Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Classic
  3. API Docs
  4. monitoring
  5. DataCollectionRule

We recommend using Azure Native.

Azure Classic v6.2.0 published on Friday, Sep 27, 2024 by Pulumi
pulumi/pulumi-azure

azure.monitoring.DataCollectionRule

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure Classic v6.2.0 published on Friday, Sep 27, 2024 by Pulumi
pulumi/pulumi-azure

    Manages a Data Collection Rule.

    Create DataCollectionRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DataCollectionRule(name: string, args: DataCollectionRuleArgs, opts?: CustomResourceOptions);
    @overload
def DataCollectionRule(resource_name: str,
                       args: DataCollectionRuleArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def DataCollectionRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       data_flows: Optional[Sequence[DataCollectionRuleDataFlowArgs]] = None,
                       destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
                       resource_group_name: Optional[str] = None,
                       data_collection_endpoint_id: Optional[str] = None,
                       data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
                       description: Optional[str] = None,
                       identity: Optional[DataCollectionRuleIdentityArgs] = None,
                       kind: Optional[str] = None,
                       location: Optional[str] = None,
                       name: Optional[str] = None,
                       stream_declarations: Optional[Sequence[DataCollectionRuleStreamDeclarationArgs]] = None,
                       tags: Optional[Mapping[str, str]] = None)
    func NewDataCollectionRule(ctx *Context, name string, args DataCollectionRuleArgs, opts ...ResourceOption) (*DataCollectionRule, error)
    public DataCollectionRule(string name, DataCollectionRuleArgs args, CustomResourceOptions? opts = null)
    public DataCollectionRule(String name, DataCollectionRuleArgs args)
public DataCollectionRule(String name, DataCollectionRuleArgs args, CustomResourceOptions options)

    type: azure:monitoring:DataCollectionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DataCollectionRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dataCollectionRuleResource = new Azure.Monitoring.DataCollectionRule("dataCollectionRuleResource", new()
{
    DataFlows = new[]
    {
        new Azure.Monitoring.Inputs.DataCollectionRuleDataFlowArgs
        {
            Destinations = new[]
            {
                "string",
            },
            Streams = new[]
            {
                "string",
            },
            BuiltInTransform = "string",
            OutputStream = "string",
            TransformKql = "string",
        },
    },
    Destinations = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsArgs
    {
        AzureMonitorMetrics = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsAzureMonitorMetricsArgs
        {
            Name = "string",
        },
        EventHub = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsEventHubArgs
        {
            EventHubId = "string",
            Name = "string",
        },
        EventHubDirect = new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsEventHubDirectArgs
        {
            EventHubId = "string",
            Name = "string",
        },
        LogAnalytics = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsLogAnalyticArgs
            {
                Name = "string",
                WorkspaceResourceId = "string",
            },
        },
        MonitorAccounts = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsMonitorAccountArgs
            {
                MonitorAccountId = "string",
                Name = "string",
            },
        },
        StorageBlobDirects = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsStorageBlobDirectArgs
            {
                ContainerName = "string",
                Name = "string",
                StorageAccountId = "string",
            },
        },
        StorageBlobs = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsStorageBlobArgs
            {
                ContainerName = "string",
                Name = "string",
                StorageAccountId = "string",
            },
        },
        StorageTableDirects = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDestinationsStorageTableDirectArgs
            {
                Name = "string",
                StorageAccountId = "string",
                TableName = "string",
            },
        },
    },
    ResourceGroupName = "string",
    DataCollectionEndpointId = "string",
    DataSources = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesArgs
    {
        DataImport = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesDataImportArgs
        {
            EventHubDataSources = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesDataImportEventHubDataSourceArgs
                {
                    Name = "string",
                    Stream = "string",
                    ConsumerGroup = "string",
                },
            },
        },
        Extensions = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesExtensionArgs
            {
                ExtensionName = "string",
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
                ExtensionJson = "string",
                InputDataSources = new[]
                {
                    "string",
                },
            },
        },
        IisLogs = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesIisLogArgs
            {
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
                LogDirectories = new[]
                {
                    "string",
                },
            },
        },
        LogFiles = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesLogFileArgs
            {
                FilePatterns = new[]
                {
                    "string",
                },
                Format = "string",
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
                Settings = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesLogFileSettingsArgs
                {
                    Text = new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesLogFileSettingsTextArgs
                    {
                        RecordStartTimestampFormat = "string",
                    },
                },
            },
        },
        PerformanceCounters = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesPerformanceCounterArgs
            {
                CounterSpecifiers = new[]
                {
                    "string",
                },
                Name = "string",
                SamplingFrequencyInSeconds = 0,
                Streams = new[]
                {
                    "string",
                },
            },
        },
        PlatformTelemetries = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesPlatformTelemetryArgs
            {
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
            },
        },
        PrometheusForwarders = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesPrometheusForwarderArgs
            {
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
                LabelIncludeFilters = new[]
                {
                    new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilterArgs
                    {
                        Label = "string",
                        Value = "string",
                    },
                },
            },
        },
        Syslogs = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesSyslogArgs
            {
                FacilityNames = new[]
                {
                    "string",
                },
                LogLevels = new[]
                {
                    "string",
                },
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
            },
        },
        WindowsEventLogs = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesWindowsEventLogArgs
            {
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
                XPathQueries = new[]
                {
                    "string",
                },
            },
        },
        WindowsFirewallLogs = new[]
        {
            new Azure.Monitoring.Inputs.DataCollectionRuleDataSourcesWindowsFirewallLogArgs
            {
                Name = "string",
                Streams = new[]
                {
                    "string",
                },
            },
        },
    },
    Description = "string",
    Identity = new Azure.Monitoring.Inputs.DataCollectionRuleIdentityArgs
    {
        Type = "string",
        IdentityIds = new[]
        {
            "string",
        },
        PrincipalId = "string",
        TenantId = "string",
    },
    Kind = "string",
    Location = "string",
    Name = "string",
    StreamDeclarations = new[]
    {
        new Azure.Monitoring.Inputs.DataCollectionRuleStreamDeclarationArgs
        {
            Columns = new[]
            {
                new Azure.Monitoring.Inputs.DataCollectionRuleStreamDeclarationColumnArgs
                {
                    Name = "string",
                    Type = "string",
                },
            },
            StreamName = "string",
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := monitoring.NewDataCollectionRule(ctx, "dataCollectionRuleResource", &monitoring.DataCollectionRuleArgs{
	DataFlows: monitoring.DataCollectionRuleDataFlowArray{
		&monitoring.DataCollectionRuleDataFlowArgs{
			Destinations: pulumi.StringArray{
				pulumi.String("string"),
			},
			Streams: pulumi.StringArray{
				pulumi.String("string"),
			},
			BuiltInTransform: pulumi.String("string"),
			OutputStream:     pulumi.String("string"),
			TransformKql:     pulumi.String("string"),
		},
	},
	Destinations: &monitoring.DataCollectionRuleDestinationsArgs{
		AzureMonitorMetrics: &monitoring.DataCollectionRuleDestinationsAzureMonitorMetricsArgs{
			Name: pulumi.String("string"),
		},
		EventHub: &monitoring.DataCollectionRuleDestinationsEventHubArgs{
			EventHubId: pulumi.String("string"),
			Name:       pulumi.String("string"),
		},
		EventHubDirect: &monitoring.DataCollectionRuleDestinationsEventHubDirectArgs{
			EventHubId: pulumi.String("string"),
			Name:       pulumi.String("string"),
		},
		LogAnalytics: monitoring.DataCollectionRuleDestinationsLogAnalyticArray{
			&monitoring.DataCollectionRuleDestinationsLogAnalyticArgs{
				Name:                pulumi.String("string"),
				WorkspaceResourceId: pulumi.String("string"),
			},
		},
		MonitorAccounts: monitoring.DataCollectionRuleDestinationsMonitorAccountArray{
			&monitoring.DataCollectionRuleDestinationsMonitorAccountArgs{
				MonitorAccountId: pulumi.String("string"),
				Name:             pulumi.String("string"),
			},
		},
		StorageBlobDirects: monitoring.DataCollectionRuleDestinationsStorageBlobDirectArray{
			&monitoring.DataCollectionRuleDestinationsStorageBlobDirectArgs{
				ContainerName:    pulumi.String("string"),
				Name:             pulumi.String("string"),
				StorageAccountId: pulumi.String("string"),
			},
		},
		StorageBlobs: monitoring.DataCollectionRuleDestinationsStorageBlobArray{
			&monitoring.DataCollectionRuleDestinationsStorageBlobArgs{
				ContainerName:    pulumi.String("string"),
				Name:             pulumi.String("string"),
				StorageAccountId: pulumi.String("string"),
			},
		},
		StorageTableDirects: monitoring.DataCollectionRuleDestinationsStorageTableDirectArray{
			&monitoring.DataCollectionRuleDestinationsStorageTableDirectArgs{
				Name:             pulumi.String("string"),
				StorageAccountId: pulumi.String("string"),
				TableName:        pulumi.String("string"),
			},
		},
	},
	ResourceGroupName:        pulumi.String("string"),
	DataCollectionEndpointId: pulumi.String("string"),
	DataSources: &monitoring.DataCollectionRuleDataSourcesArgs{
		DataImport: &monitoring.DataCollectionRuleDataSourcesDataImportArgs{
			EventHubDataSources: monitoring.DataCollectionRuleDataSourcesDataImportEventHubDataSourceArray{
				&monitoring.DataCollectionRuleDataSourcesDataImportEventHubDataSourceArgs{
					Name:          pulumi.String("string"),
					Stream:        pulumi.String("string"),
					ConsumerGroup: pulumi.String("string"),
				},
			},
		},
		Extensions: monitoring.DataCollectionRuleDataSourcesExtensionArray{
			&monitoring.DataCollectionRuleDataSourcesExtensionArgs{
				ExtensionName: pulumi.String("string"),
				Name:          pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
				ExtensionJson: pulumi.String("string"),
				InputDataSources: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		IisLogs: monitoring.DataCollectionRuleDataSourcesIisLogArray{
			&monitoring.DataCollectionRuleDataSourcesIisLogArgs{
				Name: pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
				LogDirectories: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		LogFiles: monitoring.DataCollectionRuleDataSourcesLogFileArray{
			&monitoring.DataCollectionRuleDataSourcesLogFileArgs{
				FilePatterns: pulumi.StringArray{
					pulumi.String("string"),
				},
				Format: pulumi.String("string"),
				Name:   pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
				Settings: &monitoring.DataCollectionRuleDataSourcesLogFileSettingsArgs{
					Text: &monitoring.DataCollectionRuleDataSourcesLogFileSettingsTextArgs{
						RecordStartTimestampFormat: pulumi.String("string"),
					},
				},
			},
		},
		PerformanceCounters: monitoring.DataCollectionRuleDataSourcesPerformanceCounterArray{
			&monitoring.DataCollectionRuleDataSourcesPerformanceCounterArgs{
				CounterSpecifiers: pulumi.StringArray{
					pulumi.String("string"),
				},
				Name:                       pulumi.String("string"),
				SamplingFrequencyInSeconds: pulumi.Int(0),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		PlatformTelemetries: monitoring.DataCollectionRuleDataSourcesPlatformTelemetryArray{
			&monitoring.DataCollectionRuleDataSourcesPlatformTelemetryArgs{
				Name: pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		PrometheusForwarders: monitoring.DataCollectionRuleDataSourcesPrometheusForwarderArray{
			&monitoring.DataCollectionRuleDataSourcesPrometheusForwarderArgs{
				Name: pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
				LabelIncludeFilters: monitoring.DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilterArray{
					&monitoring.DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilterArgs{
						Label: pulumi.String("string"),
						Value: pulumi.String("string"),
					},
				},
			},
		},
		Syslogs: monitoring.DataCollectionRuleDataSourcesSyslogArray{
			&monitoring.DataCollectionRuleDataSourcesSyslogArgs{
				FacilityNames: pulumi.StringArray{
					pulumi.String("string"),
				},
				LogLevels: pulumi.StringArray{
					pulumi.String("string"),
				},
				Name: pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		WindowsEventLogs: monitoring.DataCollectionRuleDataSourcesWindowsEventLogArray{
			&monitoring.DataCollectionRuleDataSourcesWindowsEventLogArgs{
				Name: pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
				XPathQueries: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		WindowsFirewallLogs: monitoring.DataCollectionRuleDataSourcesWindowsFirewallLogArray{
			&monitoring.DataCollectionRuleDataSourcesWindowsFirewallLogArgs{
				Name: pulumi.String("string"),
				Streams: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
	},
	Description: pulumi.String("string"),
	Identity: &monitoring.DataCollectionRuleIdentityArgs{
		Type: pulumi.String("string"),
		IdentityIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrincipalId: pulumi.String("string"),
		TenantId:    pulumi.String("string"),
	},
	Kind:     pulumi.String("string"),
	Location: pulumi.String("string"),
	Name:     pulumi.String("string"),
	StreamDeclarations: monitoring.DataCollectionRuleStreamDeclarationArray{
		&monitoring.DataCollectionRuleStreamDeclarationArgs{
			Columns: monitoring.DataCollectionRuleStreamDeclarationColumnArray{
				&monitoring.DataCollectionRuleStreamDeclarationColumnArgs{
					Name: pulumi.String("string"),
					Type: pulumi.String("string"),
				},
			},
			StreamName: pulumi.String("string"),
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    var dataCollectionRuleResource = new DataCollectionRule("dataCollectionRuleResource", DataCollectionRuleArgs.builder()
    .dataFlows(DataCollectionRuleDataFlowArgs.builder()
        .destinations("string")
        .streams("string")
        .builtInTransform("string")
        .outputStream("string")
        .transformKql("string")
        .build())
    .destinations(DataCollectionRuleDestinationsArgs.builder()
        .azureMonitorMetrics(DataCollectionRuleDestinationsAzureMonitorMetricsArgs.builder()
            .name("string")
            .build())
        .eventHub(DataCollectionRuleDestinationsEventHubArgs.builder()
            .eventHubId("string")
            .name("string")
            .build())
        .eventHubDirect(DataCollectionRuleDestinationsEventHubDirectArgs.builder()
            .eventHubId("string")
            .name("string")
            .build())
        .logAnalytics(DataCollectionRuleDestinationsLogAnalyticArgs.builder()
            .name("string")
            .workspaceResourceId("string")
            .build())
        .monitorAccounts(DataCollectionRuleDestinationsMonitorAccountArgs.builder()
            .monitorAccountId("string")
            .name("string")
            .build())
        .storageBlobDirects(DataCollectionRuleDestinationsStorageBlobDirectArgs.builder()
            .containerName("string")
            .name("string")
            .storageAccountId("string")
            .build())
        .storageBlobs(DataCollectionRuleDestinationsStorageBlobArgs.builder()
            .containerName("string")
            .name("string")
            .storageAccountId("string")
            .build())
        .storageTableDirects(DataCollectionRuleDestinationsStorageTableDirectArgs.builder()
            .name("string")
            .storageAccountId("string")
            .tableName("string")
            .build())
        .build())
    .resourceGroupName("string")
    .dataCollectionEndpointId("string")
    .dataSources(DataCollectionRuleDataSourcesArgs.builder()
        .dataImport(DataCollectionRuleDataSourcesDataImportArgs.builder()
            .eventHubDataSources(DataCollectionRuleDataSourcesDataImportEventHubDataSourceArgs.builder()
                .name("string")
                .stream("string")
                .consumerGroup("string")
                .build())
            .build())
        .extensions(DataCollectionRuleDataSourcesExtensionArgs.builder()
            .extensionName("string")
            .name("string")
            .streams("string")
            .extensionJson("string")
            .inputDataSources("string")
            .build())
        .iisLogs(DataCollectionRuleDataSourcesIisLogArgs.builder()
            .name("string")
            .streams("string")
            .logDirectories("string")
            .build())
        .logFiles(DataCollectionRuleDataSourcesLogFileArgs.builder()
            .filePatterns("string")
            .format("string")
            .name("string")
            .streams("string")
            .settings(DataCollectionRuleDataSourcesLogFileSettingsArgs.builder()
                .text(DataCollectionRuleDataSourcesLogFileSettingsTextArgs.builder()
                    .recordStartTimestampFormat("string")
                    .build())
                .build())
            .build())
        .performanceCounters(DataCollectionRuleDataSourcesPerformanceCounterArgs.builder()
            .counterSpecifiers("string")
            .name("string")
            .samplingFrequencyInSeconds(0)
            .streams("string")
            .build())
        .platformTelemetries(DataCollectionRuleDataSourcesPlatformTelemetryArgs.builder()
            .name("string")
            .streams("string")
            .build())
        .prometheusForwarders(DataCollectionRuleDataSourcesPrometheusForwarderArgs.builder()
            .name("string")
            .streams("string")
            .labelIncludeFilters(DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilterArgs.builder()
                .label("string")
                .value("string")
                .build())
            .build())
        .syslogs(DataCollectionRuleDataSourcesSyslogArgs.builder()
            .facilityNames("string")
            .logLevels("string")
            .name("string")
            .streams("string")
            .build())
        .windowsEventLogs(DataCollectionRuleDataSourcesWindowsEventLogArgs.builder()
            .name("string")
            .streams("string")
            .xPathQueries("string")
            .build())
        .windowsFirewallLogs(DataCollectionRuleDataSourcesWindowsFirewallLogArgs.builder()
            .name("string")
            .streams("string")
            .build())
        .build())
    .description("string")
    .identity(DataCollectionRuleIdentityArgs.builder()
        .type("string")
        .identityIds("string")
        .principalId("string")
        .tenantId("string")
        .build())
    .kind("string")
    .location("string")
    .name("string")
    .streamDeclarations(DataCollectionRuleStreamDeclarationArgs.builder()
        .columns(DataCollectionRuleStreamDeclarationColumnArgs.builder()
            .name("string")
            .type("string")
            .build())
        .streamName("string")
        .build())
    .tags(Map.of("string", "string"))
    .build());

    data_collection_rule_resource = azure.monitoring.DataCollectionRule("dataCollectionRuleResource",
    data_flows=[{
        "destinations": ["string"],
        "streams": ["string"],
        "builtInTransform": "string",
        "outputStream": "string",
        "transformKql": "string",
    }],
    destinations={
        "azureMonitorMetrics": {
            "name": "string",
        },
        "eventHub": {
            "eventHubId": "string",
            "name": "string",
        },
        "eventHubDirect": {
            "eventHubId": "string",
            "name": "string",
        },
        "logAnalytics": [{
            "name": "string",
            "workspaceResourceId": "string",
        }],
        "monitorAccounts": [{
            "monitorAccountId": "string",
            "name": "string",
        }],
        "storageBlobDirects": [{
            "containerName": "string",
            "name": "string",
            "storageAccountId": "string",
        }],
        "storageBlobs": [{
            "containerName": "string",
            "name": "string",
            "storageAccountId": "string",
        }],
        "storageTableDirects": [{
            "name": "string",
            "storageAccountId": "string",
            "tableName": "string",
        }],
    },
    resource_group_name="string",
    data_collection_endpoint_id="string",
    data_sources={
        "dataImport": {
            "eventHubDataSources": [{
                "name": "string",
                "stream": "string",
                "consumerGroup": "string",
            }],
        },
        "extensions": [{
            "extensionName": "string",
            "name": "string",
            "streams": ["string"],
            "extensionJson": "string",
            "inputDataSources": ["string"],
        }],
        "iisLogs": [{
            "name": "string",
            "streams": ["string"],
            "logDirectories": ["string"],
        }],
        "logFiles": [{
            "filePatterns": ["string"],
            "format": "string",
            "name": "string",
            "streams": ["string"],
            "settings": {
                "text": {
                    "recordStartTimestampFormat": "string",
                },
            },
        }],
        "performanceCounters": [{
            "counterSpecifiers": ["string"],
            "name": "string",
            "samplingFrequencyInSeconds": 0,
            "streams": ["string"],
        }],
        "platformTelemetries": [{
            "name": "string",
            "streams": ["string"],
        }],
        "prometheusForwarders": [{
            "name": "string",
            "streams": ["string"],
            "labelIncludeFilters": [{
                "label": "string",
                "value": "string",
            }],
        }],
        "syslogs": [{
            "facilityNames": ["string"],
            "logLevels": ["string"],
            "name": "string",
            "streams": ["string"],
        }],
        "windowsEventLogs": [{
            "name": "string",
            "streams": ["string"],
            "xPathQueries": ["string"],
        }],
        "windowsFirewallLogs": [{
            "name": "string",
            "streams": ["string"],
        }],
    },
    description="string",
    identity={
        "type": "string",
        "identityIds": ["string"],
        "principalId": "string",
        "tenantId": "string",
    },
    kind="string",
    location="string",
    name="string",
    stream_declarations=[{
        "columns": [{
            "name": "string",
            "type": "string",
        }],
        "streamName": "string",
    }],
    tags={
        "string": "string",
    })

    const dataCollectionRuleResource = new azure.monitoring.DataCollectionRule("dataCollectionRuleResource", {
    dataFlows: [{
        destinations: ["string"],
        streams: ["string"],
        builtInTransform: "string",
        outputStream: "string",
        transformKql: "string",
    }],
    destinations: {
        azureMonitorMetrics: {
            name: "string",
        },
        eventHub: {
            eventHubId: "string",
            name: "string",
        },
        eventHubDirect: {
            eventHubId: "string",
            name: "string",
        },
        logAnalytics: [{
            name: "string",
            workspaceResourceId: "string",
        }],
        monitorAccounts: [{
            monitorAccountId: "string",
            name: "string",
        }],
        storageBlobDirects: [{
            containerName: "string",
            name: "string",
            storageAccountId: "string",
        }],
        storageBlobs: [{
            containerName: "string",
            name: "string",
            storageAccountId: "string",
        }],
        storageTableDirects: [{
            name: "string",
            storageAccountId: "string",
            tableName: "string",
        }],
    },
    resourceGroupName: "string",
    dataCollectionEndpointId: "string",
    dataSources: {
        dataImport: {
            eventHubDataSources: [{
                name: "string",
                stream: "string",
                consumerGroup: "string",
            }],
        },
        extensions: [{
            extensionName: "string",
            name: "string",
            streams: ["string"],
            extensionJson: "string",
            inputDataSources: ["string"],
        }],
        iisLogs: [{
            name: "string",
            streams: ["string"],
            logDirectories: ["string"],
        }],
        logFiles: [{
            filePatterns: ["string"],
            format: "string",
            name: "string",
            streams: ["string"],
            settings: {
                text: {
                    recordStartTimestampFormat: "string",
                },
            },
        }],
        performanceCounters: [{
            counterSpecifiers: ["string"],
            name: "string",
            samplingFrequencyInSeconds: 0,
            streams: ["string"],
        }],
        platformTelemetries: [{
            name: "string",
            streams: ["string"],
        }],
        prometheusForwarders: [{
            name: "string",
            streams: ["string"],
            labelIncludeFilters: [{
                label: "string",
                value: "string",
            }],
        }],
        syslogs: [{
            facilityNames: ["string"],
            logLevels: ["string"],
            name: "string",
            streams: ["string"],
        }],
        windowsEventLogs: [{
            name: "string",
            streams: ["string"],
            xPathQueries: ["string"],
        }],
        windowsFirewallLogs: [{
            name: "string",
            streams: ["string"],
        }],
    },
    description: "string",
    identity: {
        type: "string",
        identityIds: ["string"],
        principalId: "string",
        tenantId: "string",
    },
    kind: "string",
    location: "string",
    name: "string",
    streamDeclarations: [{
        columns: [{
            name: "string",
            type: "string",
        }],
        streamName: "string",
    }],
    tags: {
        string: "string",
    },
});

    type: azure:monitoring:DataCollectionRule
properties:
    dataCollectionEndpointId: string
    dataFlows:
        - builtInTransform: string
          destinations:
            - string
          outputStream: string
          streams:
            - string
          transformKql: string
    dataSources:
        dataImport:
            eventHubDataSources:
                - consumerGroup: string
                  name: string
                  stream: string
        extensions:
            - extensionJson: string
              extensionName: string
              inputDataSources:
                - string
              name: string
              streams:
                - string
        iisLogs:
            - logDirectories:
                - string
              name: string
              streams:
                - string
        logFiles:
            - filePatterns:
                - string
              format: string
              name: string
              settings:
                text:
                    recordStartTimestampFormat: string
              streams:
                - string
        performanceCounters:
            - counterSpecifiers:
                - string
              name: string
              samplingFrequencyInSeconds: 0
              streams:
                - string
        platformTelemetries:
            - name: string
              streams:
                - string
        prometheusForwarders:
            - labelIncludeFilters:
                - label: string
                  value: string
              name: string
              streams:
                - string
        syslogs:
            - facilityNames:
                - string
              logLevels:
                - string
              name: string
              streams:
                - string
        windowsEventLogs:
            - name: string
              streams:
                - string
              xPathQueries:
                - string
        windowsFirewallLogs:
            - name: string
              streams:
                - string
    description: string
    destinations:
        azureMonitorMetrics:
            name: string
        eventHub:
            eventHubId: string
            name: string
        eventHubDirect:
            eventHubId: string
            name: string
        logAnalytics:
            - name: string
              workspaceResourceId: string
        monitorAccounts:
            - monitorAccountId: string
              name: string
        storageBlobDirects:
            - containerName: string
              name: string
              storageAccountId: string
        storageBlobs:
            - containerName: string
              name: string
              storageAccountId: string
        storageTableDirects:
            - name: string
              storageAccountId: string
              tableName: string
    identity:
        identityIds:
            - string
        principalId: string
        tenantId: string
        type: string
    kind: string
    location: string
    name: string
    resourceGroupName: string
    streamDeclarations:
        - columns:
            - name: string
              type: string
          streamName: string
    tags:
        string: string

    DataCollectionRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The DataCollectionRule resource accepts the following input properties:

    DataFlows List<DataCollectionRuleDataFlow>
    One or more data_flow blocks as defined below.
    Destinations DataCollectionRuleDestinations
    A destinations block as defined below.
    ResourceGroupName string
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    DataCollectionEndpointId string
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    DataSources DataCollectionRuleDataSources
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    Description string
    The description of the Data Collection Rule.
    Identity DataCollectionRuleIdentity
    An identity block as defined below.
    Kind string

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    Location string
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    Name string
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    StreamDeclarations List<DataCollectionRuleStreamDeclaration>
    A stream_declaration block as defined below.
    Tags Dictionary<string, string>
    A mapping of tags which should be assigned to the Data Collection Rule.
    DataFlows []DataCollectionRuleDataFlowArgs
    One or more data_flow blocks as defined below.
    Destinations DataCollectionRuleDestinationsArgs
    A destinations block as defined below.
    ResourceGroupName string
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    DataCollectionEndpointId string
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    DataSources DataCollectionRuleDataSourcesArgs
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    Description string
    The description of the Data Collection Rule.
    Identity DataCollectionRuleIdentityArgs
    An identity block as defined below.
    Kind string

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    Location string
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    Name string
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    StreamDeclarations []DataCollectionRuleStreamDeclarationArgs
    A stream_declaration block as defined below.
    Tags map[string]string
    A mapping of tags which should be assigned to the Data Collection Rule.
    dataFlows List<DataCollectionRuleDataFlow>
    One or more data_flow blocks as defined below.
    destinations DataCollectionRuleDestinations
    A destinations block as defined below.
    resourceGroupName String
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    dataCollectionEndpointId String
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    dataSources DataCollectionRuleDataSources
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description String
    The description of the Data Collection Rule.
    identity DataCollectionRuleIdentity
    An identity block as defined below.
    kind String

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location String
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name String
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    streamDeclarations List<DataCollectionRuleStreamDeclaration>
    A stream_declaration block as defined below.
    tags Map<String,String>
    A mapping of tags which should be assigned to the Data Collection Rule.
    dataFlows DataCollectionRuleDataFlow[]
    One or more data_flow blocks as defined below.
    destinations DataCollectionRuleDestinations
    A destinations block as defined below.
    resourceGroupName string
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    dataCollectionEndpointId string
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    dataSources DataCollectionRuleDataSources
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description string
    The description of the Data Collection Rule.
    identity DataCollectionRuleIdentity
    An identity block as defined below.
    kind string

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location string
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name string
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    streamDeclarations DataCollectionRuleStreamDeclaration[]
    A stream_declaration block as defined below.
    tags {[key: string]: string}
    A mapping of tags which should be assigned to the Data Collection Rule.
    data_flows Sequence[DataCollectionRuleDataFlowArgs]
    One or more data_flow blocks as defined below.
    destinations DataCollectionRuleDestinationsArgs
    A destinations block as defined below.
    resource_group_name str
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    data_collection_endpoint_id str
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    data_sources DataCollectionRuleDataSourcesArgs
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description str
    The description of the Data Collection Rule.
    identity DataCollectionRuleIdentityArgs
    An identity block as defined below.
    kind str

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location str
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name str
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    stream_declarations Sequence[DataCollectionRuleStreamDeclarationArgs]
    A stream_declaration block as defined below.
    tags Mapping[str, str]
    A mapping of tags which should be assigned to the Data Collection Rule.
    dataFlows List<Property Map>
    One or more data_flow blocks as defined below.
    destinations Property Map
    A destinations block as defined below.
    resourceGroupName String
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    dataCollectionEndpointId String
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    dataSources Property Map
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description String
    The description of the Data Collection Rule.
    identity Property Map
    An identity block as defined below.
    kind String

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location String
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name String
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    streamDeclarations List<Property Map>
    A stream_declaration block as defined below.
    tags Map<String>
    A mapping of tags which should be assigned to the Data Collection Rule.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DataCollectionRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    ImmutableId string
    The immutable ID of the Data Collection Rule.
    Id string
    The provider-assigned unique ID for this managed resource.
    ImmutableId string
    The immutable ID of the Data Collection Rule.
    id String
    The provider-assigned unique ID for this managed resource.
    immutableId String
    The immutable ID of the Data Collection Rule.
    id string
    The provider-assigned unique ID for this managed resource.
    immutableId string
    The immutable ID of the Data Collection Rule.
    id str
    The provider-assigned unique ID for this managed resource.
    immutable_id str
    The immutable ID of the Data Collection Rule.
    id String
    The provider-assigned unique ID for this managed resource.
    immutableId String
    The immutable ID of the Data Collection Rule.

    Look up Existing DataCollectionRule Resource

    Get an existing DataCollectionRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DataCollectionRuleState, opts?: CustomResourceOptions): DataCollectionRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        data_collection_endpoint_id: Optional[str] = None,
        data_flows: Optional[Sequence[DataCollectionRuleDataFlowArgs]] = None,
        data_sources: Optional[DataCollectionRuleDataSourcesArgs] = None,
        description: Optional[str] = None,
        destinations: Optional[DataCollectionRuleDestinationsArgs] = None,
        identity: Optional[DataCollectionRuleIdentityArgs] = None,
        immutable_id: Optional[str] = None,
        kind: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        resource_group_name: Optional[str] = None,
        stream_declarations: Optional[Sequence[DataCollectionRuleStreamDeclarationArgs]] = None,
        tags: Optional[Mapping[str, str]] = None) -> DataCollectionRule
    func GetDataCollectionRule(ctx *Context, name string, id IDInput, state *DataCollectionRuleState, opts ...ResourceOption) (*DataCollectionRule, error)
    public static DataCollectionRule Get(string name, Input<string> id, DataCollectionRuleState? state, CustomResourceOptions? opts = null)
    public static DataCollectionRule get(String name, Output<String> id, DataCollectionRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DataCollectionEndpointId string
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    DataFlows List<DataCollectionRuleDataFlow>
    One or more data_flow blocks as defined below.
    DataSources DataCollectionRuleDataSources
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    Description string
    The description of the Data Collection Rule.
    Destinations DataCollectionRuleDestinations
    A destinations block as defined below.
    Identity DataCollectionRuleIdentity
    An identity block as defined below.
    ImmutableId string
    The immutable ID of the Data Collection Rule.
    Kind string

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    Location string
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    Name string
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    ResourceGroupName string
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    StreamDeclarations List<DataCollectionRuleStreamDeclaration>
    A stream_declaration block as defined below.
    Tags Dictionary<string, string>
    A mapping of tags which should be assigned to the Data Collection Rule.
    DataCollectionEndpointId string
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    DataFlows []DataCollectionRuleDataFlowArgs
    One or more data_flow blocks as defined below.
    DataSources DataCollectionRuleDataSourcesArgs
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    Description string
    The description of the Data Collection Rule.
    Destinations DataCollectionRuleDestinationsArgs
    A destinations block as defined below.
    Identity DataCollectionRuleIdentityArgs
    An identity block as defined below.
    ImmutableId string
    The immutable ID of the Data Collection Rule.
    Kind string

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    Location string
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    Name string
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    ResourceGroupName string
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    StreamDeclarations []DataCollectionRuleStreamDeclarationArgs
    A stream_declaration block as defined below.
    Tags map[string]string
    A mapping of tags which should be assigned to the Data Collection Rule.
    dataCollectionEndpointId String
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    dataFlows List<DataCollectionRuleDataFlow>
    One or more data_flow blocks as defined below.
    dataSources DataCollectionRuleDataSources
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description String
    The description of the Data Collection Rule.
    destinations DataCollectionRuleDestinations
    A destinations block as defined below.
    identity DataCollectionRuleIdentity
    An identity block as defined below.
    immutableId String
    The immutable ID of the Data Collection Rule.
    kind String

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location String
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name String
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    resourceGroupName String
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    streamDeclarations List<DataCollectionRuleStreamDeclaration>
    A stream_declaration block as defined below.
    tags Map<String,String>
    A mapping of tags which should be assigned to the Data Collection Rule.
    dataCollectionEndpointId string
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    dataFlows DataCollectionRuleDataFlow[]
    One or more data_flow blocks as defined below.
    dataSources DataCollectionRuleDataSources
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description string
    The description of the Data Collection Rule.
    destinations DataCollectionRuleDestinations
    A destinations block as defined below.
    identity DataCollectionRuleIdentity
    An identity block as defined below.
    immutableId string
    The immutable ID of the Data Collection Rule.
    kind string

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location string
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name string
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    resourceGroupName string
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    streamDeclarations DataCollectionRuleStreamDeclaration[]
    A stream_declaration block as defined below.
    tags {[key: string]: string}
    A mapping of tags which should be assigned to the Data Collection Rule.
    data_collection_endpoint_id str
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    data_flows Sequence[DataCollectionRuleDataFlowArgs]
    One or more data_flow blocks as defined below.
    data_sources DataCollectionRuleDataSourcesArgs
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description str
    The description of the Data Collection Rule.
    destinations DataCollectionRuleDestinationsArgs
    A destinations block as defined below.
    identity DataCollectionRuleIdentityArgs
    An identity block as defined below.
    immutable_id str
    The immutable ID of the Data Collection Rule.
    kind str

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location str
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name str
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    resource_group_name str
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    stream_declarations Sequence[DataCollectionRuleStreamDeclarationArgs]
    A stream_declaration block as defined below.
    tags Mapping[str, str]
    A mapping of tags which should be assigned to the Data Collection Rule.
    dataCollectionEndpointId String
    The resource ID of the Data Collection Endpoint that this rule can be used with.
    dataFlows List<Property Map>
    One or more data_flow blocks as defined below.
    dataSources Property Map
    A data_sources block as defined below. This property is optional and can be omitted if the rule is meant to be used via direct calls to the provisioned endpoint.
    description String
    The description of the Data Collection Rule.
    destinations Property Map
    A destinations block as defined below.
    identity Property Map
    An identity block as defined below.
    immutableId String
    The immutable ID of the Data Collection Rule.
    kind String

    The kind of the Data Collection Rule. Possible values are Linux, Windows, AgentDirectToStore and WorkspaceTransforms. A rule of kind Linux does not allow for windows_event_log data sources. And a rule of kind Windows does not allow for syslog data sources. If kind is not specified, all kinds of data sources are allowed.

    NOTE Once kind has been set, changing it forces a new Data Collection Rule to be created.

    location String
    The Azure Region where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    name String
    The name which should be used for this Data Collection Rule. Changing this forces a new Data Collection Rule to be created.
    resourceGroupName String
    The name of the Resource Group where the Data Collection Rule should exist. Changing this forces a new Data Collection Rule to be created.
    streamDeclarations List<Property Map>
    A stream_declaration block as defined below.
    tags Map<String>
    A mapping of tags which should be assigned to the Data Collection Rule.

    Supporting Types

    DataCollectionRuleDataFlow, DataCollectionRuleDataFlowArgs

    Destinations List<string>
    Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.
    Streams List<string>
    Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent, and Microsoft-PrometheusMetrics.
    BuiltInTransform string
    The built-in transform to transform stream data.
    OutputStream string
    The output stream of the transform. Only required if the data flow changes data to a different stream.
    TransformKql string
    The KQL query to transform stream data.
    Destinations []string
    Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.
    Streams []string
    Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent, and Microsoft-PrometheusMetrics.
    BuiltInTransform string
    The built-in transform to transform stream data.
    OutputStream string
    The output stream of the transform. Only required if the data flow changes data to a different stream.
    TransformKql string
    The KQL query to transform stream data.
    destinations List<String>
    Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.
    streams List<String>
    Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent, and Microsoft-PrometheusMetrics.
    builtInTransform String
    The built-in transform to transform stream data.
    outputStream String
    The output stream of the transform. Only required if the data flow changes data to a different stream.
    transformKql String
    The KQL query to transform stream data.
    destinations string[]
    Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.
    streams string[]
    Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent, and Microsoft-PrometheusMetrics.
    builtInTransform string
    The built-in transform to transform stream data.
    outputStream string
    The output stream of the transform. Only required if the data flow changes data to a different stream.
    transformKql string
    The KQL query to transform stream data.
    destinations Sequence[str]
    Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.
    streams Sequence[str]
    Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent, and Microsoft-PrometheusMetrics.
    built_in_transform str
    The built-in transform to transform stream data.
    output_stream str
    The output stream of the transform. Only required if the data flow changes data to a different stream.
    transform_kql str
    The KQL query to transform stream data.
    destinations List<String>
    Specifies a list of destination names. A azure_monitor_metrics data source only allows for stream of kind Microsoft-InsightsMetrics.
    streams List<String>
    Specifies a list of streams. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent, and Microsoft-PrometheusMetrics.
    builtInTransform String
    The built-in transform to transform stream data.
    outputStream String
    The output stream of the transform. Only required if the data flow changes data to a different stream.
    transformKql String
    The KQL query to transform stream data.

    DataCollectionRuleDataSources, DataCollectionRuleDataSourcesArgs

    DataImport DataCollectionRuleDataSourcesDataImport
    A data_import block as defined above.
    Extensions List<DataCollectionRuleDataSourcesExtension>
    One or more extension blocks as defined below.
    IisLogs List<DataCollectionRuleDataSourcesIisLog>
    One or more iis_log blocks as defined below.
    LogFiles List<DataCollectionRuleDataSourcesLogFile>
    One or more log_file blocks as defined below.
    PerformanceCounters List<DataCollectionRuleDataSourcesPerformanceCounter>
    One or more performance_counter blocks as defined below.
    PlatformTelemetries List<DataCollectionRuleDataSourcesPlatformTelemetry>
    One or more platform_telemetry blocks as defined below.
    PrometheusForwarders List<DataCollectionRuleDataSourcesPrometheusForwarder>
    One or more prometheus_forwarder blocks as defined below.
    Syslogs List<DataCollectionRuleDataSourcesSyslog>
    One or more syslog blocks as defined below.
    WindowsEventLogs List<DataCollectionRuleDataSourcesWindowsEventLog>
    One or more windows_event_log blocks as defined below.
    WindowsFirewallLogs List<DataCollectionRuleDataSourcesWindowsFirewallLog>
    One or more windows_firewall_log blocks as defined below.
    DataImport DataCollectionRuleDataSourcesDataImport
    A data_import block as defined above.
    Extensions []DataCollectionRuleDataSourcesExtension
    One or more extension blocks as defined below.
    IisLogs []DataCollectionRuleDataSourcesIisLog
    One or more iis_log blocks as defined below.
    LogFiles []DataCollectionRuleDataSourcesLogFile
    One or more log_file blocks as defined below.
    PerformanceCounters []DataCollectionRuleDataSourcesPerformanceCounter
    One or more performance_counter blocks as defined below.
    PlatformTelemetries []DataCollectionRuleDataSourcesPlatformTelemetry
    One or more platform_telemetry blocks as defined below.
    PrometheusForwarders []DataCollectionRuleDataSourcesPrometheusForwarder
    One or more prometheus_forwarder blocks as defined below.
    Syslogs []DataCollectionRuleDataSourcesSyslog
    One or more syslog blocks as defined below.
    WindowsEventLogs []DataCollectionRuleDataSourcesWindowsEventLog
    One or more windows_event_log blocks as defined below.
    WindowsFirewallLogs []DataCollectionRuleDataSourcesWindowsFirewallLog
    One or more windows_firewall_log blocks as defined below.
    dataImport DataCollectionRuleDataSourcesDataImport
    A data_import block as defined above.
    extensions List<DataCollectionRuleDataSourcesExtension>
    One or more extension blocks as defined below.
    iisLogs List<DataCollectionRuleDataSourcesIisLog>
    One or more iis_log blocks as defined below.
    logFiles List<DataCollectionRuleDataSourcesLogFile>
    One or more log_file blocks as defined below.
    performanceCounters List<DataCollectionRuleDataSourcesPerformanceCounter>
    One or more performance_counter blocks as defined below.
    platformTelemetries List<DataCollectionRuleDataSourcesPlatformTelemetry>
    One or more platform_telemetry blocks as defined below.
    prometheusForwarders List<DataCollectionRuleDataSourcesPrometheusForwarder>
    One or more prometheus_forwarder blocks as defined below.
    syslogs List<DataCollectionRuleDataSourcesSyslog>
    One or more syslog blocks as defined below.
    windowsEventLogs List<DataCollectionRuleDataSourcesWindowsEventLog>
    One or more windows_event_log blocks as defined below.
    windowsFirewallLogs List<DataCollectionRuleDataSourcesWindowsFirewallLog>
    One or more windows_firewall_log blocks as defined below.
    dataImport DataCollectionRuleDataSourcesDataImport
    A data_import block as defined above.
    extensions DataCollectionRuleDataSourcesExtension[]
    One or more extension blocks as defined below.
    iisLogs DataCollectionRuleDataSourcesIisLog[]
    One or more iis_log blocks as defined below.
    logFiles DataCollectionRuleDataSourcesLogFile[]
    One or more log_file blocks as defined below.
    performanceCounters DataCollectionRuleDataSourcesPerformanceCounter[]
    One or more performance_counter blocks as defined below.
    platformTelemetries DataCollectionRuleDataSourcesPlatformTelemetry[]
    One or more platform_telemetry blocks as defined below.
    prometheusForwarders DataCollectionRuleDataSourcesPrometheusForwarder[]
    One or more prometheus_forwarder blocks as defined below.
    syslogs DataCollectionRuleDataSourcesSyslog[]
    One or more syslog blocks as defined below.
    windowsEventLogs DataCollectionRuleDataSourcesWindowsEventLog[]
    One or more windows_event_log blocks as defined below.
    windowsFirewallLogs DataCollectionRuleDataSourcesWindowsFirewallLog[]
    One or more windows_firewall_log blocks as defined below.
    data_import DataCollectionRuleDataSourcesDataImport
    A data_import block as defined above.
    extensions Sequence[DataCollectionRuleDataSourcesExtension]
    One or more extension blocks as defined below.
    iis_logs Sequence[DataCollectionRuleDataSourcesIisLog]
    One or more iis_log blocks as defined below.
    log_files Sequence[DataCollectionRuleDataSourcesLogFile]
    One or more log_file blocks as defined below.
    performance_counters Sequence[DataCollectionRuleDataSourcesPerformanceCounter]
    One or more performance_counter blocks as defined below.
    platform_telemetries Sequence[DataCollectionRuleDataSourcesPlatformTelemetry]
    One or more platform_telemetry blocks as defined below.
    prometheus_forwarders Sequence[DataCollectionRuleDataSourcesPrometheusForwarder]
    One or more prometheus_forwarder blocks as defined below.
    syslogs Sequence[DataCollectionRuleDataSourcesSyslog]
    One or more syslog blocks as defined below.
    windows_event_logs Sequence[DataCollectionRuleDataSourcesWindowsEventLog]
    One or more windows_event_log blocks as defined below.
    windows_firewall_logs Sequence[DataCollectionRuleDataSourcesWindowsFirewallLog]
    One or more windows_firewall_log blocks as defined below.
    dataImport Property Map
    A data_import block as defined above.
    extensions List<Property Map>
    One or more extension blocks as defined below.
    iisLogs List<Property Map>
    One or more iis_log blocks as defined below.
    logFiles List<Property Map>
    One or more log_file blocks as defined below.
    performanceCounters List<Property Map>
    One or more performance_counter blocks as defined below.
    platformTelemetries List<Property Map>
    One or more platform_telemetry blocks as defined below.
    prometheusForwarders List<Property Map>
    One or more prometheus_forwarder blocks as defined below.
    syslogs List<Property Map>
    One or more syslog blocks as defined below.
    windowsEventLogs List<Property Map>
    One or more windows_event_log blocks as defined below.
    windowsFirewallLogs List<Property Map>
    One or more windows_firewall_log blocks as defined below.

    DataCollectionRuleDataSourcesDataImport, DataCollectionRuleDataSourcesDataImportArgs

    eventHubDataSources List<Property Map>
    An event_hub_data_source block as defined below.

    DataCollectionRuleDataSourcesDataImportEventHubDataSource, DataCollectionRuleDataSourcesDataImportEventHubDataSourceArgs

    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Stream string
    The stream to collect from Event Hub. Possible value should be a custom stream name.
    ConsumerGroup string
    The Event Hub consumer group name.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Stream string
    The stream to collect from Event Hub. Possible value should be a custom stream name.
    ConsumerGroup string
    The Event Hub consumer group name.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    stream String
    The stream to collect from Event Hub. Possible value should be a custom stream name.
    consumerGroup String
    The Event Hub consumer group name.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    stream string
    The stream to collect from Event Hub. Possible value should be a custom stream name.
    consumerGroup string
    The Event Hub consumer group name.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    stream str
    The stream to collect from Event Hub. Possible value should be a custom stream name.
    consumer_group str
    The Event Hub consumer group name.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    stream String
    The stream to collect from Event Hub. Possible value should be a custom stream name.
    consumerGroup String
    The Event Hub consumer group name.

    DataCollectionRuleDataSourcesExtension, DataCollectionRuleDataSourcesExtensionArgs

    ExtensionName string
    The name of the VM extension.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.
    ExtensionJson string
    A JSON String which specifies the extension setting.
    InputDataSources List<string>
    Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.
    ExtensionName string
    The name of the VM extension.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.
    ExtensionJson string
    A JSON String which specifies the extension setting.
    InputDataSources []string
    Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.
    extensionName String
    The name of the VM extension.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.
    extensionJson String
    A JSON String which specifies the extension setting.
    inputDataSources List<String>
    Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.
    extensionName string
    The name of the VM extension.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.
    extensionJson string
    A JSON String which specifies the extension setting.
    inputDataSources string[]
    Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.
    extension_name str
    The name of the VM extension.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.
    extension_json str
    A JSON String which specifies the extension setting.
    input_data_sources Sequence[str]
    Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.
    extensionName String
    The name of the VM extension.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event, Microsoft-InsightsMetrics, Microsoft-Perf, Microsoft-Syslog, Microsoft-WindowsEvent.
    extensionJson String
    A JSON String which specifies the extension setting.
    inputDataSources List<String>
    Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: performance_counter, windows_event_log,and syslog.

    DataCollectionRuleDataSourcesIisLog, DataCollectionRuleDataSourcesIisLogArgs

    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.
    LogDirectories List<string>
    Specifies a list of absolute paths where the log files are located.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.
    LogDirectories []string
    Specifies a list of absolute paths where the log files are located.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.
    logDirectories List<String>
    Specifies a list of absolute paths where the log files are located.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.
    logDirectories string[]
    Specifies a list of absolute paths where the log files are located.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.
    log_directories Sequence[str]
    Specifies a list of absolute paths where the log files are located.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-W3CIISLog.
    logDirectories List<String>
    Specifies a list of absolute paths where the log files are located.

    DataCollectionRuleDataSourcesLogFile, DataCollectionRuleDataSourcesLogFileArgs

    FilePatterns List<string>
    Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.
    Format string
    The data format of the log files. possible value is text.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
    Settings DataCollectionRuleDataSourcesLogFileSettings
    A settings block as defined below.
    FilePatterns []string
    Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.
    Format string
    The data format of the log files. possible value is text.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
    Settings DataCollectionRuleDataSourcesLogFileSettings
    A settings block as defined below.
    filePatterns List<String>
    Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.
    format String
    The data format of the log files. possible value is text.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
    settings DataCollectionRuleDataSourcesLogFileSettings
    A settings block as defined below.
    filePatterns string[]
    Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.
    format string
    The data format of the log files. possible value is text.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
    settings DataCollectionRuleDataSourcesLogFileSettings
    A settings block as defined below.
    file_patterns Sequence[str]
    Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.
    format str
    The data format of the log files. possible value is text.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
    settings DataCollectionRuleDataSourcesLogFileSettings
    A settings block as defined below.
    filePatterns List<String>
    Specifies a list of file patterns where the log files are located. For example, C:\\JavaLogs\\*.log.
    format String
    The data format of the log files. possible value is text.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
    settings Property Map
    A settings block as defined below.

    DataCollectionRuleDataSourcesLogFileSettings, DataCollectionRuleDataSourcesLogFileSettingsArgs

    text Property Map
    A text block as defined below.

    DataCollectionRuleDataSourcesLogFileSettingsText, DataCollectionRuleDataSourcesLogFileSettingsTextArgs

    RecordStartTimestampFormat string
    The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.
    RecordStartTimestampFormat string
    The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.
    recordStartTimestampFormat String
    The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.
    recordStartTimestampFormat string
    The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.
    record_start_timestamp_format str
    The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.
    recordStartTimestampFormat String
    The timestamp format of the text log files. Possible values are ISO 8601, YYYY-MM-DD HH:MM:SS, M/D/YYYY HH:MM:SS AM/PM, Mon DD, YYYY HH:MM:SS, yyMMdd HH:mm:ss, ddMMyy HH:mm:ss, MMM d hh:mm:ss, dd/MMM/yyyy:HH:mm:ss zzz,and yyyy-MM-ddTHH:mm:ssK.

    DataCollectionRuleDataSourcesPerformanceCounter, DataCollectionRuleDataSourcesPerformanceCounterArgs

    CounterSpecifiers List<string>
    Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    SamplingFrequencyInSeconds int
    The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 1800 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.
    CounterSpecifiers []string
    Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    SamplingFrequencyInSeconds int
    The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 1800 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.
    counterSpecifiers List<String>
    Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    samplingFrequencyInSeconds Integer
    The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 1800 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.
    counterSpecifiers string[]
    Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    samplingFrequencyInSeconds number
    The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 1800 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.
    counter_specifiers Sequence[str]
    Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    sampling_frequency_in_seconds int
    The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 1800 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.
    counterSpecifiers List<String>
    Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command typeperf. Please see this document for more information.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    samplingFrequencyInSeconds Number
    The number of seconds between consecutive counter measurements (samples). The value should be integer between 1 and 1800 inclusive. sampling_frequency_in_seconds must be equal to 60 seconds for counters collected with Microsoft-InsightsMetrics stream.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-InsightsMetrics,and Microsoft-Perf.

    DataCollectionRuleDataSourcesPlatformTelemetry, DataCollectionRuleDataSourcesPlatformTelemetryArgs

    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft.Cache/redis:Metrics-Group-All.

    DataCollectionRuleDataSourcesPrometheusForwarder, DataCollectionRuleDataSourcesPrometheusForwarderArgs

    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.
    LabelIncludeFilters List<DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter>
    One or more label_include_filter blocks as defined above.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.
    LabelIncludeFilters []DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter
    One or more label_include_filter blocks as defined above.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.
    labelIncludeFilters List<DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter>
    One or more label_include_filter blocks as defined above.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.
    labelIncludeFilters DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter[]
    One or more label_include_filter blocks as defined above.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.
    label_include_filters Sequence[DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter]
    One or more label_include_filter blocks as defined above.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is Microsoft-PrometheusMetrics.
    labelIncludeFilters List<Property Map>
    One or more label_include_filter blocks as defined above.

    DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter, DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilterArgs

    Label string
    The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.
    Value string
    The value of the filter.
    Label string
    The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.
    Value string
    The value of the filter.
    label String
    The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.
    value String
    The value of the filter.
    label string
    The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.
    value string
    The value of the filter.
    label str
    The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.
    value str
    The value of the filter.
    label String
    The label of the filter. This label should be unique across all label_include_fileter block. Possible value is microsoft_metrics_include_label.
    value String
    The value of the filter.

    DataCollectionRuleDataSourcesSyslog, DataCollectionRuleDataSourcesSyslogArgs

    FacilityNames List<string>
    Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are alert, *, audit, auth, authpriv, clock, cron, daemon, ftp, kern, local5, local4, local1, local7, local6, local3, local2, local0, lpr, mail, mark, news, nopri, ntp, syslog, user and uucp.
    LogLevels List<string>
    Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.
    FacilityNames []string
    Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are alert, *, audit, auth, authpriv, clock, cron, daemon, ftp, kern, local5, local4, local1, local7, local6, local3, local2, local0, lpr, mail, mark, news, nopri, ntp, syslog, user and uucp.
    LogLevels []string
    Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.
    facilityNames List<String>
    Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are alert, *, audit, auth, authpriv, clock, cron, daemon, ftp, kern, local5, local4, local1, local7, local6, local3, local2, local0, lpr, mail, mark, news, nopri, ntp, syslog, user and uucp.
    logLevels List<String>
    Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.
    facilityNames string[]
    Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are alert, *, audit, auth, authpriv, clock, cron, daemon, ftp, kern, local5, local4, local1, local7, local6, local3, local2, local0, lpr, mail, mark, news, nopri, ntp, syslog, user and uucp.
    logLevels string[]
    Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.
    facility_names Sequence[str]
    Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are alert, *, audit, auth, authpriv, clock, cron, daemon, ftp, kern, local5, local4, local1, local7, local6, local3, local2, local0, lpr, mail, mark, news, nopri, ntp, syslog, user and uucp.
    log_levels Sequence[str]
    Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.
    facilityNames List<String>
    Specifies a list of facility names. Use a wildcard * to collect logs for all facility names. Possible values are alert, *, audit, auth, authpriv, clock, cron, daemon, ftp, kern, local5, local4, local1, local7, local6, local3, local2, local0, lpr, mail, mark, news, nopri, ntp, syslog, user and uucp.
    logLevels List<String>
    Specifies a list of log levels. Use a wildcard * to collect logs for all log levels. Possible values are Debug, Info, Notice, Warning, Error, Critical, Alert, Emergency,and *.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Syslog,and Microsoft-CiscoAsa, and Microsoft-CommonSecurityLog.

    DataCollectionRuleDataSourcesWindowsEventLog, DataCollectionRuleDataSourcesWindowsEventLogArgs

    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.
    XPathQueries List<string>
    Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.
    XPathQueries []string
    Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.
    xPathQueries List<String>
    Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.
    xPathQueries string[]
    Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.
    x_path_queries Sequence[str]
    Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to Microsoft-Event,and Microsoft-WindowsEvent, Microsoft-RomeDetectionEvent, and Microsoft-SecurityEvent.
    xPathQueries List<String>
    Specifies a list of Windows Event Log queries in XPath expression. Please see this document for more information.

    DataCollectionRuleDataSourcesWindowsFirewallLog, DataCollectionRuleDataSourcesWindowsFirewallLogArgs

    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams List<string>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    Name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    Streams []string
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    name string
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams string[]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    name str
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams Sequence[str]
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
    name String
    The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
    streams List<String>
    Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.

    DataCollectionRuleDestinations, DataCollectionRuleDestinationsArgs

    AzureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics
    A azure_monitor_metrics block as defined above.
    EventHub DataCollectionRuleDestinationsEventHub
    One or more event_hub blocks as defined below.
    EventHubDirect DataCollectionRuleDestinationsEventHubDirect
    One or more event_hub blocks as defined below.
    LogAnalytics List<DataCollectionRuleDestinationsLogAnalytic>
    One or more log_analytics blocks as defined below.
    MonitorAccounts List<DataCollectionRuleDestinationsMonitorAccount>
    One or more monitor_account blocks as defined below.
    StorageBlobDirects List<DataCollectionRuleDestinationsStorageBlobDirect>
    One or more storage_blob_direct blocks as defined below.
    StorageBlobs List<DataCollectionRuleDestinationsStorageBlob>
    One or more storage_blob blocks as defined below.
    StorageTableDirects List<DataCollectionRuleDestinationsStorageTableDirect>

    One or more storage_table_direct blocks as defined below.

    NOTE event_hub_direct, storage_blob_direct, and storage_table_direct are only available for rules of kind AgentDirectToStore.

    NOTE At least one of azure_monitor_metrics, event_hub, event_hub_direct, log_analytics, monitor_account, storage_blob, storage_blob_direct,and storage_table_direct blocks must be specified.

    AzureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics
    A azure_monitor_metrics block as defined above.
    EventHub DataCollectionRuleDestinationsEventHub
    One or more event_hub blocks as defined below.
    EventHubDirect DataCollectionRuleDestinationsEventHubDirect
    One or more event_hub blocks as defined below.
    LogAnalytics []DataCollectionRuleDestinationsLogAnalytic
    One or more log_analytics blocks as defined below.
    MonitorAccounts []DataCollectionRuleDestinationsMonitorAccount
    One or more monitor_account blocks as defined below.
    StorageBlobDirects []DataCollectionRuleDestinationsStorageBlobDirect
    One or more storage_blob_direct blocks as defined below.
    StorageBlobs []DataCollectionRuleDestinationsStorageBlob
    One or more storage_blob blocks as defined below.
    StorageTableDirects []DataCollectionRuleDestinationsStorageTableDirect

    One or more storage_table_direct blocks as defined below.

    NOTE event_hub_direct, storage_blob_direct, and storage_table_direct are only available for rules of kind AgentDirectToStore.

    NOTE At least one of azure_monitor_metrics, event_hub, event_hub_direct, log_analytics, monitor_account, storage_blob, storage_blob_direct,and storage_table_direct blocks must be specified.

    azureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics
    A azure_monitor_metrics block as defined above.
    eventHub DataCollectionRuleDestinationsEventHub
    One or more event_hub blocks as defined below.
    eventHubDirect DataCollectionRuleDestinationsEventHubDirect
    One or more event_hub blocks as defined below.
    logAnalytics List<DataCollectionRuleDestinationsLogAnalytic>
    One or more log_analytics blocks as defined below.
    monitorAccounts List<DataCollectionRuleDestinationsMonitorAccount>
    One or more monitor_account blocks as defined below.
    storageBlobDirects List<DataCollectionRuleDestinationsStorageBlobDirect>
    One or more storage_blob_direct blocks as defined below.
    storageBlobs List<DataCollectionRuleDestinationsStorageBlob>
    One or more storage_blob blocks as defined below.
    storageTableDirects List<DataCollectionRuleDestinationsStorageTableDirect>

    One or more storage_table_direct blocks as defined below.

    NOTE event_hub_direct, storage_blob_direct, and storage_table_direct are only available for rules of kind AgentDirectToStore.

    NOTE At least one of azure_monitor_metrics, event_hub, event_hub_direct, log_analytics, monitor_account, storage_blob, storage_blob_direct,and storage_table_direct blocks must be specified.

    azureMonitorMetrics DataCollectionRuleDestinationsAzureMonitorMetrics
    A azure_monitor_metrics block as defined above.
    eventHub DataCollectionRuleDestinationsEventHub
    One or more event_hub blocks as defined below.
    eventHubDirect DataCollectionRuleDestinationsEventHubDirect
    One or more event_hub blocks as defined below.
    logAnalytics DataCollectionRuleDestinationsLogAnalytic[]
    One or more log_analytics blocks as defined below.
    monitorAccounts DataCollectionRuleDestinationsMonitorAccount[]
    One or more monitor_account blocks as defined below.
    storageBlobDirects DataCollectionRuleDestinationsStorageBlobDirect[]
    One or more storage_blob_direct blocks as defined below.
    storageBlobs DataCollectionRuleDestinationsStorageBlob[]
    One or more storage_blob blocks as defined below.
    storageTableDirects DataCollectionRuleDestinationsStorageTableDirect[]

    One or more storage_table_direct blocks as defined below.

    NOTE event_hub_direct, storage_blob_direct, and storage_table_direct are only available for rules of kind AgentDirectToStore.

    NOTE At least one of azure_monitor_metrics, event_hub, event_hub_direct, log_analytics, monitor_account, storage_blob, storage_blob_direct,and storage_table_direct blocks must be specified.

    azure_monitor_metrics DataCollectionRuleDestinationsAzureMonitorMetrics
    A azure_monitor_metrics block as defined above.
    event_hub DataCollectionRuleDestinationsEventHub
    One or more event_hub blocks as defined below.
    event_hub_direct DataCollectionRuleDestinationsEventHubDirect
    One or more event_hub blocks as defined below.
    log_analytics Sequence[DataCollectionRuleDestinationsLogAnalytic]
    One or more log_analytics blocks as defined below.
    monitor_accounts Sequence[DataCollectionRuleDestinationsMonitorAccount]
    One or more monitor_account blocks as defined below.
    storage_blob_directs Sequence[DataCollectionRuleDestinationsStorageBlobDirect]
    One or more storage_blob_direct blocks as defined below.
    storage_blobs Sequence[DataCollectionRuleDestinationsStorageBlob]
    One or more storage_blob blocks as defined below.
    storage_table_directs Sequence[DataCollectionRuleDestinationsStorageTableDirect]

    One or more storage_table_direct blocks as defined below.

    NOTE event_hub_direct, storage_blob_direct, and storage_table_direct are only available for rules of kind AgentDirectToStore.

    NOTE At least one of azure_monitor_metrics, event_hub, event_hub_direct, log_analytics, monitor_account, storage_blob, storage_blob_direct,and storage_table_direct blocks must be specified.

    azureMonitorMetrics Property Map
    A azure_monitor_metrics block as defined above.
    eventHub Property Map
    One or more event_hub blocks as defined below.
    eventHubDirect Property Map
    One or more event_hub blocks as defined below.
    logAnalytics List<Property Map>
    One or more log_analytics blocks as defined below.
    monitorAccounts List<Property Map>
    One or more monitor_account blocks as defined below.
    storageBlobDirects List<Property Map>
    One or more storage_blob_direct blocks as defined below.
    storageBlobs List<Property Map>
    One or more storage_blob blocks as defined below.
    storageTableDirects List<Property Map>

    One or more storage_table_direct blocks as defined below.

    NOTE event_hub_direct, storage_blob_direct, and storage_table_direct are only available for rules of kind AgentDirectToStore.

    NOTE At least one of azure_monitor_metrics, event_hub, event_hub_direct, log_analytics, monitor_account, storage_blob, storage_blob_direct,and storage_table_direct blocks must be specified.

    DataCollectionRuleDestinationsAzureMonitorMetrics, DataCollectionRuleDestinationsAzureMonitorMetricsArgs

    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

    DataCollectionRuleDestinationsEventHub, DataCollectionRuleDestinationsEventHubArgs

    EventHubId string
    The resource ID of the Event Hub.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    EventHubId string
    The resource ID of the Event Hub.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    eventHubId String
    The resource ID of the Event Hub.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    eventHubId string
    The resource ID of the Event Hub.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    event_hub_id str
    The resource ID of the Event Hub.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    eventHubId String
    The resource ID of the Event Hub.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

    DataCollectionRuleDestinationsEventHubDirect, DataCollectionRuleDestinationsEventHubDirectArgs

    EventHubId string
    The resource ID of the Event Hub.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    EventHubId string
    The resource ID of the Event Hub.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    eventHubId String
    The resource ID of the Event Hub.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    eventHubId string
    The resource ID of the Event Hub.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    event_hub_id str
    The resource ID of the Event Hub.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    eventHubId String
    The resource ID of the Event Hub.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

    DataCollectionRuleDestinationsLogAnalytic, DataCollectionRuleDestinationsLogAnalyticArgs

    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    WorkspaceResourceId string
    The ID of a Log Analytic Workspace resource.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    WorkspaceResourceId string
    The ID of a Log Analytic Workspace resource.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    workspaceResourceId String
    The ID of a Log Analytic Workspace resource.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    workspaceResourceId string
    The ID of a Log Analytic Workspace resource.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    workspace_resource_id str
    The ID of a Log Analytic Workspace resource.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    workspaceResourceId String
    The ID of a Log Analytic Workspace resource.

    DataCollectionRuleDestinationsMonitorAccount, DataCollectionRuleDestinationsMonitorAccountArgs

    MonitorAccountId string
    The resource ID of the Monitor Account.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    MonitorAccountId string
    The resource ID of the Monitor Account.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    monitorAccountId String
    The resource ID of the Monitor Account.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    monitorAccountId string
    The resource ID of the Monitor Account.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    monitor_account_id str
    The resource ID of the Monitor Account.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    monitorAccountId String
    The resource ID of the Monitor Account.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.

    DataCollectionRuleDestinationsStorageBlob, DataCollectionRuleDestinationsStorageBlobArgs

    ContainerName string
    The Storage Container name.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    StorageAccountId string
    The resource ID of the Storage Account.
    ContainerName string
    The Storage Container name.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    StorageAccountId string
    The resource ID of the Storage Account.
    containerName String
    The Storage Container name.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId String
    The resource ID of the Storage Account.
    containerName string
    The Storage Container name.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId string
    The resource ID of the Storage Account.
    container_name str
    The Storage Container name.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storage_account_id str
    The resource ID of the Storage Account.
    containerName String
    The Storage Container name.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId String
    The resource ID of the Storage Account.

    DataCollectionRuleDestinationsStorageBlobDirect, DataCollectionRuleDestinationsStorageBlobDirectArgs

    ContainerName string
    The Storage Container name.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    StorageAccountId string
    The resource ID of the Storage Account.
    ContainerName string
    The Storage Container name.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    StorageAccountId string
    The resource ID of the Storage Account.
    containerName String
    The Storage Container name.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId String
    The resource ID of the Storage Account.
    containerName string
    The Storage Container name.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId string
    The resource ID of the Storage Account.
    container_name str
    The Storage Container name.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storage_account_id str
    The resource ID of the Storage Account.
    containerName String
    The Storage Container name.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId String
    The resource ID of the Storage Account.

    DataCollectionRuleDestinationsStorageTableDirect, DataCollectionRuleDestinationsStorageTableDirectArgs

    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    StorageAccountId string
    The resource ID of the Storage Account.
    TableName string
    The Storage Table name.
    Name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    StorageAccountId string
    The resource ID of the Storage Account.
    TableName string
    The Storage Table name.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId String
    The resource ID of the Storage Account.
    tableName String
    The Storage Table name.
    name string
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId string
    The resource ID of the Storage Account.
    tableName string
    The Storage Table name.
    name str
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storage_account_id str
    The resource ID of the Storage Account.
    table_name str
    The Storage Table name.
    name String
    The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
    storageAccountId String
    The resource ID of the Storage Account.
    tableName String
    The Storage Table name.

    DataCollectionRuleIdentity, DataCollectionRuleIdentityArgs

    Type string
    Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.
    IdentityIds List<string>

    A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

    NOTE: This is required when type is set to UserAssigned.

    PrincipalId string
    The Principal ID associated with this Managed Service Identity.
    TenantId string
    The Tenant ID associated with this Managed Service Identity.
    Type string
    Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.
    IdentityIds []string

    A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

    NOTE: This is required when type is set to UserAssigned.

    PrincipalId string
    The Principal ID associated with this Managed Service Identity.
    TenantId string
    The Tenant ID associated with this Managed Service Identity.
    type String
    Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.
    identityIds List<String>

    A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

    NOTE: This is required when type is set to UserAssigned.

    principalId String
    The Principal ID associated with this Managed Service Identity.
    tenantId String
    The Tenant ID associated with this Managed Service Identity.
    type string
    Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.
    identityIds string[]

    A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

    NOTE: This is required when type is set to UserAssigned.

    principalId string
    The Principal ID associated with this Managed Service Identity.
    tenantId string
    The Tenant ID associated with this Managed Service Identity.
    type str
    Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.
    identity_ids Sequence[str]

    A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

    NOTE: This is required when type is set to UserAssigned.

    principal_id str
    The Principal ID associated with this Managed Service Identity.
    tenant_id str
    The Tenant ID associated with this Managed Service Identity.
    type String
    Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are SystemAssigned and UserAssigned.
    identityIds List<String>

    A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.

    NOTE: This is required when type is set to UserAssigned.

    principalId String
    The Principal ID associated with this Managed Service Identity.
    tenantId String
    The Tenant ID associated with this Managed Service Identity.

    DataCollectionRuleStreamDeclaration, DataCollectionRuleStreamDeclarationArgs

    Columns List<DataCollectionRuleStreamDeclarationColumn>
    One or more column blocks as defined above.
    StreamName string
    The name of the custom stream. This name should be unique across all stream_declaration blocks and must begin with a prefix of Custom-.
    Columns []DataCollectionRuleStreamDeclarationColumn
    One or more column blocks as defined above.
    StreamName string
    The name of the custom stream. This name should be unique across all stream_declaration blocks and must begin with a prefix of Custom-.
    columns List<DataCollectionRuleStreamDeclarationColumn>
    One or more column blocks as defined above.
    streamName String
    The name of the custom stream. This name should be unique across all stream_declaration blocks and must begin with a prefix of Custom-.
    columns DataCollectionRuleStreamDeclarationColumn[]
    One or more column blocks as defined above.
    streamName string
    The name of the custom stream. This name should be unique across all stream_declaration blocks and must begin with a prefix of Custom-.
    columns Sequence[DataCollectionRuleStreamDeclarationColumn]
    One or more column blocks as defined above.
    stream_name str
    The name of the custom stream. This name should be unique across all stream_declaration blocks and must begin with a prefix of Custom-.
    columns List<Property Map>
    One or more column blocks as defined above.
    streamName String
    The name of the custom stream. This name should be unique across all stream_declaration blocks and must begin with a prefix of Custom-.

    DataCollectionRuleStreamDeclarationColumn, DataCollectionRuleStreamDeclarationColumnArgs

    Name string
    The name of the column.
    Type string
    The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.
    Name string
    The name of the column.
    Type string
    The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.
    name String
    The name of the column.
    type String
    The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.
    name string
    The name of the column.
    type string
    The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.
    name str
    The name of the column.
    type str
    The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.
    name String
    The name of the column.
    type String
    The type of the column data. Possible values are string, int, long, real, boolean, datetime,and dynamic.

    Import

    Data Collection Rules can be imported using the resource id, e.g.

    $ pulumi import azure:monitoring/dataCollectionRule:DataCollectionRule example /subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/group1/providers/Microsoft.Insights/dataCollectionRules/rule1

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure Classic v6.2.0 published on Friday, Sep 27, 2024 by Pulumi
    pulumi/pulumi-azure