworkSessions table Microsoft.OperationalInsights/workspaces/query/NginxUpstreamUpdateLogs/readRead data from the NginxUpstreamUpdateLogs table Microsoft.OperationalInsights/workspaces/query/NGXOperationLogs/readRead data from the NGXOperationLogs table Microsoft.OperationalInsights/workspaces/query/NGXSecurityLogs/readRead data from the NGXSecurityLogs table Microsoft.OperationalInsights/workspaces/query/NSPAccessLogs/readRead data from the NSPAccessLogs table Microsoft.OperationalInsights/workspaces/query/NTAInsights/readRead data from the NTAInsights table Microsoft.OperationalInsights/workspaces/query/NTAIpDetails/readRead data from the NTAIpDetails table Microsoft.OperationalInsights/workspaces/query/NTANetAnalytics/readRead data from the NTANetAnalytics table Microsoft.OperationalInsights/workspaces/query/NTARuleRecommendation/readRead data from the NTARuleRecommendation table Microsoft.OperationalInsights/workspaces/query/NTATopologyDetails/readRead data from the NTATopologyDetails table Microsoft.OperationalInsights/workspaces/query/NWConnectionMonitorDestinationListenerResult/readRead data from the NWConnectionMonitorDestinationListenerResult table Microsoft.OperationalInsights/workspaces/query/NWConnectionMonitorDNSResult/readRead data from the NWConnectionMonitorDNSResult table Microsoft.OperationalInsights/workspaces/query/NWConnectionMonitorPathResult/readRead data from the NWConnectionMonitorPathResult table Microsoft.OperationalInsights/workspaces/query/NWConnectionMonitorTestResult/readRead data from the NWConnectionMonitorTestResult table Microsoft.OperationalInsights/workspaces/query/OEPAirFlowTask/readRead data from the OEPAirFlowTask table Microsoft.OperationalInsights/workspaces/query/OEPAuditLogs/readRead data from the OEPAuditLogs table Microsoft.OperationalInsights/workspaces/query/OEPDataplaneLogs/readRead data from the OEPDataplaneLogs table Microsoft.OperationalInsights/workspaces/query/OEPElasticOperator/readRead data from the OEPElasticOperator table Microsoft.OperationalInsights/workspaces/query/OEPElasticsearch/readRead data from the OEPElasticsearch table Microsoft.OperationalInsights/workspaces/query/OEWAuditLogs/readRead data from the OEWAuditLogs table Microsoft.OperationalInsights/workspaces/query/OEWExperimentAssignmentSummary/readRead data from the OEWExperimentAssignmentSummary table Microsoft.OperationalInsights/workspaces/query/OEWExperimentScorecardMetricPairs/readRead data from the OEWExperimentScorecardMetricPairs table Microsoft.OperationalInsights/workspaces/query/OEWExperimentScorecards/readRead data from the OEWExperimentScorecards table Microsoft.OperationalInsights/workspaces/query/OfficeActivity/readRead data from the OfficeActivity table Microsoft.OperationalInsights/workspaces/query/OGOAuditLogs/readRead data from the OGOAuditLogs table Microsoft.OperationalInsights/workspaces/query/OktaSystemLogs/readRead data from the OktaSystemLogs table Microsoft.OperationalInsights/workspaces/query/OLPSupplyChainEntityOperations/readRead data from the OLPSupplyChainEntityOperations table Microsoft.OperationalInsights/workspaces/query/OLPSupplyChainEvents/readRead data from the OLPSupplyChainEvents table Microsoft.OperationalInsights/workspaces/query/Operation/readRead data from the Operation table Microsoft.OperationalInsights/workspaces/query/OracleCloudDatabase/readRead data from the OracleCloudDatabase table Microsoft.OperationalInsights/workspaces/query/OTelEvents/readRead data from the OTelEvents table Microsoft.OperationalInsights/workspaces/query/OTelLogs/readRead data from the OTelLogs table Microsoft.OperationalInsights/workspaces/query/OTelResources/readRead data from the OTelResources table Microsoft.OperationalInsights/workspaces/query/OTelSpans/readRead data from the OTelSpans table Microsoft.OperationalInsights/workspaces/query/OTelTraces/readRead data from the OTelTraces table Microsoft.OperationalInsights/workspaces/query/OTelTracesAgent/readRead data from the OTelTracesAgent table Microsoft.OperationalInsights/workspaces/query/Perf/readRead data from the Perf table Microsoft.OperationalInsights/workspaces/query/PerfInsightsFindings/readRead data from the PerfInsightsFindings table Microsoft.OperationalInsights/workspaces/query/PerfInsightsImpactedResources/readRead data from the PerfInsightsImpactedResources table Microsoft.OperationalInsights/workspaces/query/PerfInsightsRun/readRead data from the PerfInsightsRun table Microsoft.OperationalInsights/workspaces/query/PFTitleAuditLogs/readRead data from the PFTitleAuditLogs table Microsoft.OperationalInsights/workspaces/query/PGSQLAutovacuumStats/readRead data from the PGSQLAutovacuumStats table Microsoft.OperationalInsights/workspaces/query/PGSQLDbTransactionsStats/readRead data from the PGSQLDbTransactionsStats table Microsoft.OperationalInsights/workspaces/query/PGSQLPgBouncer/readRead data from the PGSQLPgBouncer table Microsoft.OperationalInsights/workspaces/query/PGSQLPgStatActivitySessions/readRead data from the PGSQLPgStatActivitySessions table Microsoft.OperationalInsights/workspaces/query/PGSQLQueryStoreQueryText/readRead data from the PGSQLQueryStoreQueryText table Microsoft.OperationalInsights/workspaces/query/PGSQLQueryStoreRuntime/readRead data from the PGSQLQueryStoreRuntime table Microsoft.OperationalInsights/workspaces/query/PGSQLQueryStoreWaits/readRead data from the PGSQLQueryStoreWaits table Microsoft.OperationalInsights/workspaces/query/PGSQLServerLogs/readRead data from the PGSQLServerLogs table Microsoft.OperationalInsights/workspaces/query/PowerAppsActivity/readRead data from the PowerAppsActivity table Microsoft.OperationalInsights/workspaces/query/PowerAutomateActivity/readRead data from the PowerAutomateActivity table Microsoft.OperationalInsights/workspaces/query/PowerBIActivity/readRead data from the PowerBIActivity table Microsoft.OperationalInsights/workspaces/query/PowerBIDatasetsTenant/readRead data from the PowerBIDatasetsTenant table Microsoft.OperationalInsights/workspaces/query/PowerBIDatasetsWorkspace/readRead data from the PowerBIDatasetsWorkspace table Microsoft.OperationalInsights/workspaces/query/PowerPlatformAdminActivity/readRead data from the PowerPlatformAdminActivity table Microsoft.OperationalInsights/workspaces/query/PowerPlatformConnectorActivity/readRead data from the PowerPlatformConnectorActivity table Microsoft.OperationalInsights/workspaces/query/PowerPlatformDlpActivity/readRead data from the PowerPlatformDlpActivity table Microsoft.OperationalInsights/workspaces/query/ProjectActivity/readRead data from the ProjectActivity table Microsoft.OperationalInsights/workspaces/query/ProtectionStatus/readRead data from the ProtectionStatus table Microsoft.OperationalInsights/workspaces/query/PurviewDataSensitivityLogs/readRead data from the PurviewDataSensitivityLogs table Microsoft.OperationalInsights/workspaces/query/PurviewScanStatusLogs/readRead data from the PurviewScanStatusLogs table Microsoft.OperationalInsights/workspaces/query/PurviewSecurityLogs/readRead data from the PurviewSecurityLogs table Microsoft.OperationalInsights/workspaces/query/QualysKnowledgeBase/readRead data from the QualysKnowledgeBase table Microsoft.OperationalInsights/workspaces/query/Rapid7InsightVMCloudAssets/readRead data from the Rapid7InsightVMCloudAssets table Microsoft.OperationalInsights/workspaces/query/Rapid7InsightVMCloudVulnerabilities/readRead data from the Rapid7InsightVMCloudVulnerabilities table Microsoft.OperationalInsights/workspaces/query/REDConnectionEvents/readRead data from the REDConnectionEvents table Microsoft.OperationalInsights/workspaces/query/RemoteNetworkHealthLogs/readRead data from the RemoteNetworkHealthLogs table Microsoft.OperationalInsights/workspaces/query/ResourceManagementPublicAccessLogs/readRead data from the ResourceManagementPublicAccessLogs table Microsoft.OperationalInsights/workspaces/query/RetinaNetworkFlowLogs/readRead data from the RetinaNetworkFlowLogs table Microsoft.OperationalInsights/workspaces/query/SCCMAssessmentRecommendation/readRead data from the SCCMAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SCGPoolExecutionLog/readRead data from the SCGPoolExecutionLog table Microsoft.OperationalInsights/workspaces/query/SCGPoolRequestLog/readRead data from the SCGPoolRequestLog table Microsoft.OperationalInsights/workspaces/query/SCOMAssessmentRecommendation/readRead data from the SCOMAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SecureScoreControls/readRead data from the SecureScoreControls table Microsoft.OperationalInsights/workspaces/query/SecureScores/readRead data from the SecureScores table Microsoft.OperationalInsights/workspaces/query/SecurityAlert/readRead data from the SecurityAlert table Microsoft.OperationalInsights/workspaces/query/SecurityAttackPathData/readRead data from the SecurityAttackPathData table Microsoft.OperationalInsights/workspaces/query/SecurityBaseline/readRead data from the SecurityBaseline table Microsoft.OperationalInsights/workspaces/query/SecurityBaselineSummary/readRead data from the SecurityBaselineSummary table Microsoft.OperationalInsights/workspaces/query/SecurityDetection/readRead data from the SecurityDetection table Microsoft.OperationalInsights/workspaces/query/SecurityEvent/readRead data from the SecurityEvent table Microsoft.OperationalInsights/workspaces/query/SecurityIncident/readRead data from the SecurityIncident table Microsoft.OperationalInsights/workspaces/query/SecurityIoTRawEvent/readRead data from the SecurityIoTRawEvent table Microsoft.OperationalInsights/workspaces/query/SecurityNestedRecommendation/readRead data from the SecurityNestedRecommendation table Microsoft.OperationalInsights/workspaces/query/SecurityRecommendation/readRead data from the SecurityRecommendation table Microsoft.OperationalInsights/workspaces/query/SecurityRegulatoryCompliance/readRead data from the SecurityRegulatoryCompliance table Microsoft.OperationalInsights/workspaces/query/SentinelAlibabaCloudAPIGatewayLogs/readRead data from the SentinelAlibabaCloudAPIGatewayLogs table Microsoft.OperationalInsights/workspaces/query/SentinelAlibabaCloudVPCFlowLogs/readRead data from the SentinelAlibabaCloudVPCFlowLogs table Microsoft.OperationalInsights/workspaces/query/SentinelAlibabaCloudWAFLogs/readRead data from the SentinelAlibabaCloudWAFLogs table Microsoft.OperationalInsights/workspaces/query/SentinelAudit/readRead data from the SentinelAudit table Microsoft.OperationalInsights/workspaces/query/SentinelBehaviorEntities/readRead data from the SentinelBehaviorEntities table Microsoft.OperationalInsights/workspaces/query/SentinelBehaviorInfo/readRead data from the SentinelBehaviorInfo table Microsoft.OperationalInsights/workspaces/query/SentinelHealth/readRead data from the SentinelHealth table Microsoft.OperationalInsights/workspaces/query/SentinelImpervaWAFCloudV2Logs/readRead data from the SentinelImpervaWAFCloudV2Logs table Microsoft.OperationalInsights/workspaces/query/ServiceFabricOperationalEvent/readRead data from the ServiceFabricOperationalEvent table Microsoft.OperationalInsights/workspaces/query/ServiceFabricReliableActorEvent/readRead data from the ServiceFabricReliableActorEvent table Microsoft.OperationalInsights/workspaces/query/ServiceFabricReliableServiceEvent/readRead data from the ServiceFabricReliableServiceEvent table Microsoft.OperationalInsights/workspaces/query/SfBAssessmentRecommendation/readRead data from the SfBAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SfBOnlineAssessmentRecommendation/readRead data from the SfBOnlineAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SharePointOnlineAssessmentRecommendation/readRead data from the SharePointOnlineAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SignalRServiceDiagnosticLogs/readRead data from the SignalRServiceDiagnosticLogs table Microsoft.OperationalInsights/workspaces/query/SigninLogs/readRead data from the SigninLogs table Microsoft.OperationalInsights/workspaces/query/SPAssessmentRecommendation/readRead data from the SPAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SQLAssessmentRecommendation/readRead data from the SQLAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/SqlAtpStatus/readRead data from the SqlAtpStatus table Microsoft.OperationalInsights/workspaces/query/SQLSecurityAuditEvents/readRead data from the SQLSecurityAuditEvents table Microsoft.OperationalInsights/workspaces/query/SqlVulnerabilityAssessmentResult/readRead data from the SqlVulnerabilityAssessmentResult table Microsoft.OperationalInsights/workspaces/query/SqlVulnerabilityAssessmentScanStatus/readRead data from the SqlVulnerabilityAssessmentScanStatus table Microsoft.OperationalInsights/workspaces/query/StorageBlobLogs/readRead data from the StorageBlobLogs table Microsoft.OperationalInsights/workspaces/query/StorageCacheOperationEvents/readRead data from the StorageCacheOperationEvents table Microsoft.OperationalInsights/workspaces/query/StorageCacheUpgradeEvents/readRead data from the StorageCacheUpgradeEvents table Microsoft.OperationalInsights/workspaces/query/StorageCacheWarningEvents/readRead data from the StorageCacheWarningEvents table Microsoft.OperationalInsights/workspaces/query/StorageFileLogs/readRead data from the StorageFileLogs table Microsoft.OperationalInsights/workspaces/query/StorageMalwareScanningResults/readRead data from the StorageMalwareScanningResults table Microsoft.OperationalInsights/workspaces/query/StorageMoverCopyLogsFailed/readRead data from the StorageMoverCopyLogsFailed table Microsoft.OperationalInsights/workspaces/query/StorageMoverCopyLogsTransferred/readRead data from the StorageMoverCopyLogsTransferred table Microsoft.OperationalInsights/workspaces/query/StorageMoverJobRunLogs/readRead data from the StorageMoverJobRunLogs table Microsoft.OperationalInsights/workspaces/query/StorageQueueLogs/readRead data from the StorageQueueLogs table Microsoft.OperationalInsights/workspaces/query/StorageTableLogs/readRead data from the StorageTableLogs table Microsoft.OperationalInsights/workspaces/query/SucceededIngestion/readRead data from the SucceededIngestion table Microsoft.OperationalInsights/workspaces/query/SVMPoolExecutionLog/readRead data from the SVMPoolExecutionLog table Microsoft.OperationalInsights/workspaces/query/SVMPoolRequestLog/readRead data from the SVMPoolRequestLog table Microsoft.OperationalInsights/workspaces/query/SynapseBigDataPoolApplicationsEnded/readRead data from the SynapseBigDataPoolApplicationsEnded table Microsoft.OperationalInsights/workspaces/query/SynapseBuiltinSqlPoolRequestsEnded/readRead data from the SynapseBuiltinSqlPoolRequestsEnded table Microsoft.OperationalInsights/workspaces/query/SynapseDXCommand/readRead data from the SynapseDXCommand table Microsoft.OperationalInsights/workspaces/query/SynapseDXFailedIngestion/readRead data from the SynapseDXFailedIngestion table Microsoft.OperationalInsights/workspaces/query/SynapseDXIngestionBatching/readRead data from the SynapseDXIngestionBatching table Microsoft.OperationalInsights/workspaces/query/SynapseDXQuery/readRead data from the SynapseDXQuery table Microsoft.OperationalInsights/workspaces/query/SynapseDXSucceededIngestion/readRead data from the SynapseDXSucceededIngestion table Microsoft.OperationalInsights/workspaces/query/SynapseDXTableDetails/readRead data from the SynapseDXTableDetails table Microsoft.OperationalInsights/workspaces/query/SynapseDXTableUsageStatistics/readRead data from the SynapseDXTableUsageStatistics table Microsoft.OperationalInsights/workspaces/query/SynapseGatewayApiRequests/readRead data from the SynapseGatewayApiRequests table Microsoft.OperationalInsights/workspaces/query/SynapseIntegrationActivityRuns/readRead data from the SynapseIntegrationActivityRuns table Microsoft.OperationalInsights/workspaces/query/SynapseIntegrationPipelineRuns/readRead data from the SynapseIntegrationPipelineRuns table Microsoft.OperationalInsights/workspaces/query/SynapseIntegrationTriggerRuns/readRead data from the SynapseIntegrationTriggerRuns table Microsoft.OperationalInsights/workspaces/query/SynapseLinkEvent/readRead data from the SynapseLinkEvent table Microsoft.OperationalInsights/workspaces/query/SynapseRbacOperations/readRead data from the SynapseRbacOperations table Microsoft.OperationalInsights/workspaces/query/SynapseScopePoolScopeJobsEnded/readRead data from the SynapseScopePoolScopeJobsEnded table Microsoft.OperationalInsights/workspaces/query/SynapseScopePoolScopeJobsStateChange/readRead data from the SynapseScopePoolScopeJobsStateChange table Microsoft.OperationalInsights/workspaces/query/SynapseSqlPoolDmsWorkers/readRead data from the SynapseSqlPoolDmsWorkers table Microsoft.OperationalInsights/workspaces/query/SynapseSqlPoolExecRequests/readRead data from the SynapseSqlPoolExecRequests table Microsoft.OperationalInsights/workspaces/query/SynapseSqlPoolRequestSteps/readRead data from the SynapseSqlPoolRequestSteps table Microsoft.OperationalInsights/workspaces/query/SynapseSqlPoolSqlRequests/readRead data from the SynapseSqlPoolSqlRequests table Microsoft.OperationalInsights/workspaces/query/SynapseSqlPoolWaits/readRead data from the SynapseSqlPoolWaits table Microsoft.OperationalInsights/workspaces/query/Syslog/readRead data from the Syslog table Microsoft.OperationalInsights/workspaces/query/Tables.Custom/readReading data from any custom log Microsoft.OperationalInsights/workspaces/query/ThreatIntelExportOperation/readRead data from the ThreatIntelExportOperation table Microsoft.OperationalInsights/workspaces/query/ThreatIntelIndicators/readRead data from the ThreatIntelIndicators table Microsoft.OperationalInsights/workspaces/query/ThreatIntelligenceIndicator/readRead data from the ThreatIntelligenceIndicator table Microsoft.OperationalInsights/workspaces/query/ThreatIntelObjects/readRead data from the ThreatIntelObjects table Microsoft.OperationalInsights/workspaces/query/TOUserAudits/readRead data from the TOUserAudits table Microsoft.OperationalInsights/workspaces/query/TOUserDiagnostics/readRead data from the TOUserDiagnostics table Microsoft.OperationalInsights/workspaces/query/TSIIngress/readRead data from the TSIIngress table Microsoft.OperationalInsights/workspaces/query/UAApp/readRead data from the UAApp table Microsoft.OperationalInsights/workspaces/query/UAComputer/readRead data from the UAComputer table Microsoft.OperationalInsights/workspaces/query/UAComputerRank/readRead data from the UAComputerRank table Microsoft.OperationalInsights/workspaces/query/UADriver/readRead data from the UADriver table Microsoft.OperationalInsights/workspaces/query/UADriverProblemCodes/readRead data from the UADriverProblemCodes table Microsoft.OperationalInsights/workspaces/query/UAFeedback/readRead data from the UAFeedback table Microsoft.OperationalInsights/workspaces/query/UAIESiteDiscovery/readRead data from the UAIESiteDiscovery table Microsoft.OperationalInsights/workspaces/query/UAOfficeAddIn/readRead data from the UAOfficeAddIn table Microsoft.OperationalInsights/workspaces/query/UAProposedActionPlan/readRead data from the UAProposedActionPlan table Microsoft.OperationalInsights/workspaces/query/UASysReqIssue/readRead data from the UASysReqIssue table Microsoft.OperationalInsights/workspaces/query/UAUpgradedComputer/readRead data from the UAUpgradedComputer table Microsoft.OperationalInsights/workspaces/query/UCClient/readRead data from the UCClient table Microsoft.OperationalInsights/workspaces/query/UCClientReadinessStatus/readRead data from the UCClientReadinessStatus table Microsoft.OperationalInsights/workspaces/query/UCClientUpdateStatus/readRead data from the UCClientUpdateStatus table Microsoft.OperationalInsights/workspaces/query/UCDeviceAlert/readRead data from the UCDeviceAlert table Microsoft.OperationalInsights/workspaces/query/UCDOAggregatedStatus/readRead data from the UCDOAggregatedStatus table Microsoft.OperationalInsights/workspaces/query/UCDOStatus/readRead data from the UCDOStatus table Microsoft.OperationalInsights/workspaces/query/UCServiceUpdateStatus/readRead data from the UCServiceUpdateStatus table Microsoft.OperationalInsights/workspaces/query/UCUpdateAlert/readRead data from the UCUpdateAlert table Microsoft.OperationalInsights/workspaces/query/Update/readRead data from the Update table Microsoft.OperationalInsights/workspaces/query/UpdateRunProgress/readRead data from the UpdateRunProgress table Microsoft.OperationalInsights/workspaces/query/UpdateSummary/readRead data from the UpdateSummary table Microsoft.OperationalInsights/workspaces/query/UrlClickEvents/readRead data from the UrlClickEvents table Microsoft.OperationalInsights/workspaces/query/Usage/readRead data from the Usage table Microsoft.OperationalInsights/workspaces/query/UserAccessAnalytics/readRead data from the UserAccessAnalytics table Microsoft.OperationalInsights/workspaces/query/UserPeerAnalytics/readRead data from the UserPeerAnalytics table Microsoft.OperationalInsights/workspaces/query/VCoreMongoRequests/readRead data from the VCoreMongoRequests table Microsoft.OperationalInsights/workspaces/query/VIAudit/readRead data from the VIAudit table Microsoft.OperationalInsights/workspaces/query/VIIndexing/readRead data from the VIIndexing table Microsoft.OperationalInsights/workspaces/query/VMBoundPort/readRead data from the VMBoundPort table Microsoft.OperationalInsights/workspaces/query/VMComputer/readRead data from the VMComputer table Microsoft.OperationalInsights/workspaces/query/VMConnection/readRead data from the VMConnection table Microsoft.OperationalInsights/workspaces/query/VMProcess/readRead data from the VMProcess table Microsoft.OperationalInsights/workspaces/query/W3CIISLog/readRead data from the W3CIISLog table Microsoft.OperationalInsights/workspaces/query/WaaSDeploymentStatus/readRead data from the WaaSDeploymentStatus table Microsoft.OperationalInsights/workspaces/query/WaaSInsiderStatus/readRead data from the WaaSInsiderStatus table Microsoft.OperationalInsights/workspaces/query/WaaSUpdateStatus/readRead data from the WaaSUpdateStatus table Microsoft.OperationalInsights/workspaces/query/Watchlist/readRead data from the Watchlist table Microsoft.OperationalInsights/workspaces/query/WDAVStatus/readRead data from the WDAVStatus table Microsoft.OperationalInsights/workspaces/query/WDAVThreat/readRead data from the WDAVThreat table Microsoft.OperationalInsights/workspaces/query/WebPubSubConnectivity/readRead data from the WebPubSubConnectivity table Microsoft.OperationalInsights/workspaces/query/WebPubSubHttpRequest/readRead data from the WebPubSubHttpRequest table Microsoft.OperationalInsights/workspaces/query/WebPubSubMessaging/readRead data from the WebPubSubMessaging table Microsoft.OperationalInsights/workspaces/query/Windows365AuditLogs/readRead data from the Windows365AuditLogs table Microsoft.OperationalInsights/workspaces/query/WindowsClientAssessmentRecommendation/readRead data from the WindowsClientAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/WindowsEvent/readRead data from the WindowsEvent table Microsoft.OperationalInsights/workspaces/query/WindowsFirewall/readRead data from the WindowsFirewall table Microsoft.OperationalInsights/workspaces/query/WindowsServerAssessmentRecommendation/readRead data from the WindowsServerAssessmentRecommendation table Microsoft.OperationalInsights/workspaces/query/WireData/readRead data from the WireData table Microsoft.OperationalInsights/workspaces/query/WorkloadDiagnosticLogs/readRead data from the WorkloadDiagnosticLogs table Microsoft.OperationalInsights/workspaces/query/WorkloadMonitoringPerf/readRead data from the WorkloadMonitoringPerf table Microsoft.OperationalInsights/workspaces/query/WOUserAudits/readRead data from the WOUserAudits table Microsoft.OperationalInsights/workspaces/query/WOUserDiagnostics/readRead data from the WOUserDiagnostics table Microsoft.OperationalInsights/workspaces/query/WUDOAggregatedStatus/readRead data from the WUDOAggregatedStatus table Microsoft.OperationalInsights/workspaces/query/WUDOStatus/readRead data from the WUDOStatus table Microsoft.OperationalInsights/workspaces/query/WVDAgentHealthStatus/readRead data from the WVDAgentHealthStatus table Microsoft.OperationalInsights/workspaces/query/WVDAutoscaleEvaluationPooled/readRead data from the WVDAutoscaleEvaluationPooled table Microsoft.OperationalInsights/workspaces/query/WVDCheckpoints/readRead data from the WVDCheckpoints table Microsoft.OperationalInsights/workspaces/query/WVDConnectionGraphicsDataPreview/readRead data from the WVDConnectionGraphicsDataPreview table Microsoft.OperationalInsights/workspaces/query/WVDConnectionNetworkData/readRead data from the WVDConnectionNetworkData table Microsoft.OperationalInsights/workspaces/query/WVDConnections/readRead data from the WVDConnections table Microsoft.OperationalInsights/workspaces/query/WVDErrors/readRead data from the WVDErrors table Microsoft.OperationalInsights/workspaces/query/WVDFeeds/readRead data from the WVDFeeds table Microsoft.OperationalInsights/workspaces/query/WVDHostRegistrations/readRead data from the WVDHostRegistrations table Microsoft.OperationalInsights/workspaces/query/WVDManagement/readRead data from the WVDManagement table Microsoft.OperationalInsights/workspaces/query/WVDMultiLinkAdd/readRead data from the WVDMultiLinkAdd table Microsoft.OperationalInsights/workspaces/query/WVDSessionHostManagement/readRead data from the WVDSessionHostManagement table Microsoft.OperationalInsights/workspaces/query/ZTSRequest/readRead data from the ZTSRequest table Microsoft.OperationalInsights/workspaces/restoreLogs/writeRestore data from a table. Microsoft.OperationalInsights/workspaces/rules/readGet alert rule. Microsoft.OperationalInsights/workspaces/savedSearches/readGets a saved search query. Microsoft.OperationalInsights/workspaces/savedSearches/writeCreates a saved search query Microsoft.OperationalInsights/workspaces/savedSearches/deleteDeletes a saved search query Microsoft.OperationalInsights/workspaces/savedSearches/schedules/readGet scheduled saved search. Microsoft.OperationalInsights/workspaces/savedSearches/schedules/deleteDelete scheduled saved search. Microsoft.OperationalInsights/workspaces/savedSearches/schedules/writeCreate or update scheduled saved search. Microsoft.OperationalInsights/workspaces/savedSearches/schedules/actions/readGet Management Configuration action. Microsoft.OperationalInsights/workspaces/savedSearches/schedules/actions/writeDelete Management Configuration action. Microsoft.OperationalInsights/workspaces/savedSearches/schedules/actions/deleteCreate or update scheduled search action. Microsoft.OperationalInsights/workspaces/schema/readGets the search schema for the workspace. Search schema includes the exposed fields and their types. Microsoft.OperationalInsights/workspaces/scopedprivatelinkproxies/readGet Scoped Private Link Proxy Microsoft.OperationalInsights/workspaces/scopedprivatelinkproxies/writePut Scoped Private Link Proxy Microsoft.OperationalInsights/workspaces/scopedprivatelinkproxies/deleteDelete Scoped Private Link Proxy Microsoft.OperationalInsights/workspaces/search/readGet search results. Deprecated. Microsoft.OperationalInsights/workspaces/searchJobs/writeRun a search job. Microsoft.OperationalInsights/workspaces/sharedkeys/readRetrieves the shared keys for the workspace. These keys are used to connect Microsoft Operational Insights agents to the workspace. Microsoft.OperationalInsights/workspaces/storageinsightconfigs/writeCreates a new storage configuration. These configurations are used to pull data from a location in an existing storage account. Microsoft.OperationalInsights/workspaces/storageinsightconfigs/readGets a storage configuration. Microsoft.OperationalInsights/workspaces/storageinsightconfigs/deleteDeletes a storage configuration. This will stop Microsoft Operational Insights from reading data from the storage account. Microsoft.OperationalInsights/workspaces/summarylogs/writeCreate or update a log analytics table. Microsoft.OperationalInsights/workspaces/summarylogs/readGet a log analytics table. Microsoft.OperationalInsights/workspaces/summarylogs/deleteDelete a log analytics summary logs. Microsoft.OperationalInsights/workspaces/summarylogs/start/actionStarting a suspended summary log rule. Microsoft.OperationalInsights/workspaces/summarylogs/stop/actionSuspending a summary log rule. Microsoft.OperationalInsights/workspaces/summarylogs/operationresults/readGets the result of the asynchronous summarylogs operation. Microsoft.OperationalInsights/workspaces/tables/writeCreate or update a log analytics table. Microsoft.OperationalInsights/workspaces/tables/readGet a log analytics table. Microsoft.OperationalInsights/workspaces/tables/deleteDelete a log analytics table. Microsoft.OperationalInsights/workspaces/tables/migrate/actionMigrating a log analytics V1 table to V2 variation. Microsoft.OperationalInsights/workspaces/tables/deleteData/actionDelete Data from log analytics workspace. Microsoft.OperationalInsights/workspaces/tables/operationresults/readGets the result of the asynchronous tables operation. Microsoft.OperationalInsights/workspaces/tables/query/readRun queries over the data of a specific table in the workspace Microsoft.OperationalInsights/workspaces/upgradetranslationfailures/readGet Search Upgrade Translation Failure log for the workspace Microsoft.OperationalInsights/workspaces/usages/readGets usage data for a workspace including the amount of data read by the workspace. Microsoft.OperationalInsights/workspaces/views/readGet workspace view. Microsoft.OperationalInsights/workspaces/views/deleteDelete workspace view. Microsoft.OperationalInsights/workspaces/views/writeCreate or update workspace view. DataAction Description Microsoft.OperationalInsights/workspaces/jobs/export/actionLets you export data from Log Analytics workspace per query and time range Microsoft.OperationalInsights/workspaces/tables/data/readAllows you to provide read data access to workspaces, or more fine-grained data entities, such as specific tables or rows.
A simplified management solution for any enterprise.
Azure service: Azure Monitor
[!div class="mx-tableFixed"]
Action Description Microsoft.OperationsManagement/register/actionRegister a subscription to a resource provider. Microsoft.OperationsManagement/unregister/actionUnRegister a subscription to a resource provider. Microsoft.OperationsManagement/managementassociations/writeCreate or update Management Association. Microsoft.OperationsManagement/managementassociations/readGet Management Association. Microsoft.OperationsManagement/managementassociations/deleteDelete Management Association. Microsoft.OperationsManagement/managementconfigurations/writeCreate or update management configuration. Microsoft.OperationsManagement/managementconfigurations/readGet management configuration. Microsoft.OperationsManagement/managementconfigurations/deleteDelete management configuration. Microsoft.OperationsManagement/solutions/writeCreate new OMS solution Microsoft.OperationsManagement/solutions/readGet existing OMS solution Microsoft.OperationsManagement/solutions/deleteDelete existing OMS solution