Azure Log Analytics
Azure Log Analytics API reference
COMMUNITYBEARER0 INSTALLS
OpenAPI Specificationv3.0
{
"swagger": "2.0",
"schemes": [
"https"
],
"host": "management.azure.com",
"info": {
"description": "Azure Log Analytics API reference",
"title": "Azure Log Analytics",
"version": "2015-11-01-preview",
"x-apisguru-categories": [
"cloud"
],
"x-logo": {
"url": "https://api.apis.guru/v2/cache/logo/https_assets.onestore.ms_cdnfiles_onestorerolling-1606-01000_shell_v3_images_logo_microsoft.png"
},
"x-origin": [
{
"format": "swagger",
"url": "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/specification/operationalinsights/resource-manager/Microsoft.OperationalInsights/preview/2015-11-01-preview/OperationalInsights.json",
"version": "2.0"
}
],
"x-preferred": true,
"x-providerName": "azure.com",
"x-serviceName": "operationalinsights-OperationalInsights",
"x-tags": [
"Azure",
"Microsoft"
]
},
"consumes": [
"application/json"
],
"produces": [
"application/json"
],
"securityDefinitions": {
"azure_auth": {
"authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
"description": "Azure Active Directory OAuth2 Flow",
"flow": "implicit",
"scopes": {
"user_impersonation": "impersonate your user account"
},
"type": "oauth2"
}
},
"security": [
{
"azure_auth": [
"user_impersonation"
]
}
],
"parameters": {
"ApiVersionParameter": {
"description": "Client Api Version.",
"in": "query",
"name": "api-version",
"required": true,
"type": "string"
},
"ResourceGroupNameParameter": {
"description": "The name of the resource group to get. The name is case insensitive.",
"in": "path",
"maxLength": 90,
"minLength": 1,
"name": "resourceGroupName",
"pattern": "^[-\\w\\._\\(\\)]+$",
"required": true,
"type": "string",
"x-ms-parameter-location": "method"
},
"SubscriptionIdParameter": {
"description": "Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.",
"in": "path",
"name": "subscriptionId",
"required": true,
"type": "string"
}
},
"paths": {
"/providers/Microsoft.OperationalInsights/operations": {
"get": {
"description": "Lists all of the available OperationalInsights Rest API operations.",
"operationId": "Operations_List",
"parameters": [
{
"$ref": "#/parameters/ApiVersionParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/OperationListResult"
}
}
},
"tags": [
"Operations"
],
"x-ms-pageable": {
"nextLinkName": "nextLink"
}
}
},
"/subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/workspaces": {
"get": {
"description": "Gets the workspaces in a subscription.",
"operationId": "Workspaces_List",
"parameters": [
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/WorkspaceListResult"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspacesSubscriptionList": {
"parameters": {
"api-version": "2015-11-01-preview",
"subscriptionId": "00000000-0000-0000-0000-00000000000"
},
"responses": {
"200": {
"body": [
{
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170",
"location": "australiasoutheast",
"name": "AzTest2170",
"properties": {
"customerId": "bc089d7b-485c-4aff-a71e-c00f362d8d2f",
"portalUrl": "https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170",
"provisioningState": "Succeeded",
"retentionInDays": 30,
"sku": {
"name": "pernode"
},
"source": "Azure"
},
"tags": {
"tag1": "val1"
},
"type": "Microsoft.OperationalInsights/workspaces"
}
]
}
}
}
},
"x-ms-pageable": {
"nextLinkName": null
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces": {
"get": {
"description": "Gets workspaces in a resource group.",
"operationId": "Workspaces_ListByResourceGroup",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/WorkspaceListResult"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspacesGet": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "oiautorest6685",
"subscriptionId": "00000000-0000-0000-0000-00000000000"
},
"responses": {
"200": {
"body": [
{
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170",
"location": "australiasoutheast",
"name": "AzTest2170",
"properties": {
"customerId": "bc089d7b-485c-4aff-a71e-c00f362d8d2f",
"portalUrl": "https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170",
"provisioningState": "Succeeded",
"retentionInDays": 30,
"sku": {
"name": "pernode"
},
"source": "Azure"
},
"tags": {
"tag1": "val1"
},
"type": "Microsoft.OperationalInsights/workspaces"
}
]
}
}
}
},
"x-ms-pageable": {
"nextLinkName": null
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}": {
"delete": {
"description": "Deletes a workspace instance.",
"operationId": "Workspaces_Delete",
"parameters": [
{
"description": "The resource group name of the workspace.",
"in": "path",
"name": "resourceGroupName",
"required": true,
"type": "string"
},
{
"description": "Name of the Log Analytics Workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition."
},
"204": {
"description": "NoContent response definition."
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspacesDelete": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "oiautorest6685",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "oiautorest6685"
},
"responses": {
"200": {},
"204": {}
}
}
}
},
"get": {
"description": "Gets a workspace instance.",
"operationId": "Workspaces_Get",
"parameters": [
{
"description": "The resource group name of the workspace.",
"in": "path",
"name": "resourceGroupName",
"required": true,
"type": "string"
},
{
"description": "Name of the Log Analytics Workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/Workspace"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspaceGet": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "oiautorest6685",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "oiautorest6685"
},
"responses": {
"200": {
"body": [
{
"id": "/subscriptions/594038b5-1093-476e-a366-482775671c11/resourcegroups/calbot-rg/providers/microsoft.operationalinsights/workspaces/testresourcelock",
"location": "eastus",
"name": "TestResourceLock",
"properties": {
"customerId": "5b02755b-5bf4-430c-9487-45502a2a7e62",
"portalUrl": "https://eus.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f594038b5-1093-476e-a366-482775671c11%2fresourcegroups%2fcalbot-rg%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2ftestresourcelock",
"provisioningState": "Succeeded",
"retentionInDays": 7,
"sku": {
"name": "free"
},
"source": "Azure"
},
"type": "Microsoft.OperationalInsights/workspaces"
},
{
"id": "/subscriptions/594038b5-1093-476e-a366-482775671c11/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/southukws",
"location": "East US",
"name": "SouthUKWS",
"properties": {
"customerId": "4884a2fd-b08f-4aa6-bf16-5757df1093fe",
"portalUrl": "https://eus.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f594038b5-1093-476e-a366-482775671c11%2fresourcegroups%2fmms-eus%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2fsouthukws",
"provisioningState": "Succeeded",
"retentionInDays": 7,
"sku": {
"name": "free"
},
"source": "External"
},
"type": "Microsoft.OperationalInsights/workspaces"
}
]
}
}
}
}
},
"patch": {
"description": "Updates a workspace.",
"operationId": "Workspaces_Update",
"parameters": [
{
"description": "The resource group name of the workspace.",
"in": "path",
"name": "resourceGroupName",
"required": true,
"type": "string"
},
{
"description": "The name of the workspace.",
"in": "path",
"maxLength": 63,
"minLength": 4,
"name": "workspaceName",
"pattern": "^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$",
"required": true,
"type": "string"
},
{
"description": "The parameters required to patch a workspace.",
"in": "body",
"name": "parameters",
"required": true,
"schema": {
"$ref": "#/definitions/Workspace"
}
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "The existing workspace was successfully updated. Check provisioningStatus to see detailed status.",
"schema": {
"$ref": "#/definitions/Workspace"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspacesPatch": {
"parameters": {
"api-version": "2015-11-01-preview",
"parameters": {
"location": "australiasoutheast",
"properties": {
"retentionInDays": 30,
"sku": {
"name": "PerNode"
}
}
},
"resourceGroupName": "oiautorest6685",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "oiautorest6685"
},
"responses": {
"200": {
"body": {
"location": "australiasoutheast",
"properties": {
"retentionInDays": 30,
"sku": {
"name": "PerNode"
}
},
"tags": {
"tag1": "val1"
}
}
}
}
}
}
},
"put": {
"description": "Create or update a workspace.",
"operationId": "Workspaces_CreateOrUpdate",
"parameters": [
{
"description": "The resource group name of the workspace.",
"in": "path",
"name": "resourceGroupName",
"required": true,
"type": "string"
},
{
"description": "The name of the workspace.",
"in": "path",
"maxLength": 63,
"minLength": 4,
"name": "workspaceName",
"pattern": "^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$",
"required": true,
"type": "string"
},
{
"description": "The parameters required to create or update a workspace.",
"in": "body",
"name": "parameters",
"required": true,
"schema": {
"$ref": "#/definitions/Workspace"
}
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/Workspace"
}
},
"201": {
"description": "Created response definition.",
"schema": {
"$ref": "#/definitions/Workspace"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspacesCreate": {
"parameters": {
"api-version": "2015-11-01-preview",
"parameters": {
"location": "australiasoutheast",
"properties": {
"retentionInDays": 30,
"sku": {
"name": "PerNode"
}
},
"tags": {
"tag1": "val1"
}
},
"resourceGroupName": "oiautorest6685",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "oiautorest6685"
},
"responses": {
"200": {
"body": {
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170",
"location": "australiasoutheast",
"name": "AzTest2170",
"properties": {
"customerId": "bc089d7b-485c-4aff-a71e-c00f362d8d2f",
"portalUrl": "https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170",
"provisioningState": "Creating",
"retentionInDays": 30,
"sku": {
"name": "PerNode"
},
"source": "Azure"
},
"tags": {
"tag1": "val1"
},
"type": "Microsoft.OperationalInsights/workspaces"
}
},
"201": {
"body": {
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170",
"location": "australiasoutheast",
"name": "AzTest2170",
"properties": {
"customerId": "bc089d7b-485c-4aff-a71e-c00f362d8d2f",
"portalUrl": "https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170",
"provisioningState": "Creating",
"retentionInDays": 30,
"sku": {
"name": "PerNode"
},
"source": "Azure"
},
"tags": {
"tag1": "val1"
},
"type": "Microsoft.OperationalInsights/workspaces"
}
}
}
}
},
"x-ms-long-running-operation": true
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources": {
"get": {
"description": "Gets the first page of data source instances in a workspace with the link to the next page.",
"operationId": "DataSources_ListByWorkspace",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "The workspace that contains the data sources.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "The filter to apply on the operation.",
"in": "query",
"name": "$filter",
"required": true,
"type": "string"
},
{
"description": "Starting point of the collection of data source instances.",
"in": "query",
"name": "$skiptoken",
"required": false,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/DataSourceListResult"
}
}
},
"tags": [
"DataSources"
],
"x-ms-examples": {
"DataSourcesListByWorkspace": {
"parameters": {
"$filter": "kind='WindowsEvent'",
"api-version": "2015-11-01-preview",
"dataSourceName": "AzTestDS774",
"resourceGroupName": "OIAutoRest5123",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "AzTest9724"
},
"responses": {
"200": {
"body": {
"nextLink": "https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/dataSources?$filter=kind+eq+'WindowsEvent'&api-version=2015-11-01-preview&$skiptoken=AzTestDSWE7191",
"value": [
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A08.5629323Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1011",
"kind": "WindowsEvent",
"name": "AzTestDSWE1011",
"properties": {
"eventLogName": "windowsEvent14",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A22.2533211Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1013",
"kind": "WindowsEvent",
"name": "AzTestDSWE1013",
"properties": {
"eventLogName": "windowsEvent64",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A04.4645698Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1020",
"kind": "WindowsEvent",
"name": "AzTestDSWE1020",
"properties": {
"eventLogName": "windowsEvent202",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A12.5871672Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1074",
"kind": "WindowsEvent",
"name": "AzTestDSWE1074",
"properties": {
"eventLogName": "windowsEvent231",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A28.9325389Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1117",
"kind": "WindowsEvent",
"name": "AzTestDSWE1117",
"properties": {
"eventLogName": "windowsEvent86",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A13.2185735Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1128",
"kind": "WindowsEvent",
"name": "AzTestDSWE1128",
"properties": {
"eventLogName": "windowsEvent30",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A22.7779289Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1176",
"kind": "WindowsEvent",
"name": "AzTestDSWE1176",
"properties": {
"eventLogName": "windowsEvent66",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A03.5114136Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1293",
"kind": "WindowsEvent",
"name": "AzTestDSWE1293",
"properties": {
"eventLogName": "windowsEvent199",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A33.6788897Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE134",
"kind": "WindowsEvent",
"name": "AzTestDSWE134",
"properties": {
"eventLogName": "windowsEvent102",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A36.2312139Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1352",
"kind": "WindowsEvent",
"name": "AzTestDSWE1352",
"properties": {
"eventLogName": "windowsEvent111",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A13.4685716Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1360",
"kind": "WindowsEvent",
"name": "AzTestDSWE1360",
"properties": {
"eventLogName": "windowsEvent31",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A19.2840543Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1382",
"kind": "WindowsEvent",
"name": "AzTestDSWE1382",
"properties": {
"eventLogName": "windowsEvent53",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A42.7070374Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1410",
"kind": "WindowsEvent",
"name": "AzTestDSWE1410",
"properties": {
"eventLogName": "windowsEvent132",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A06.8922838Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1417",
"kind": "WindowsEvent",
"name": "AzTestDSWE1417",
"properties": {
"eventLogName": "windowsEvent211",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A26.6932412Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1560",
"kind": "WindowsEvent",
"name": "AzTestDSWE1560",
"properties": {
"eventLogName": "windowsEvent274",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A07.1422661Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1618",
"kind": "WindowsEvent",
"name": "AzTestDSWE1618",
"properties": {
"eventLogName": "windowsEvent212",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A09.5980265Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1662",
"kind": "WindowsEvent",
"name": "AzTestDSWE1662",
"properties": {
"eventLogName": "windowsEvent221",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A39.6167744Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1675",
"kind": "WindowsEvent",
"name": "AzTestDSWE1675",
"properties": {
"eventLogName": "windowsEvent121",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A50.1064668Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE169",
"kind": "WindowsEvent",
"name": "AzTestDSWE169",
"properties": {
"eventLogName": "windowsEvent157",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A02.4954752Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1735",
"kind": "WindowsEvent",
"name": "AzTestDSWE1735",
"properties": {
"eventLogName": "windowsEvent196",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A08.0452997Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1742",
"kind": "WindowsEvent",
"name": "AzTestDSWE1742",
"properties": {
"eventLogName": "windowsEvent12",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A46.5966089Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1815",
"kind": "WindowsEvent",
"name": "AzTestDSWE1815",
"properties": {
"eventLogName": "windowsEvent145",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A23.6529754Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1828",
"kind": "WindowsEvent",
"name": "AzTestDSWE1828",
"properties": {
"eventLogName": "windowsEvent69",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A20.7216320Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE188",
"kind": "WindowsEvent",
"name": "AzTestDSWE188",
"properties": {
"eventLogName": "windowsEvent58",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A17.9341560Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1962",
"kind": "WindowsEvent",
"name": "AzTestDSWE1962",
"properties": {
"eventLogName": "windowsEvent48",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A17.3081821Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1997",
"kind": "WindowsEvent",
"name": "AzTestDSWE1997",
"properties": {
"eventLogName": "windowsEvent246",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A49.2918213Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2046",
"kind": "WindowsEvent",
"name": "AzTestDSWE2046",
"properties": {
"eventLogName": "windowsEvent154",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A52.4111189Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2056",
"kind": "WindowsEvent",
"name": "AzTestDSWE2056",
"properties": {
"eventLogName": "windowsEvent165",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A54.7598026Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2116",
"kind": "WindowsEvent",
"name": "AzTestDSWE2116",
"properties": {
"eventLogName": "windowsEvent172",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A07.2711237Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2142",
"kind": "WindowsEvent",
"name": "AzTestDSWE2142",
"properties": {
"eventLogName": "windowsEvent9",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A48.2064500Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE22",
"kind": "WindowsEvent",
"name": "AzTestDSWE22",
"properties": {
"eventLogName": "windowsEvent150",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A08.7849248Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2208",
"kind": "WindowsEvent",
"name": "AzTestDSWE2208",
"properties": {
"eventLogName": "windowsEvent218",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A51.3306230Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2221",
"kind": "WindowsEvent",
"name": "AzTestDSWE2221",
"properties": {
"eventLogName": "windowsEvent161",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A25.5991266Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2226",
"kind": "WindowsEvent",
"name": "AzTestDSWE2226",
"properties": {
"eventLogName": "windowsEvent75",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A15.3592513Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2231",
"kind": "WindowsEvent",
"name": "AzTestDSWE2231",
"properties": {
"eventLogName": "windowsEvent38",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A06.0641077Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2242",
"kind": "WindowsEvent",
"name": "AzTestDSWE2242",
"properties": {
"eventLogName": "windowsEvent208",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A11.7829226Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2263",
"kind": "WindowsEvent",
"name": "AzTestDSWE2263",
"properties": {
"eventLogName": "windowsEvent228",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A21.5874093Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2369",
"kind": "WindowsEvent",
"name": "AzTestDSWE2369",
"properties": {
"eventLogName": "windowsEvent259",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A06.6266574Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE240",
"kind": "WindowsEvent",
"name": "AzTestDSWE240",
"properties": {
"eventLogName": "windowsEvent210",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A23.4752361Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2423",
"kind": "WindowsEvent",
"name": "AzTestDSWE2423",
"properties": {
"eventLogName": "windowsEvent265",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A36.5611370Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2463",
"kind": "WindowsEvent",
"name": "AzTestDSWE2463",
"properties": {
"eventLogName": "windowsEvent112",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A13.7187131Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2499",
"kind": "WindowsEvent",
"name": "AzTestDSWE2499",
"properties": {
"eventLogName": "windowsEvent32",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A09.3324224Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2509",
"kind": "WindowsEvent",
"name": "AzTestDSWE2509",
"properties": {
"eventLogName": "windowsEvent220",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A29.2312540Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2541",
"kind": "WindowsEvent",
"name": "AzTestDSWE2541",
"properties": {
"eventLogName": "windowsEvent87",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A05.3117461Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2578",
"kind": "WindowsEvent",
"name": "AzTestDSWE2578",
"properties": {
"eventLogName": "windowsEvent2",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A38.5379572Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2619",
"kind": "WindowsEvent",
"name": "AzTestDSWE2619",
"properties": {
"eventLogName": "windowsEvent119",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A05.0735592Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE274",
"kind": "WindowsEvent",
"name": "AzTestDSWE274",
"properties": {
"eventLogName": "windowsEvent1",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A30.6297451Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2754",
"kind": "WindowsEvent",
"name": "AzTestDSWE2754",
"properties": {
"eventLogName": "windowsEvent92",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A05.2972963Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE281",
"kind": "WindowsEvent",
"name": "AzTestDSWE281",
"properties": {
"eventLogName": "windowsEvent205",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A33.3820072Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2818",
"kind": "WindowsEvent",
"name": "AzTestDSWE2818",
"properties": {
"eventLogName": "windowsEvent101",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A14.0876077Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2860",
"kind": "WindowsEvent",
"name": "AzTestDSWE2860",
"properties": {
"eventLogName": "windowsEvent236",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A30.9266089Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2867",
"kind": "WindowsEvent",
"name": "AzTestDSWE2867",
"properties": {
"eventLogName": "windowsEvent93",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A27.9342580Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2923",
"kind": "WindowsEvent",
"name": "AzTestDSWE2923",
"properties": {
"eventLogName": "windowsEvent278",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A44.4311007Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2979",
"kind": "WindowsEvent",
"name": "AzTestDSWE2979",
"properties": {
"eventLogName": "windowsEvent138",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A08.5349323Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3009",
"kind": "WindowsEvent",
"name": "AzTestDSWE3009",
"properties": {
"eventLogName": "windowsEvent217",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A24.9696296Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3033",
"kind": "WindowsEvent",
"name": "AzTestDSWE3033",
"properties": {
"eventLogName": "windowsEvent269",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A18.2006423Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3095",
"kind": "WindowsEvent",
"name": "AzTestDSWE3095",
"properties": {
"eventLogName": "windowsEvent49",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A38.2879169Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3114",
"kind": "WindowsEvent",
"name": "AzTestDSWE3114",
"properties": {
"eventLogName": "windowsEvent118",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A37.6889867Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3132",
"kind": "WindowsEvent",
"name": "AzTestDSWE3132",
"properties": {
"eventLogName": "windowsEvent116",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A58.9331954Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3147",
"kind": "WindowsEvent",
"name": "AzTestDSWE3147",
"properties": {
"eventLogName": "windowsEvent185",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A35.6843083Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3159",
"kind": "WindowsEvent",
"name": "AzTestDSWE3159",
"properties": {
"eventLogName": "windowsEvent109",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A17.4118415Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE317",
"kind": "WindowsEvent",
"name": "AzTestDSWE317",
"properties": {
"eventLogName": "windowsEvent46",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A35.0592573Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3175",
"kind": "WindowsEvent",
"name": "AzTestDSWE3175",
"properties": {
"eventLogName": "windowsEvent107",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A12.6247906Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3183",
"kind": "WindowsEvent",
"name": "AzTestDSWE3183",
"properties": {
"eventLogName": "windowsEvent28",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A14.4938899Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3217",
"kind": "WindowsEvent",
"name": "AzTestDSWE3217",
"properties": {
"eventLogName": "windowsEvent237",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A21.7373059Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3220",
"kind": "WindowsEvent",
"name": "AzTestDSWE3220",
"properties": {
"eventLogName": "windowsEvent62",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A18.7785353Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3228",
"kind": "WindowsEvent",
"name": "AzTestDSWE3228",
"properties": {
"eventLogName": "windowsEvent51",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A54.4936956Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3395",
"kind": "WindowsEvent",
"name": "AzTestDSWE3395",
"properties": {
"eventLogName": "windowsEvent171",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A22.0032694Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3416",
"kind": "WindowsEvent",
"name": "AzTestDSWE3416",
"properties": {
"eventLogName": "windowsEvent63",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A28.8251658Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3506",
"kind": "WindowsEvent",
"name": "AzTestDSWE3506",
"properties": {
"eventLogName": "windowsEvent280",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A11.2153209Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3517",
"kind": "WindowsEvent",
"name": "AzTestDSWE3517",
"properties": {
"eventLogName": "windowsEvent23",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A12.0402565Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3528",
"kind": "WindowsEvent",
"name": "AzTestDSWE3528",
"properties": {
"eventLogName": "windowsEvent229",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A43.8027590Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3530",
"kind": "WindowsEvent",
"name": "AzTestDSWE3530",
"properties": {
"eventLogName": "windowsEvent136",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A01.9173304Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3594",
"kind": "WindowsEvent",
"name": "AzTestDSWE3594",
"properties": {
"eventLogName": "windowsEvent194",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A00.8990889Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3615",
"kind": "WindowsEvent",
"name": "AzTestDSWE3615",
"properties": {
"eventLogName": "windowsEvent191",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A16.0877829Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3645",
"kind": "WindowsEvent",
"name": "AzTestDSWE3645",
"properties": {
"eventLogName": "windowsEvent242",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A07.8068460Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3676",
"kind": "WindowsEvent",
"name": "AzTestDSWE3676",
"properties": {
"eventLogName": "windowsEvent11",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A49.5439700Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3700",
"kind": "WindowsEvent",
"name": "AzTestDSWE3700",
"properties": {
"eventLogName": "windowsEvent155",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A38.0363694Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3738",
"kind": "WindowsEvent",
"name": "AzTestDSWE3738",
"properties": {
"eventLogName": "windowsEvent117",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A50.6390339Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3740",
"kind": "WindowsEvent",
"name": "AzTestDSWE3740",
"properties": {
"eventLogName": "windowsEvent159",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A31.5203823Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3754",
"kind": "WindowsEvent",
"name": "AzTestDSWE3754",
"properties": {
"eventLogName": "windowsEvent95",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A31.7860159Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3761",
"kind": "WindowsEvent",
"name": "AzTestDSWE3761",
"properties": {
"eventLogName": "windowsEvent96",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A20.0966078Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3787",
"kind": "WindowsEvent",
"name": "AzTestDSWE3787",
"properties": {
"eventLogName": "windowsEvent56",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A57.8394298Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3880",
"kind": "WindowsEvent",
"name": "AzTestDSWE3880",
"properties": {
"eventLogName": "windowsEvent181",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A51.0806178Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3887",
"kind": "WindowsEvent",
"name": "AzTestDSWE3887",
"properties": {
"eventLogName": "windowsEvent160",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A16.6987634Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3899",
"kind": "WindowsEvent",
"name": "AzTestDSWE3899",
"properties": {
"eventLogName": "windowsEvent244",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A41.4223363Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3928",
"kind": "WindowsEvent",
"name": "AzTestDSWE3928",
"properties": {
"eventLogName": "windowsEvent127",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A59.1831854Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4005",
"kind": "WindowsEvent",
"name": "AzTestDSWE4005",
"properties": {
"eventLogName": "windowsEvent186",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A31.5314824Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4021",
"kind": "WindowsEvent",
"name": "AzTestDSWE4021",
"properties": {
"eventLogName": "windowsEvent288",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A01.6667691Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4054",
"kind": "WindowsEvent",
"name": "AzTestDSWE4054",
"properties": {
"eventLogName": "windowsEvent193",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A42.9581303Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE406",
"kind": "WindowsEvent",
"name": "AzTestDSWE406",
"properties": {
"eventLogName": "windowsEvent133",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A29.4890798Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4128",
"kind": "WindowsEvent",
"name": "AzTestDSWE4128",
"properties": {
"eventLogName": "windowsEvent88",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A00.2051432Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4140",
"kind": "WindowsEvent",
"name": "AzTestDSWE4140",
"properties": {
"eventLogName": "windowsEvent189",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A58.3706603Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4209",
"kind": "WindowsEvent",
"name": "AzTestDSWE4209",
"properties": {
"eventLogName": "windowsEvent183",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A23.1240354Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4216",
"kind": "WindowsEvent",
"name": "AzTestDSWE4216",
"properties": {
"eventLogName": "windowsEvent67",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A33.5368097Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4240",
"kind": "WindowsEvent",
"name": "AzTestDSWE4240",
"properties": {
"eventLogName": "windowsEvent294",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A30.3641074Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4279",
"kind": "WindowsEvent",
"name": "AzTestDSWE4279",
"properties": {
"eventLogName": "windowsEvent91",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A26.3963554Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4289",
"kind": "WindowsEvent",
"name": "AzTestDSWE4289",
"properties": {
"eventLogName": "windowsEvent273",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A47.6751803Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4317",
"kind": "WindowsEvent",
"name": "AzTestDSWE4317",
"properties": {
"eventLogName": "windowsEvent148",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A05.8120517Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4324",
"kind": "WindowsEvent",
"name": "AzTestDSWE4324",
"properties": {
"eventLogName": "windowsEvent4",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A04.1208323Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4362",
"kind": "WindowsEvent",
"name": "AzTestDSWE4362",
"properties": {
"eventLogName": "windowsEvent201",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A08.3109506Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4416",
"kind": "WindowsEvent",
"name": "AzTestDSWE4416",
"properties": {
"eventLogName": "windowsEvent13",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A48.9744951Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4424",
"kind": "WindowsEvent",
"name": "AzTestDSWE4424",
"properties": {
"eventLogName": "windowsEvent153",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A19.0457713Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4466",
"kind": "WindowsEvent",
"name": "AzTestDSWE4466",
"properties": {
"eventLogName": "windowsEvent52",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A15.0936374Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4467",
"kind": "WindowsEvent",
"name": "AzTestDSWE4467",
"properties": {
"eventLogName": "windowsEvent37",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A41.9399246Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4503",
"kind": "WindowsEvent",
"name": "AzTestDSWE4503",
"properties": {
"eventLogName": "windowsEvent129",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A27.2714771Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4521",
"kind": "WindowsEvent",
"name": "AzTestDSWE4521",
"properties": {
"eventLogName": "windowsEvent276",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A26.7419933Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4530",
"kind": "WindowsEvent",
"name": "AzTestDSWE4530",
"properties": {
"eventLogName": "windowsEvent79",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A37.4227966Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4600",
"kind": "WindowsEvent",
"name": "AzTestDSWE4600",
"properties": {
"eventLogName": "windowsEvent115",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A43.5519204Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4644",
"kind": "WindowsEvent",
"name": "AzTestDSWE4644",
"properties": {
"eventLogName": "windowsEvent135",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A51.6431386Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4694",
"kind": "WindowsEvent",
"name": "AzTestDSWE4694",
"properties": {
"eventLogName": "windowsEvent162",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A06.0530002Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4715",
"kind": "WindowsEvent",
"name": "AzTestDSWE4715",
"properties": {
"eventLogName": "windowsEvent5",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A24.3989962Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE472",
"kind": "WindowsEvent",
"name": "AzTestDSWE472",
"properties": {
"eventLogName": "windowsEvent267",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A16.3706498Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4721",
"kind": "WindowsEvent",
"name": "AzTestDSWE4721",
"properties": {
"eventLogName": "windowsEvent243",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A33.8337155Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4734",
"kind": "WindowsEvent",
"name": "AzTestDSWE4734",
"properties": {
"eventLogName": "windowsEvent295",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A25.2712759Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4755",
"kind": "WindowsEvent",
"name": "AzTestDSWE4755",
"properties": {
"eventLogName": "windowsEvent270",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A27.5076680Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4779",
"kind": "WindowsEvent",
"name": "AzTestDSWE4779",
"properties": {
"eventLogName": "windowsEvent81",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A04.6828938Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4791",
"kind": "WindowsEvent",
"name": "AzTestDSWE4791",
"properties": {
"eventLogName": "windowsEvent0",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A54.0073520Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4798",
"kind": "WindowsEvent",
"name": "AzTestDSWE4798",
"properties": {
"eventLogName": "windowsEvent170",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A22.9077505Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE480",
"kind": "WindowsEvent",
"name": "AzTestDSWE480",
"properties": {
"eventLogName": "windowsEvent263",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A11.7028912Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4847",
"kind": "WindowsEvent",
"name": "AzTestDSWE4847",
"properties": {
"eventLogName": "windowsEvent25",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A04.9847854Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4876",
"kind": "WindowsEvent",
"name": "AzTestDSWE4876",
"properties": {
"eventLogName": "windowsEvent204",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A23.4029367Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4900",
"kind": "WindowsEvent",
"name": "AzTestDSWE4900",
"properties": {
"eventLogName": "windowsEvent68",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A34.5280091Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4918",
"kind": "WindowsEvent",
"name": "AzTestDSWE4918",
"properties": {
"eventLogName": "windowsEvent105",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A34.2882196Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4928",
"kind": "WindowsEvent",
"name": "AzTestDSWE4928",
"properties": {
"eventLogName": "windowsEvent296",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A33.2381803Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4930",
"kind": "WindowsEvent",
"name": "AzTestDSWE4930",
"properties": {
"eventLogName": "windowsEvent293",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A36.8423994Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4945",
"kind": "WindowsEvent",
"name": "AzTestDSWE4945",
"properties": {
"eventLogName": "windowsEvent113",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A08.9379456Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4967",
"kind": "WindowsEvent",
"name": "AzTestDSWE4967",
"properties": {
"eventLogName": "windowsEvent15",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A57.5893926Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4969",
"kind": "WindowsEvent",
"name": "AzTestDSWE4969",
"properties": {
"eventLogName": "windowsEvent180",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A19.5497139Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4983",
"kind": "WindowsEvent",
"name": "AzTestDSWE4983",
"properties": {
"eventLogName": "windowsEvent54",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A48.4588661Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5011",
"kind": "WindowsEvent",
"name": "AzTestDSWE5011",
"properties": {
"eventLogName": "windowsEvent151",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A32.2694295Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5082",
"kind": "WindowsEvent",
"name": "AzTestDSWE5082",
"properties": {
"eventLogName": "windowsEvent290",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A17.8863220Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5136",
"kind": "WindowsEvent",
"name": "AzTestDSWE5136",
"properties": {
"eventLogName": "windowsEvent248",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A05.5484906Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5141",
"kind": "WindowsEvent",
"name": "AzTestDSWE5141",
"properties": {
"eventLogName": "windowsEvent206",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A23.9283342Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5166",
"kind": "WindowsEvent",
"name": "AzTestDSWE5166",
"properties": {
"eventLogName": "windowsEvent266",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A29.4970655Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5207",
"kind": "WindowsEvent",
"name": "AzTestDSWE5207",
"properties": {
"eventLogName": "windowsEvent282",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A04.7146038Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5223",
"kind": "WindowsEvent",
"name": "AzTestDSWE5223",
"properties": {
"eventLogName": "windowsEvent203",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A10.3237629Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5233",
"kind": "WindowsEvent",
"name": "AzTestDSWE5233",
"properties": {
"eventLogName": "windowsEvent20",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A18.1831872Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5253",
"kind": "WindowsEvent",
"name": "AzTestDSWE5253",
"properties": {
"eventLogName": "windowsEvent249",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A30.9049829Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5255",
"kind": "WindowsEvent",
"name": "AzTestDSWE5255",
"properties": {
"eventLogName": "windowsEvent286",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A12.8904269Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5263",
"kind": "WindowsEvent",
"name": "AzTestDSWE5263",
"properties": {
"eventLogName": "windowsEvent29",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A20.4543884Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5351",
"kind": "WindowsEvent",
"name": "AzTestDSWE5351",
"properties": {
"eventLogName": "windowsEvent255",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A19.7997319Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5385",
"kind": "WindowsEvent",
"name": "AzTestDSWE5385",
"properties": {
"eventLogName": "windowsEvent55",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A29.7703365Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5394",
"kind": "WindowsEvent",
"name": "AzTestDSWE5394",
"properties": {
"eventLogName": "windowsEvent89",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A09.4692151Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE541",
"kind": "WindowsEvent",
"name": "AzTestDSWE541",
"properties": {
"eventLogName": "windowsEvent17",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A15.7994161Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5439",
"kind": "WindowsEvent",
"name": "AzTestDSWE5439",
"properties": {
"eventLogName": "windowsEvent241",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A10.3032105Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5460",
"kind": "WindowsEvent",
"name": "AzTestDSWE5460",
"properties": {
"eventLogName": "windowsEvent223",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A24.6802546Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5479",
"kind": "WindowsEvent",
"name": "AzTestDSWE5479",
"properties": {
"eventLogName": "windowsEvent268",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A01.1670463Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5483",
"kind": "WindowsEvent",
"name": "AzTestDSWE5483",
"properties": {
"eventLogName": "windowsEvent192",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A37.1393156Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5486",
"kind": "WindowsEvent",
"name": "AzTestDSWE5486",
"properties": {
"eventLogName": "windowsEvent114",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A41.1205470Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5554",
"kind": "WindowsEvent",
"name": "AzTestDSWE5554",
"properties": {
"eventLogName": "windowsEvent126",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A20.7200407Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5559",
"kind": "WindowsEvent",
"name": "AzTestDSWE5559",
"properties": {
"eventLogName": "windowsEvent256",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A18.4534330Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5585",
"kind": "WindowsEvent",
"name": "AzTestDSWE5585",
"properties": {
"eventLogName": "windowsEvent50",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A40.8861587Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE568",
"kind": "WindowsEvent",
"name": "AzTestDSWE568",
"properties": {
"eventLogName": "windowsEvent125",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A12.3059271Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5741",
"kind": "WindowsEvent",
"name": "AzTestDSWE5741",
"properties": {
"eventLogName": "windowsEvent230",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A39.0692471Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE58",
"kind": "WindowsEvent",
"name": "AzTestDSWE58",
"properties": {
"eventLogName": "windowsEvent120",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A16.9117573Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5810",
"kind": "WindowsEvent",
"name": "AzTestDSWE5810",
"properties": {
"eventLogName": "windowsEvent44",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A45.4055476Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5815",
"kind": "WindowsEvent",
"name": "AzTestDSWE5815",
"properties": {
"eventLogName": "windowsEvent141",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A55.0097893Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5858",
"kind": "WindowsEvent",
"name": "AzTestDSWE5858",
"properties": {
"eventLogName": "windowsEvent173",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A18.9931389Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5866",
"kind": "WindowsEvent",
"name": "AzTestDSWE5866",
"properties": {
"eventLogName": "windowsEvent251",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A59.4332080Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5888",
"kind": "WindowsEvent",
"name": "AzTestDSWE5888",
"properties": {
"eventLogName": "windowsEvent187",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A09.7599986Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5905",
"kind": "WindowsEvent",
"name": "AzTestDSWE5905",
"properties": {
"eventLogName": "windowsEvent18",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A10.6395291Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6027",
"kind": "WindowsEvent",
"name": "AzTestDSWE6027",
"properties": {
"eventLogName": "windowsEvent224",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A13.7282386Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE607",
"kind": "WindowsEvent",
"name": "AzTestDSWE607",
"properties": {
"eventLogName": "windowsEvent235",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A33.1319662Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6099",
"kind": "WindowsEvent",
"name": "AzTestDSWE6099",
"properties": {
"eventLogName": "windowsEvent100",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A06.3186640Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6122",
"kind": "WindowsEvent",
"name": "AzTestDSWE6122",
"properties": {
"eventLogName": "windowsEvent6",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A11.4528829Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6218",
"kind": "WindowsEvent",
"name": "AzTestDSWE6218",
"properties": {
"eventLogName": "windowsEvent24",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A47.9407875Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE622",
"kind": "WindowsEvent",
"name": "AzTestDSWE622",
"properties": {
"eventLogName": "windowsEvent149",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A06.3453921Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6222",
"kind": "WindowsEvent",
"name": "AzTestDSWE6222",
"properties": {
"eventLogName": "windowsEvent209",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A21.2372832Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6240",
"kind": "WindowsEvent",
"name": "AzTestDSWE6240",
"properties": {
"eventLogName": "windowsEvent60",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A08.2849036Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6251",
"kind": "WindowsEvent",
"name": "AzTestDSWE6251",
"properties": {
"eventLogName": "windowsEvent216",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A02.1829375Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6274",
"kind": "WindowsEvent",
"name": "AzTestDSWE6274",
"properties": {
"eventLogName": "windowsEvent195",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A32.3491070Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6296",
"kind": "WindowsEvent",
"name": "AzTestDSWE6296",
"properties": {
"eventLogName": "windowsEvent98",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A22.1811938Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6301",
"kind": "WindowsEvent",
"name": "AzTestDSWE6301",
"properties": {
"eventLogName": "windowsEvent261",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A06.7093003Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6404",
"kind": "WindowsEvent",
"name": "AzTestDSWE6404",
"properties": {
"eventLogName": "windowsEvent7",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A05.5617435Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6406",
"kind": "WindowsEvent",
"name": "AzTestDSWE6406",
"properties": {
"eventLogName": "windowsEvent3",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A40.2886854Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6432",
"kind": "WindowsEvent",
"name": "AzTestDSWE6432",
"properties": {
"eventLogName": "windowsEvent123",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A35.9811949Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6439",
"kind": "WindowsEvent",
"name": "AzTestDSWE6439",
"properties": {
"eventLogName": "windowsEvent110",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A13.1344490Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6451",
"kind": "WindowsEvent",
"name": "AzTestDSWE6451",
"properties": {
"eventLogName": "windowsEvent233",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A10.9653354Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6486",
"kind": "WindowsEvent",
"name": "AzTestDSWE6486",
"properties": {
"eventLogName": "windowsEvent22",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A10.0582011Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6505",
"kind": "WindowsEvent",
"name": "AzTestDSWE6505",
"properties": {
"eventLogName": "windowsEvent19",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A52.8955201Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6514",
"kind": "WindowsEvent",
"name": "AzTestDSWE6514",
"properties": {
"eventLogName": "windowsEvent166",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A10.9395226Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6518",
"kind": "WindowsEvent",
"name": "AzTestDSWE6518",
"properties": {
"eventLogName": "windowsEvent225",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A24.0123335Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6537",
"kind": "WindowsEvent",
"name": "AzTestDSWE6537",
"properties": {
"eventLogName": "windowsEvent70",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A57.3394082Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6547",
"kind": "WindowsEvent",
"name": "AzTestDSWE6547",
"properties": {
"eventLogName": "windowsEvent179",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A33.9457044Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6556",
"kind": "WindowsEvent",
"name": "AzTestDSWE6556",
"properties": {
"eventLogName": "windowsEvent103",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A13.4313542Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6718",
"kind": "WindowsEvent",
"name": "AzTestDSWE6718",
"properties": {
"eventLogName": "windowsEvent234",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A35.4186784Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6724",
"kind": "WindowsEvent",
"name": "AzTestDSWE6724",
"properties": {
"eventLogName": "windowsEvent108",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A12.3279180Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6741",
"kind": "WindowsEvent",
"name": "AzTestDSWE6741",
"properties": {
"eventLogName": "windowsEvent27",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A24.5764501Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6796",
"kind": "WindowsEvent",
"name": "AzTestDSWE6796",
"properties": {
"eventLogName": "windowsEvent72",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A35.2579899Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6826",
"kind": "WindowsEvent",
"name": "AzTestDSWE6826",
"properties": {
"eventLogName": "windowsEvent299",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A34.6319483Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6829",
"kind": "WindowsEvent",
"name": "AzTestDSWE6829",
"properties": {
"eventLogName": "windowsEvent297",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A28.5887776Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6893",
"kind": "WindowsEvent",
"name": "AzTestDSWE6893",
"properties": {
"eventLogName": "windowsEvent85",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A16.1249736Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6974",
"kind": "WindowsEvent",
"name": "AzTestDSWE6974",
"properties": {
"eventLogName": "windowsEvent41",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A28.3876585Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7008",
"kind": "WindowsEvent",
"name": "AzTestDSWE7008",
"properties": {
"eventLogName": "windowsEvent279",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A29.1220764Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7014",
"kind": "WindowsEvent",
"name": "AzTestDSWE7014",
"properties": {
"eventLogName": "windowsEvent281",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A26.0213457Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7068",
"kind": "WindowsEvent",
"name": "AzTestDSWE7068",
"properties": {
"eventLogName": "windowsEvent272",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A21%3A21.8686663Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7080",
"kind": "WindowsEvent",
"name": "AzTestDSWE7080",
"properties": {
"eventLogName": "windowsEvent260",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A40.5423724Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7166",
"kind": "WindowsEvent",
"name": "AzTestDSWE7166",
"properties": {
"eventLogName": "windowsEvent124",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
},
{
"eTag": "W/\"datetime'2017-10-02T23%3A20%3A16.3906307Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7178",
"kind": "WindowsEvent",
"name": "AzTestDSWE7178",
"properties": {
"eventLogName": "windowsEvent42",
"eventTypes": [
{
"eventType": "Error"
}
]
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
}
]
}
}
}
}
},
"x-ms-odata": "#/definitions/DataSourceFilter",
"x-ms-pageable": {
"nextLinkName": "nextLink"
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}": {
"delete": {
"description": "Deletes a data source instance.",
"operationId": "DataSources_Delete",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that contains the datasource.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "Name of the datasource.",
"in": "path",
"name": "dataSourceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition."
},
"204": {
"description": "NoContent response definition."
}
},
"tags": [
"DataSources"
],
"x-ms-examples": {
"DataSourcesDelete": {
"parameters": {
"api-version": "2015-11-01-preview",
"dataSourceName": "AzTestDS774",
"resourceGroupName": "OIAutoRest5123",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "AzTest9724"
},
"responses": {
"200": {},
"204": {}
}
}
}
},
"get": {
"description": "Gets a datasource instance.",
"operationId": "DataSources_Get",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that contains the datasource.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "Name of the datasource",
"in": "path",
"name": "dataSourceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/DataSource"
}
}
},
"tags": [
"DataSources"
],
"x-ms-examples": {
"DataSourcesGet": {
"parameters": {
"api-version": "2015-11-01-preview",
"dataSourceName": "AzTestDS774",
"resourceGroupName": "OIAutoRest5123",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "AzTest9724"
},
"responses": {
"200": {
"body": {
"eTag": "W/\"datetime'2017-10-01T08%3A01%3A21.2351243Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest5123/providers/Microsoft.OperationalInsights/workspaces/AzTest9724/datasources/AzTestDS774",
"kind": "AzureActivityLog",
"name": "AzTestDS774",
"properties": {
"linkedResourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management"
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
}
}
}
}
}
},
"put": {
"description": "Create or update a data source.",
"operationId": "DataSources_CreateOrUpdate",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that will contain the datasource",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "The name of the datasource resource.",
"in": "path",
"name": "dataSourceName",
"required": true,
"type": "string"
},
{
"description": "The parameters required to create or update a datasource.",
"in": "body",
"name": "parameters",
"required": true,
"schema": {
"$ref": "#/definitions/DataSource"
}
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/DataSource"
}
},
"201": {
"description": "Created response definition.",
"schema": {
"$ref": "#/definitions/DataSource"
}
}
},
"tags": [
"DataSources"
],
"x-ms-examples": {
"DataSourcesCreate": {
"parameters": {
"api-version": "2015-11-01-preview",
"dataSourceName": "AzTestDS774",
"parameters": {
"kind": "AzureActivityLog",
"properties": {
"LinkedResourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management"
}
},
"resourceGroupName": "OIAutoRest5123",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "AzTest9724"
},
"responses": {
"200": {
"body": {
"eTag": "W/\"datetime'2017-10-01T08%3A01%3A21.2351243Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest5123/providers/Microsoft.OperationalInsights/workspaces/AzTest9724/datasources/AzTestDS774",
"kind": "AzureActivityLog",
"name": "AzTestDS774",
"properties": {
"linkedResourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management"
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
}
},
"201": {
"body": {
"eTag": "W/\"datetime'2017-10-01T08%3A01%3A21.2351243Z'\"",
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest5123/providers/Microsoft.OperationalInsights/workspaces/AzTest9724/datasources/AzTestDS774",
"kind": "AzureActivityLog",
"name": "AzTestDS774",
"properties": {
"linkedResourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management"
},
"type": "Microsoft.OperationalInsights/workspaces/datasources"
}
}
}
}
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks": {
"get": {
"description": "Lists all the intelligence packs possible and whether they are enabled or disabled for a given workspace.",
"operationId": "Workspaces_ListIntelligencePacks",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"items": {
"$ref": "#/definitions/IntelligencePack"
},
"type": "array"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"IntelligencePacksList": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": [
{
"displayName": "Capacity and Performance",
"enabled": false,
"name": "CapacityPerformance"
},
{
"displayName": "Azure Web Apps Analytics (Preview)",
"enabled": false,
"name": "AzureWebAppsAnalytics"
},
{
"displayName": "Security and Audit",
"enabled": false,
"name": "Security"
},
{
"displayName": "Update Management",
"enabled": false,
"name": "Updates"
},
{
"displayName": "Antimalware Assessment",
"enabled": false,
"name": "AntiMalware"
},
{
"displayName": "Log Management",
"enabled": true,
"name": "LogManagement"
},
{
"displayName": "Change Tracking",
"enabled": true,
"name": "ChangeTracking"
},
{
"displayName": "SQL Assessment",
"enabled": false,
"name": "SQLAssessment"
},
{
"displayName": "System Center Operations Manager Assessment (Preview)",
"enabled": false,
"name": "SCOMAssessment"
},
{
"displayName": "IT Service Management Connector(Preview)",
"enabled": false,
"name": "ServiceDesk"
},
{
"displayName": "AD Assessment",
"enabled": false,
"name": "ADAssessment"
},
{
"displayName": "Alert Management",
"enabled": false,
"name": "AlertManagement"
},
{
"displayName": "Azure Automation",
"enabled": false,
"name": "AzureAutomation"
},
{
"displayName": "Wire Data",
"enabled": false,
"name": "WireData"
},
{
"displayName": "Azure Site Recovery",
"enabled": true,
"name": "SiteRecovery"
},
{
"displayName": "Backup",
"enabled": false,
"name": "Backup"
},
{
"displayName": "Surface Hub",
"enabled": false,
"name": "SurfaceHub"
},
{
"displayName": "Network Performance Monitor",
"enabled": false,
"name": "NetworkMonitoring"
},
{
"displayName": "Container Monitoring Solution",
"enabled": false,
"name": "Containers"
},
{
"displayName": "Service Map",
"enabled": false,
"name": "ServiceMap"
},
{
"displayName": "Azure Networking Analytics (Deprecated)",
"enabled": false,
"name": "AzureNetworking"
},
{
"displayName": "AD Replication Status",
"enabled": false,
"name": "ADReplication"
},
{
"displayName": "Office 365 (Preview)",
"enabled": false,
"name": "Office365"
},
{
"displayName": "Upgrade Readiness",
"enabled": false,
"name": "CompatibilityAssessment"
},
{
"displayName": "Key Vault (Deprecated)",
"enabled": false,
"name": "KeyVault"
},
{
"displayName": "Service Fabric",
"enabled": false,
"name": "ServiceFabric"
},
{
"displayName": "DNS Analytics (Preview)",
"enabled": false,
"name": "DnsAnalytics"
},
{
"displayName": "Application Insights (Preview)",
"enabled": false,
"name": "ApplicationInsights"
},
{
"displayName": "Wire Data 2.0",
"enabled": false,
"name": "WireData2"
},
{
"displayName": "Update Compliance (Preview)",
"enabled": false,
"name": "WaaSUpdateInsights"
},
{
"displayName": "Agent Health ",
"enabled": false,
"name": "AgentHealthAssessment"
},
{
"displayName": "Activity Log Analytics",
"enabled": false,
"name": "AzureActivity"
},
{
"displayName": "HDInsight HBase Monitoring (Preview)",
"enabled": false,
"name": "HDInsight"
},
{
"displayName": "HDInsight Kafka Monitoring",
"enabled": false,
"name": "HDInsightKafka"
},
{
"displayName": "HDInsight Spark Monitoring",
"enabled": false,
"name": "HDInsightSpark"
},
{
"displayName": "VMware (Preview)",
"enabled": false,
"name": "VMware"
},
{
"displayName": "Security Center Free � for Azure Resources only",
"enabled": false,
"name": "SecurityCenterFree"
},
{
"displayName": "Logic Apps Management",
"enabled": false,
"name": "LogicAppsManagement"
},
{
"displayName": "Logic Apps B2B",
"enabled": false,
"name": "LogicAppB2B"
},
{
"displayName": "Azure SQL Analytics (Preview)",
"enabled": false,
"name": "AzureSQLAnalytics"
},
{
"displayName": "Key Vault Analytics",
"enabled": false,
"name": "KeyVaultAnalytics"
},
{
"displayName": "Azure Network Security Group Analytics",
"enabled": false,
"name": "AzureNSGAnalytics"
},
{
"displayName": "Azure Application Gateway Analytics",
"enabled": false,
"name": "AzureAppGatewayAnalytics"
},
{
"displayName": "Device Health (Preview)",
"enabled": false,
"name": "DeviceHealthProd"
},
{
"displayName": "Windows Defender ATP",
"enabled": false,
"name": "WindowsDefenderATP"
},
{
"displayName": "ProcessInvestigator",
"enabled": false,
"name": "ProcessInvestigator"
}
]
}
}
}
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Disable": {
"post": {
"description": "Disables an intelligence pack for a given workspace.",
"operationId": "Workspaces_DisableIntelligencePack",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "The name of the intelligence pack to be disabled.",
"in": "path",
"name": "intelligencePackName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition."
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"IntelligencePacksDisable": {
"parameters": {
"api-version": "2015-11-01-preview",
"intelligencePackName": "ChangeTracking",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {}
}
}
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Enable": {
"post": {
"description": "Enables an intelligence pack for a given workspace.",
"operationId": "Workspaces_EnableIntelligencePack",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "The name of the intelligence pack to be enabled.",
"in": "path",
"name": "intelligencePackName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition."
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"IntelligencePacksEnable": {
"parameters": {
"api-version": "2015-11-01-preview",
"intelligencePackName": "ChangeTracking",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {}
}
}
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/linkedServices": {
"get": {
"description": "Gets the linked services instances in a workspace.",
"operationId": "LinkedServices_ListByWorkspace",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that contains the linked services.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/LinkedServiceListResult"
}
}
},
"tags": [
"LinkedServices"
],
"x-ms-examples": {
"LinkedServicesListByWorkspace": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "mms-eus",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": [
{
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation",
"name": "TestLinkWS/Automation",
"properties": {
"resourceId": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount"
},
"type": "Microsoft.OperationalInsights/workspaces/linkedServices"
},
{
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation",
"name": "TestLinkWS/Automation",
"properties": {
"resourceId": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount2"
},
"type": "Microsoft.OperationalInsights/workspaces/linkedServices"
}
]
}
}
}
},
"x-ms-pageable": {
"nextLinkName": null
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/linkedServices/{linkedServiceName}": {
"delete": {
"description": "Deletes a linked service instance.",
"operationId": "LinkedServices_Delete",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that contains the linkedServices resource",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "Name of the linked service.",
"in": "path",
"name": "linkedServiceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition."
},
"204": {
"description": "NoContent response definition."
}
},
"tags": [
"LinkedServices"
],
"x-ms-examples": {
"LinkedServicesDelete": {
"parameters": {
"api-version": "2015-11-01-preview",
"linkedServiceName": "TestLinkWS/Automation",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {},
"204": {}
}
}
}
},
"get": {
"description": "Gets a linked service instance.",
"operationId": "LinkedServices_Get",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that contains the linkedServices resource",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "Name of the linked service.",
"in": "path",
"name": "linkedServiceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/LinkedService"
}
}
},
"tags": [
"LinkedServices"
],
"x-ms-examples": {
"LinkedServicesGet": {
"parameters": {
"api-version": "2015-11-01-preview",
"linkedServiceName": "TestLinkWS/Automation",
"resourceGroupName": "mms-eus",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": {
"id": "/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation",
"name": "TestLinkWS/Automation",
"properties": {
"resourceId": "/subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount"
},
"type": "Microsoft.OperationalInsights/workspaces/linkedServices"
}
}
}
}
}
},
"put": {
"description": "Create or update a linked service.",
"operationId": "LinkedServices_CreateOrUpdate",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace that will contain the linkedServices resource",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"description": "Name of the linkedServices resource",
"in": "path",
"name": "linkedServiceName",
"required": true,
"type": "string"
},
{
"description": "The parameters required to create or update a linked service.",
"in": "body",
"name": "parameters",
"required": true,
"schema": {
"$ref": "#/definitions/LinkedService"
}
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
},
{
"$ref": "#/parameters/ApiVersionParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/LinkedService"
}
},
"201": {
"description": "Created response definition.",
"schema": {
"$ref": "#/definitions/LinkedService"
}
}
},
"tags": [
"LinkedServices"
],
"x-ms-examples": {
"LinkedServicesCreate": {
"parameters": {
"api-version": "2015-11-01-preview",
"linkedServiceName": "TestLinkWS/Automation",
"parameters": {
"properties": {
"resourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/testAccount"
}
},
"resourceGroupName": "mms-eus",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": {
"id": "/subscriptions/00000000-0000-0000-0000-00000000000/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation",
"name": "TestLinkWS/Automation",
"properties": {
"resourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount"
},
"type": "Microsoft.OperationalInsights/workspaces/linkedServices"
}
},
"201": {
"body": {
"id": "/subscriptions/00000000-0000-0000-0000-00000000000/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation",
"name": "TestLinkWS/Automation",
"properties": {
"resourceId": "/subscriptions/00000000-0000-0000-0000-00000000000/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount"
},
"type": "Microsoft.OperationalInsights/workspaces/linkedServices"
}
}
}
}
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/managementGroups": {
"get": {
"description": "Gets a list of management groups connected to a workspace.",
"operationId": "Workspaces_ListManagementGroups",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "The name of the workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/WorkspaceListManagementGroupsResult"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"WorkspacesListManagementGroups": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": {
"value": []
}
}
}
}
},
"x-ms-pageable": {
"nextLinkName": null
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/sharedKeys": {
"post": {
"description": "Gets the shared keys for a workspace.",
"operationId": "Workspaces_GetSharedKeys",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "Name of the Log Analytics Workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/SharedKeys"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"SharedKeysList": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": {
"primarySharedKey": "BozLY1JnZbxu0jWUQSY8iRPEM8ObmpP8rW+8bUl3+HpDJI+n689SxXgTgU7k1qdxo/WugRLxechxbolAfHM5uA==",
"secondarySharedKey": "7tDt5W0JBrCQKtQA3igfFltLSzJeyr9LmuT+B/ibzd8cdC1neZ1ePOQLBx5NUzc0q2VUIK0cLhWNyFvo/hT8Ww=="
}
}
}
}
}
}
},
"/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/usages": {
"get": {
"description": "Gets a list of usage metrics for a workspace.",
"operationId": "Workspaces_ListUsages",
"parameters": [
{
"$ref": "#/parameters/ResourceGroupNameParameter"
},
{
"description": "The name of the workspace.",
"in": "path",
"name": "workspaceName",
"required": true,
"type": "string"
},
{
"$ref": "#/parameters/ApiVersionParameter"
},
{
"$ref": "#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "OK response definition.",
"schema": {
"$ref": "#/definitions/WorkspaceListUsagesResult"
}
}
},
"tags": [
"Workspaces"
],
"x-ms-examples": {
"UsagesList": {
"parameters": {
"api-version": "2015-11-01-preview",
"resourceGroupName": "rg1",
"subscriptionId": "00000000-0000-0000-0000-00000000000",
"workspaceName": "TestLinkWS"
},
"responses": {
"200": {
"body": {
"value": [
{
"currentValue": 0,
"limit": 524288000,
"name": {
"localizedValue": "Data Analyzed",
"value": "DataAnalyzed"
},
"nextResetTime": "2017-10-03T00:00:00Z",
"quotaPeriod": "P1D",
"unit": "Bytes"
}
]
}
}
}
}
},
"x-ms-pageable": {
"nextLinkName": null
}
}
}
},
"definitions": {
"DataSource": {
"allOf": [
{
"$ref": "#/definitions/ProxyResource"
}
],
"description": "Datasources under OMS Workspace.",
"properties": {
"eTag": {
"description": "The ETag of the data source.",
"type": "string"
},
"kind": {
"$ref": "#/definitions/DataSourceKind"
},
"properties": {
"$ref": "#/definitions/Object",
"description": "The data source properties in raw json format, each kind of data source have it's own schema."
}
},
"required": [
"kind",
"properties"
],
"x-ms-azure-resource": true
},
"DataSourceFilter": {
"description": "DataSource filter. Right now, only filter by kind is supported.",
"properties": {
"kind": {
"$ref": "#/definitions/DataSourceKind"
}
}
},
"DataSourceKind": {
"description": "The kind of the DataSource.",
"enum": [
"AzureActivityLog",
"ChangeTrackingPath",
"ChangeTrackingDefaultPath",
"ChangeTrackingDefaultRegistry",
"ChangeTrackingCustomRegistry",
"CustomLog",
"CustomLogCollection",
"GenericDataSource",
"IISLogs",
"LinuxPerformanceObject",
"LinuxPerformanceCollection",
"LinuxSyslog",
"LinuxSyslogCollection",
"WindowsEvent",
"WindowsPerformanceCounter"
],
"type": "string",
"x-ms-enum": {
"modelAsString": true,
"name": "DataSourceKind"
}
},
"DataSourceListResult": {
"description": "The list data source by workspace operation response.",
"properties": {
"nextLink": {
"description": "The link (url) to the next page of datasources.",
"type": "string"
},
"value": {
"description": "A list of datasources.",
"items": {
"$ref": "#/definitions/DataSource"
},
"type": "array"
}
}
},
"IntelligencePack": {
"description": "Intelligence Pack containing a string name and boolean indicating if it's enabled.",
"properties": {
"displayName": {
"description": "The display name of the intelligence pack.",
"type": "string"
},
"enabled": {
"description": "The enabled boolean for the intelligence pack.",
"type": "boolean"
},
"name": {
"description": "The name of the intelligence pack.",
"type": "string"
}
}
},
"LinkedService": {
"allOf": [
{
"$ref": "#/definitions/ProxyResource"
}
],
"description": "The top level Linked service resource container.",
"properties": {
"properties": {
"$ref": "#/definitions/LinkedServiceProperties",
"description": "The properties of the linked service.",
"x-ms-client-flatten": true
}
},
"required": [
"properties"
],
"x-ms-azure-resource": true
},
"LinkedServiceListResult": {
"description": "The list linked service operation response.",
"properties": {
"value": {
"description": "Gets or sets a list of linked service instances.",
"items": {
"$ref": "#/definitions/LinkedService"
},
"type": "array"
}
}
},
"LinkedServiceProperties": {
"description": "Linked service properties.",
"properties": {
"resourceId": {
"description": "The resource id of the resource that will be linked to the workspace.",
"type": "string"
}
},
"required": [
"resourceId"
]
},
"ManagementGroup": {
"description": "A management group that is connected to a workspace",
"properties": {
"properties": {
"$ref": "#/definitions/ManagementGroupProperties",
"description": "The properties of the management group.",
"x-ms-client-flatten": true
}
}
},
"ManagementGroupProperties": {
"description": "Management group properties.",
"properties": {
"created": {
"description": "The datetime that the management group was created.",
"format": "date-time",
"type": "string"
},
"dataReceived": {
"description": "The last datetime that the management group received data.",
"format": "date-time",
"type": "string"
},
"id": {
"description": "The unique ID of the management group.",
"type": "string"
},
"isGateway": {
"description": "Gets or sets a value indicating whether the management group is a gateway.",
"type": "boolean"
},
"name": {
"description": "The name of the management group.",
"type": "string"
},
"serverCount": {
"description": "The number of servers connected to the management group.",
"format": "int32",
"type": "integer"
},
"sku": {
"description": "The SKU of System Center that is managing the management group.",
"type": "string"
},
"version": {
"description": "The version of System Center that is managing the management group.",
"type": "string"
}
}
},
"MetricName": {
"description": "The name of a metric.",
"properties": {
"localizedValue": {
"description": "The localized name of the metric.",
"type": "string"
},
"value": {
"description": "The system name of the metric.",
"type": "string"
}
}
},
"Object": {
"description": "JSON object",
"properties": {},
"type": "object"
},
"Operation": {
"description": "Supported operation of OperationalInsights resource provider.",
"properties": {
"display": {
"description": "Display metadata associated with the operation.",
"properties": {
"operation": {
"description": "Type of operation: get, read, delete, etc.",
"type": "string"
},
"provider": {
"description": "Service provider: Microsoft OperationsManagement.",
"type": "string"
},
"resource": {
"description": "Resource on which the operation is performed etc.",
"type": "string"
}
}
},
"name": {
"description": "Operation name: {provider}/{resource}/{operation}",
"type": "string"
}
}
},
"OperationListResult": {
"description": "Result of the request to list solution operations.",
"properties": {
"nextLink": {
"description": "URL to get the next set of operation list results if there are any.",
"readOnly": true,
"type": "string"
},
"value": {
"description": "List of solution operations supported by the OperationsManagement resource provider.",
"items": {
"$ref": "#/definitions/Operation"
},
"type": "array"
}
}
},
"ProxyResource": {
"description": "Common properties of proxy resource.",
"properties": {
"id": {
"description": "Resource ID.",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Resource name.",
"readOnly": true,
"type": "string"
},
"tags": {
"additionalProperties": {
"type": "string"
},
"description": "Resource tags",
"type": "object"
},
"type": {
"description": "Resource type.",
"readOnly": true,
"type": "string"
}
}
},
"Resource": {
"description": "The resource definition.",
"properties": {
"id": {
"description": "Resource Id",
"readOnly": true,
"type": "string"
},
"location": {
"description": "Resource location",
"type": "string"
},
"name": {
"description": "Resource name",
"readOnly": true,
"type": "string"
},
"tags": {
"additionalProperties": {
"type": "string"
},
"description": "Resource tags",
"type": "object"
},
"type": {
"description": "Resource type",
"readOnly": true,
"type": "string"
}
},
"x-ms-azure-resource": true
},
"SharedKeys": {
"description": "The shared keys for a workspace.",
"properties": {
"primarySharedKey": {
"description": "The primary shared key of a workspace.",
"type": "string"
},
"secondarySharedKey": {
"description": "The secondary shared key of a workspace.",
"type": "string"
}
}
},
"Sku": {
"description": "The SKU (tier) of a workspace.",
"properties": {
"name": {
"description": "The name of the SKU.",
"enum": [
"Free",
"Standard",
"Premium",
"PerNode",
"PerGB2018",
"Standalone"
],
"type": "string",
"x-ms-enum": {
"modelAsString": true,
"name": "SkuNameEnum"
}
}
},
"required": [
"name"
]
},
"UsageMetric": {
"description": "A metric describing the usage of a resource.",
"properties": {
"currentValue": {
"description": "The current value of the metric.",
"format": "double",
"type": "number"
},
"limit": {
"description": "The quota limit for the metric.",
"format": "double",
"type": "number"
},
"name": {
"$ref": "#/definitions/MetricName",
"description": "The name of the metric."
},
"nextResetTime": {
"description": "The time that the metric's value will reset.",
"format": "date-time",
"type": "string"
},
"quotaPeriod": {
"description": "The quota period that determines the length of time between value resets.",
"type": "string"
},
"unit": {
"description": "The units used for the metric.",
"type": "string"
}
}
},
"Workspace": {
"allOf": [
{
"$ref": "#/definitions/Resource"
}
],
"description": "The top level Workspace resource container.",
"properties": {
"eTag": {
"description": "The ETag of the workspace.",
"type": "string"
},
"properties": {
"$ref": "#/definitions/WorkspaceProperties",
"description": "Workspace properties.",
"x-ms-client-flatten": true
}
},
"x-ms-azure-resource": true
},
"WorkspaceListManagementGroupsResult": {
"description": "The list workspace management groups operation response.",
"properties": {
"value": {
"description": "Gets or sets a list of management groups attached to the workspace.",
"items": {
"$ref": "#/definitions/ManagementGroup"
},
"type": "array"
}
}
},
"WorkspaceListResult": {
"description": "The list workspaces operation response.",
"properties": {
"value": {
"description": "A list of workspaces.",
"items": {
"$ref": "#/definitions/Workspace"
},
"type": "array"
}
}
},
"WorkspaceListUsagesResult": {
"description": "The list workspace usages operation response.",
"properties": {
"value": {
"description": "Gets or sets a list of usage metrics for a workspace.",
"items": {
"$ref": "#/definitions/UsageMetric"
},
"type": "array"
}
}
},
"WorkspaceProperties": {
"description": "Workspace properties.",
"properties": {
"customerId": {
"description": "This is a read-only property. Represents the ID associated with the workspace.",
"readOnly": true,
"type": "string"
},
"portalUrl": {
"description": "This is a legacy property and is not used anymore. Kept here for backward compatibility.",
"readOnly": true,
"type": "string"
},
"provisioningState": {
"description": "The provisioning state of the workspace.",
"enum": [
"Creating",
"Succeeded",
"Failed",
"Canceled",
"Deleting",
"ProvisioningAccount"
],
"type": "string",
"x-ms-enum": {
"modelAsString": true,
"name": "EntityStatus"
}
},
"retentionInDays": {
"description": "The workspace data retention in days. -1 means Unlimited retention for the Unlimited Sku. 730 days is the maximum allowed for all other Skus. ",
"format": "int32",
"maximum": 730,
"minimum": -1,
"type": "integer"
},
"sku": {
"$ref": "#/definitions/Sku",
"description": "The SKU of the workspace."
},
"source": {
"description": "This is a read-only legacy property. It is always set to 'Azure' by the service. Kept here for backward compatibility.",
"readOnly": true,
"type": "string"
}
}
}
}
}