{"resourceTypes":[{"id":"microsoft.aad/domainservices","type":"Microsoft.AAD/domainServices","displayName":"Azure AD Domain Services","description":"Tables related to Azure AD Domain Services.","related":{"tables":["AzureActivity","AADDomainServicesDNSAuditsDynamicUpdates","AADDomainServicesDNSAuditsGeneral","AzureMetrics","AADDomainServicesAccountLogon","AADDomainServicesAccountManagement","AADDomainServicesDirectoryServiceAccess","AADDomainServicesLogonLogoff","AADDomainServicesPolicyChange","AADDomainServicesPrivilegeUse","AADDomainServicesSystemSecurity"],"queries":["a6428843-f7fb-11ea-8ea5-c8348e03e0b8","a6428844-f7fb-11ea-bdfb-c8348e03e0b8","a6428845-f7fb-11ea-a22d-c8348e03e0b8","a6428846-f7fb-11ea-bfa0-c8348e03e0b8","a6428847-f7fb-11ea-a877-c8348e03e0b8","a6428848-f7fb-11ea-aade-c8348e03e0b8","a6428849-f7fb-11ea-a623-c8348e03e0b8","a642884a-f7fb-11ea-9ffc-c8348e03e0b8","a642884b-f7fb-11ea-8961-c8348e03e0b8"]}},{"id":"microsoft.azureadgraph/tenants","type":"Microsoft.AzureADGraph/tenants","displayName":"AAD Graph Logs","description":"All tables related to Azure Active Directory Graph logs.","related":{"tables":["AzureActivity","AuditLogs","AADGraphActivityLogs"],"queries":["00d2b78e-df02-42d4-ae3a-27db94a534fc","c4ee740a-6d0e-4a87-b998-663d2d36fca0"]}},{"id":"microsoft.containerservice/managedclusters","type":"Microsoft.ContainerService/managedClusters","displayName":"Kubernetes Services","description":"Tables used by Azure Monitor for Containers.","related":{"tables":["RetinaNetworkFlowLogs","ContainerNetworkLogs","AzureActivity","AzureDiagnostics","AzureMetrics","ContainerImageInventory","ContainerInventory","ContainerLog","ContainerLogV2","ContainerNodeInventory","ContainerServiceLog","Heartbeat","InsightsMetrics","KubeEvents","KubeMonAgentEvents","KubeNodeInventory","KubePodInventory","KubePVInventory","KubeServices","Perf","Syslog","AKSAudit","AKSAuditAdmin","AKSControlPlane"],"queries":["f47ac10b-58cc-4372-a567-0e02b2c3d479","d3b07384-d9a0-4c9d-8f00-6e7a9e7a8b0d","571b97f3-d68b-41eb-b1ac-6c40a38fbb4d","54bb9cdf-3eb8-4f1b-bb39-a2e578bceecb","5bcdd75f-8eaf-4c5a-aa38-7c10a501d260","820ac966-e438-4fae-aef9-2d162ce23ced","39ef777f-53d8-400a-9d4e-d6e6946a538e","1f0b44f9-2a90-4d74-bd6f-32671f493c65","6d69a6ab-78ed-45c8-b5bb-557c2a096d54","5eea8814-60dd-4d3c-bec0-3c364c88e123","8146e954-5df5-4eaa-afe6-1cef6c158456","fa69eeb1-8569-11ea-8fe4-c8348e02520c","59d1df0c-9f8c-4d39-88b2-9c649b110aa3","fa6b98ca-8569-11ea-9445-c8348e02520c","fa6be679-8569-11ea-82ff-c8348e02520c","fa6c348e-8569-11ea-9b4a-c8348e02520c","fa6c82a3-8569-11ea-8c6c-c8348e02520c","fa6cf7e0-8569-11ea-9523-c8348e02520c","fa6d45fc-8569-11ea-9289-c8348e02520c","fa6e5843-8569-11ea-8d4b-c8348e02520c","fa6f41c2-8569-11ea-98c6-c8348e02520c","fa6f8fde-8569-11ea-a8f6-c8348e02520c","fa705446-8569-11ea-aa86-c8348e02520c","fa7200ef-8569-11ea-b3aa-c8348e02520c","fa724f0c-8569-11ea-931d-c8348e02520c","fa729d2f-8569-11ea-8e66-c8348e02520c","fa73fd03-8569-11ea-aa34-c8348e02520c","fa7471e0-8569-11ea-b6ce-c8348e02520c","fa74c014-8569-11ea-aa82-c8348e02520c","e7110b5b-2788-8dad-89bb-118d066f0348","45f5c9a8-0bb5-6d2a-8562-a53d34e93887","5ea47bca-4305-4423-3b2f-3db502a42760","1256fc3f-8134-417c-9e24-a6d573eb93f9","f1bf35d8-7afb-05bd-842e-5fbddced8dbd","19b4df05-22bb-4ac7-a0d1-e1e3029c6256","395c7803-7b63-0779-6863-c5c7ac7c0d62","62ffa781-123a-a1f5-79b4-c31c2ea8769a","46a359a0-8e7b-5319-5fc1-84fb70211c0b","19a3ed70-1e90-8f62-5e90-58ec8ea3a705","09291696-0b1d-3266-34a3-4a6eda396d8b","b944809b-373e-036c-059f-78cf8bb5206a","096294d7-8492-448e-2ad3-b4c7f7c0a535","eafdf8b8-7931-752b-6890-f6b292ca9bcb","0740862d-6150-3251-8096-8d6a06f356f5","ee063ac9-8b4b-2d38-8806-ecaae055503a","1d7c8ba9-957a-05f1-3ac0-c6cecd388592"]}},{"id":"microsoft.cdn/edgeactions","type":"Microsoft.Cdn/edgeactions","displayName":"Edge Actions","description":"All tables related to Edge Actions","related":{"tables":["EdgeActionConsoleLog","EdgeActionServiceLog"],"queries":["b30699d3-efa7-4341-acad-b0d745f57061","c72d1185-3401-4e65-9a9b-424730f26288"]}},{"id":"microsoft.agfoodplatform/farmbeats","type":"Microsoft.AgFoodPlatform/farmBeats","displayName":"Microsoft.AgFoodPlatform/farmBeats","description":"Microsoft.AgFoodPlatform diagnostic log export, LogAnalytics tables","related":{"tables":["AgriFoodFarmManagementLogs","AgriFoodWeatherLogs","AgriFoodSatelliteLogs","AgriFoodFarmOperationLogs","AgriFoodProviderAuthLogs","AgriFoodApplicationAuditLogs","AgriFoodModelInferenceLogs","AgriFoodInsightLogs","AgriFoodJobProcessedLogs","AgriFoodSensorManagementLogs"],"queries":["a4d5c564-f185-450d-9024-ac003c4f96a9","97234902-0236-4821-a438-d52c8a80a8ba","f3518255-2374-448a-878a-d5d4457da11c","b093d561-a33c-4997-a3b1-cb82f2b97c05","26b400a2-3108-4cdd-bdc9-b6889b0ecfb7"]}},{"id":"microsoft.informationprotection/datasecuritymanagement","type":"Microsoft.InformationProtection/DataSecurityManagement","displayName":"DataSecurityManagement","description":"Data Security Threat and Incident Management."},{"id":"microsoft.apimanagement/service","type":"Microsoft.ApiManagement/service","displayName":"API Management services","description":"API Management services.","related":{"tables":["APIMDevPortalAuditDiagnosticLog","ApiManagementGatewayLlmLog","ApiManagementGatewayMCPLog","AzureActivity","AzureMetrics","AzureDiagnostics","ApiManagementGatewayLogs","ApiManagementWebSocketConnectionLogs"],"queries":["d8f84807-6154-11ea-8c04-c8348e025209","d8fb0c4b-6154-11ea-aae5-c8348e025209","d8fc9214-6154-11ea-9ce5-c8348e025209","d8fcdffd-6154-11ea-b3f4-c8348e025209","d8fd5523-6154-11ea-b89c-c8348e025209","d8fda3be-6154-11ea-a8af-c8348e025209","d8fedbce-6154-11ea-8815-c8348e025209","d8ff5103-6154-11ea-9777-c8348e025209","d8ff9f0b-6154-11ea-aea9-c8348e025209","d8ffed31-6154-11ea-880d-c8348e025209","d900144a-6154-11ea-b2e1-c8348e025209","d9019f0b-6154-11ea-9c41-c8348e025209","d901ed1f-6154-11ea-bc4a-c8348e025209","d9023cf0-6154-11ea-ae1c-c8348e025209","d9028ad3-6154-11ea-98bf-c8348e025209"]}},{"id":"microsoft.appconfiguration/configurationstores","type":"Microsoft.AppConfiguration/configurationStores","displayName":"Microsoft App Configuration","description":"Azure App Configuration allows developers to store, retrieve and manage access to application settings all in one place. It is easy to set up and simple to use from any application. It gives developers the ability to modify an application's behavior on demand without having to redeploy the application.","related":{"tables":["AzureActivity","AACHttpRequest","AACAudit"],"queries":["5d179a0d-ce8a-40ed-89d0-5a5eef4f5891","a9d9a6a2-de65-4f82-aca1-17f78df08b34","d3556a69-bce6-4f66-8611-5c41237c7593","feb88498-7f52-4cbc-9893-a0eef24f8790","865a3ded-aeb4-473a-9f60-1af94374b5a2"]}},{"id":"microsoft.network/applicationgateways","type":"Microsoft.Network/applicationGateways","displayName":"Application Gateways","description":"Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.","related":{"tables":["AzureActivity","AzureMetrics","AGWAccessLogs","AGWPerformanceLogs","AGWFirewallLogs","AzureDiagnostics"],"queries":["52772f3b-f583-4901-b75c-ec368bcb1b78","8a81a8ec-db62-45d1-b6e3-6385cadd2f74","40f8162e-e9b1-4b78-9d8a-e939fc3e363b","baf32abd-8e68-46d4-88bb-82e65859d0b2","6ab7ef4f-5ccd-4509-9a9d-98e315759d6f","62cb4687-3d08-424f-b872-71757bbcc1d0","dc815502-2306-4db0-a0a5-b34ac7f299da"]}},{"id":"microsoft.servicenetworking/trafficcontrollers","type":"Microsoft.ServiceNetworking/TrafficControllers","displayName":"Application Gateway for Containers","description":"Azure Application Gateway for Containers is an application load balancer that enables you to manage traffic to your container workloads.","related":{"tables":["AzureActivity","AzureMetrics","AGCAccessLogs","AGCFirewallLogs"],"queries":["c3cf794b-5617-4eb8-95fa-66aa2a2678df","e7766bc6-9d49-4b09-93ed-e564d7593be3","2c4f7c71-9d37-4987-a767-3951876a5477"]}},{"id":"microsoft.applink/applinks/applinksmembers","type":"Microsoft.AppLink/applinks/applinksmembers","displayName":"AppLinks","description":"Tables used for managed mesh a.k.a. AppLinks.","related":{"tables":["MeshControlPlane"],"queries":["39ef777f-53d8-400a-9d4e-d6e6946a538f"]}},{"id":"microsoft.web/sites","type":"Microsoft.Web/sites","displayName":"App Services","description":"Logs generated through your application and pushed to Azure Monitoring.","related":{"tables":["AzureActivity","LogicAppWorkflowRuntime","AppServiceAuthenticationLogs","AppServiceServerlessSecurityPluginData","AzureMetrics","AppServiceAppLogs","AppServiceAuditLogs","AppServiceConsoleLogs","AppServiceFileAuditLogs","AppServiceHTTPLogs","FunctionAppLogs","AppServicePlatformLogs","AppServiceAntivirusScanAuditLogs","AppServiceIPSecAuditLogs"],"queries":["edffa3dc-fbae-42e7-a972-8639d323cacf","c8e2cc5e-c9e3-499c-93ef-56ffe79e9bba","4a6eac8a-736f-4f1b-a237-f5801daedbff","e68dd16c-3295-43e8-aae2-09870e143b67","376ce53b-9f74-4c4f-ab46-dec5060092f1","ec90d150-2298-476b-8b42-953ed8907dc2","1093f8f4-6b21-4d46-b8e6-706dbc620a98","67c95b3b-0791-4e05-bc18-2d8ecdef16d3","49991367-accb-4bf3-a449-c4fe1b11d42b","34dfd1af-6153-11ea-9732-c8348e025209","34e21b0f-6153-11ea-ba17-c8348e025209","be55f9e1-ec2b-11ea-8a88-c8348e03e0b8","be55f9e2-ec2b-11ea-857f-c8348e03e0b8","be55f9e3-ec2b-11ea-9759-c8348e03e0b8","be55f9e4-ec2b-11ea-829f-c8348e03e0b8","be55f9e5-ec2b-11ea-86be-c8348e03e0b8","be55f9e6-ec2b-11ea-b9e9-c8348e03e0b8","be55f9e7-ec2b-11ea-8b7b-c8348e03e0b8","a6420dd9-f7fb-11ea-9194-c8348e03e0b8","a6428833-f7fb-11ea-8d8a-c8348e03e0b8","a6428834-f7fb-11ea-8313-c8348e03e0b8","a6428835-f7fb-11ea-b623-c8348e03e0b8","a6428836-f7fb-11ea-8392-c8348e03e0b8"]}},{"id":"microsoft.authorization/tenants","type":"Microsoft.Authorization/tenants","displayName":"Microsoft Authorization Datasets","description":"Tenant diagnostic logs from Microsoft Authorization.","related":{"queries":["1c9afed0-4e16-42f5-ace0-24b0b34d29d2","03e774ad-103e-42d5-b006-ba8b32754996","f1382f9e-b98d-44ca-bb27-72d5ece96dbf","f2599fa8-3ccd-41e1-a3a2-8f9bbcca9a9a","1d18188d-3133-4439-8e85-e9efaadad013"]}},{"id":"microsoft.resources/azureactivity","type":"Microsoft.Resources/AzureActivity","displayName":"Azure activity Log V2","description":"Entries from the Azure Activity log that provides insight into any subscription, management group and tenant level events that have occurred in Azure."},{"id":"microsoft.kubernetes/connectedclusters","type":"Microsoft.Kubernetes/connectedClusters","displayName":"Azure Arc Enabled Kubernetes","description":"Tables used by Azure Monitor for Containers.","related":{"tables":["AzureActivity","AzureDiagnostics","AzureMetrics","ContainerImageInventory","ContainerInventory","ContainerLog","ContainerLogV2","ContainerNodeInventory","ContainerServiceLog","Heartbeat","InsightsMetrics","KubeEvents","KubeMonAgentEvents","KubeNodeInventory","KubePodInventory","KubePVInventory","KubeServices","Perf","Syslog","ArcK8sAudit","ArcK8sAuditAdmin","ArcK8sControlPlane"]}},{"id":"microsoft.toolchainorchestrator/diagnostics","type":"Microsoft.ToolchainOrchestrator/diagnostics","displayName":"Toolchain orchestrator","description":"Toolchain orchestrator is a cloud-native, cross-platform orchestrator that simplifies and streamlines the deployment, management, and update of different application solutions across different edge environments.","related":{"tables":["AzureActivity","AzureDiagnostics","TOUserAudits","TOUserDiagnostics"],"queries":["681582c5-1c89-4701-a256-608e82cbd0aa","c9ee41c4-5b23-4e04-a193-21ee5c4cfc8d","03c620a0-e64b-46dd-8337-092d17106f96"]}},{"id":"microsoft.attestation/attestationproviders","type":"Microsoft.Attestation/attestationProviders","displayName":"Azure Attestation","description":"Azure Attestation is a unified solution for remotely verifying the trustworthiness of a platform and integrity of the binaries running inside it. The service receives evidence from the platform, validates the evidence against security standards and configurable policies, and produces an attestation token for claims-based applications (e.g., relying parties, auditing authorities).","related":{"tables":["AzureActivity","AzureAttestationDiagnostics"],"queries":["4b3c3ebd-fba6-49a4-8709-7507a347a969","31a88ff8-4608-4645-ab18-4b09871b07ea","c8258837-c1bd-456c-961f-14bf71748f79","d6aaf873-8082-4960-aba0-146eb0414a27","9b285dc2-6dc7-454a-aaa0-d3113cdb8825","07f7133f-baae-444c-a1a1-2e0b6caf09c2"]}},{"id":"microsoft.cache/redis","type":"microsoft.cache/redis","displayName":"Azure Cache for Redis","description":"All tables related to Azure Cache for Redis service.","related":{"tables":["ACRConnectedClientList","ACREntraAuthenticationAuditLog","AzureActivity","AzureMetrics"],"queries":["7147966e-f714-405b-b243-2c2d69e8b3fe","b0743562-0414-4fb9-a14b-fb1cfd5242b9","c7d2bca8-92e7-4c02-87f3-43aa0a0a2a3a"]}},{"id":"microsoft.cdn/profiles","type":"Microsoft.Cdn/profiles","displayName":"CDN Profiles","description":"All tables related to Azure CDN resources.","related":{"tables":["AzureActivity","AzureDiagnostics"],"queries":["ddf3d063-d5a6-11ea-a3df-c8348e03e0b8","ddf44593-d5a6-11ea-ac4c-c8348e03e0b8","ddf44594-d5a6-11ea-94a5-c8348e03e0b8","ddf44595-d5a6-11ea-b8bd-c8348e03e0b8","ddf44596-d5a6-11ea-a8af-c8348e03e0b8","ddf44597-d5a6-11ea-ae46-c8348e03e0b8","ddf44598-d5a6-11ea-bdfc-c8348e03e0b8","8062ec5b-0436-534c-357d-a1a9750542fd","b6e396a1-49f4-002e-943b-9bcf087a3b58","100c8fe9-2f3e-4899-6ef4-6d70047d3f84","ae03d069-6d7a-2ecd-81e4-dbc6b6337f92","19ef0e4b-2959-3cb3-22ee-594fa7417cde","a9d51280-2768-856a-84f6-e5a4396a6997","adec1d64-576d-4536-2459-b9181ce6a440","7cce0397-0d02-0d98-29de-f79a1f3a1cd6","02343258-23f7-8f05-682f-4dede54b8f38","805cb7a6-792e-93f1-9292-d71efaf296f2","c1a54a83-064c-248a-1328-77d03fd914d1"]}},{"id":"microsoft.hardwaresecuritymodules/cloudhsmclusters","type":"Microsoft.HardwareSecurityModules/cloudHsmClusters","displayName":"Azure CloudHsm","description":"Azure CloudHsm is a service that provides secure storage for cryptographic keys using hardware security modules that meet the FIPS 140-2 Level 3 security standard.","related":{"tables":["AzureActivity","AzureMetrics","CloudHsmServiceOperationAuditLogs"],"queries":["e1d8c76d-8a12-4e91-a04d-1aa38423af60","78169da5-08d5-4abb-a419-8abcae4b8279","711f80bd-d89f-4c07-84f6-e053b0d5c8ed"]}},{"id":"microsoft.communication/communicationservices","type":"Microsoft.Communication/CommunicationServices","displayName":"Communication Services","description":"All tables related to Communication Services.","related":{"tables":["AzureActivity","AzureMetrics","ACSChatIncomingOperations","ACSSMSIncomingOperations","ACSOptOutManagementOperations","ACSAuthIncomingOperations","ACSBillingUsage","ACSCallDiagnostics","ACSCallDiagnosticsUpdates","ACSCallingMetrics","ACSCallSurvey","ACSCallClientServiceRequestAndOutcome","ACSCallClientOperations","ACSCallClientMediaStatsTimeSeries","ACSCallSummary","ACSCallSummaryUpdates","ACSEmailSendMailOperational","ACSEmailStatusUpdateOperational","ACSEmailUserEngagementOperational","ACSCallRecordingIncomingOperations","ACSCallRecordingSummary","ACSCallClosedCaptionsSummary","ACSJobRouterIncomingOperations","ACSRoomsIncomingOperations","ACSCallAutomationIncomingOperations","ACSCallAutomationMediaSummary","ACSCallAutomationStreamingUsage","ACSAdvancedMessagingOperations"],"queries":["afece89a-eed3-4aa4-ba30-dfb7edd8b429","d72355a1-1cc9-405c-bfbb-02dfc41cfd5f","f2291767-c2a3-4865-8f70-f4f5adca5dd2","9812504c-00a6-42c4-9cd6-b1532480a3cf","4a0cdc80-bf62-498e-98e8-e52804a8a766","2e541dc6-bf82-4fcc-9e57-1faedbbfa48a","c0e3ac32-7bc7-45b0-bbd1-4f2ab8abc70e","f3712c70-6f28-4cb2-9ff1-ba35854115a2","66ffdd36-8574-4622-b269-d4965e5d8b1d","28e284cb-faf4-4577-92a6-1fa73eed18bc","8dc3bc93-2339-4035-8a92-b67f48f5d972","ca2d21c4-ac33-4ac0-88a9-ee2208e01ab7","050dc234-d6a1-4408-8c5e-dc61d81a2f57","d5195a1a-c7ab-4f2a-8720-6b3f5c544df0","cc68c95a-8de0-4c40-8394-537a00437ea7","056f1614-fffa-4286-be6b-fd614dfa4dc5","be71a17c-5ffd-4215-ab19-2ead19f56396","cf4f8822-721b-4bf0-91a8-6d0b7937047c","ed999090-4bc2-4704-ba16-ff0223930a4d","1a2b3c4d-e5f6-7a8b-9c0d-1e2f3a4b5c6d","f46854c3-fa37-4b92-8675-ce838000949b","7e8f9a0b-1c2d-3e4f-5a6b-7c8d9e0f1a2b","6d9f94e6-0421-4611-b43a-c9a8f409b83b","3e4f5a6b-7c8d-9e0f-1a2b-3c4d5e6f7a8b","7f49ca30-a69f-45fd-b06f-d2b5271587da","9c0d1e2f-3a4b-5c6d-7e8f-9a0b1c2d3e4f","a7cc4b34-b191-4d3a-8fac-830ed3321e45","5a6b7c8d-9e0f-1a2b-3c4d-5e6f7a8b9c0d","912d4bfd-f025-4f8d-909e-2936b7796eb8","023e5cae-a136-5a9e-010f-1047c8807fc9","df398179-e2b2-418d-bfae-95faf858c0cf","d62bf65f-66b7-482f-b296-83f2ca4e19d8","444fcb48-73f7-49b4-bc43-852418bbd394","f94860c-a83f-44cb-88bd-3fc8d2ab5510","98481911-2a32-4b68-b7bb-8065ffc25376","fc661805-ba40-45c5-84f0-1afa40af255d","16168079-3eda-4f8e-b486-51a592299b87","2f874bbe-63ac-479a-ba4e-858c0607b2ac","4a3ef465-671d-4759-815e-c6bd2769da61","d13a7541-aeee-425f-89e6-33795d8e1e23","693cc58e-1b66-41f2-b83e-d92de385aace","07dd8389-c27d-4fbe-8b52-8506a933be06","e94fbeb3-4642-4ccf-b138-82c39dede64c","985dcc97-d950-413f-a024-9e12640775a9","4944e5c6-520d-41b4-84e6-9c9cc4b564ec","141e074c-7563-4d02-8e03-41fbb2be1f39","f240c320-03bb-4562-ad29-8282c706778d","2b6d1a2b-3c4d-5e6f-7e6f-4d3c9d8b2b6d","7fe223e8-c01b-482a-9578-4fb0f0fa86af","1e2d3c4b-5a6f-7e8d-9c0b-1a2b3c4d5e6f","b87b8817-e3ee-4bfc-87b3-e07176865011","7e6f5d4c-3b2a-1d0c-9e8b-7a6f5d4c3b2a","f94f0759-ed97-45dd-bdc3-d856e2c93ea4","5e6f7e8d-9c0b-1a2b-3c4d-5e6f7e8d9c0b","6309ad3f-f611-4c95-a627-5ba6b1eda4d4","5e6f7e6f-4d3c-9d8b-2b6d-1a2b3c4d5e6f","61e410fb-0923-4837-a93b-b68b771dc7f5","7e8d9c0b-1a2b-3c4d-5e6f-7e8d9c0b1a2b","ff582702-6d8c-4487-bcb7-584fc3f5c223","1a2b3c4d-5e6f-7e8d-9c0b-1a2b3c4d5e6f","b77fadc5-0e2b-4d97-958a-8069988150be","7e6f4d3c-9d8b-2b6d-1a2b-3c4d5e6f7e6f","4a074c0d-6343-46df-b9dc-c693f1cc54c5","3c4d5e6f-7e6f-4d3c-9d8b-2b6d1a2b3c4d","c8bf3142-c260-4062-8a92-b7b22ba14c90","4d3c9d8b-2b6d-1a2b-3c4d-5e6f7e6f4d3c","c1815bd9-9000-4477-8a47-7ec598b3d482","3c4d5e6f-7e8d-9c0b-1a2b-3c4d5e6f7e8d","4E309B85-22D3-4D75-96FA-E507BED0DFC4","9E690E1D-16C2-4476-A233-ECD3D3EC3815","60802B04-BD2C-455E-B18D-ABCE28675B11","44E70EDA-FA17-4B40-BF7A-4CD476525EB4","e89a42f7-5318-4ca1-a0d9-2f105543a1bf","7d6310c2-4c88-45c4-9e4d-9feab95f84f8","d64d18e9-1c75-4b3b-a6c9-acd67a6f55f6","8db4823c-7f3d-4d5a-89db-5b5f5eb2a4a9","a4b6d7c9-8e6f-4a3b-81c3-1f9d6e7b8a2c","6f935ea8-7c95-4f6b-a13a-16af03485d29","f06635bd-c6ed-4052-b2d9-074bc8fa9f79","b5716eb0-b7ed-4748-9c3f-ace527fc382a","9aeac264-1f94-4b63-a1e7-afff335dadde","0462291d-ba25-4268-8440-6135184e6f7b","42d970fa-0354-4325-b9c2-bc47f7cbd46b","421c4968-ba9a-41fb-8f3e-0b43837e5b79","894a51a8-1e91-4ac1-b7d8-156894eb06c2","7fb10cd3-ed0f-4a4b-a00c-a039d3e6ccbc","a634f34d-b0b7-4e06-9f63-9323011e23ea","6d965ac8-a8c6-4831-80d3-5c51275100d5","6f1bc254-caa7-4598-a714-d3ec267e2eee","61a39dfb-f069-4639-a650-ef6c292cfc7b","25852cd3-2216-49ad-a492-6778b4854c5c","b061d0cf-21c1-4b76-b890-caf0dd3ce71e","7f3d1936-3775-429b-bfd7-dc9b2ba60c64","40461cde-9c28-4bb0-a227-f6a1a7467541","b42ac607-c76d-438a-b76a-33acb4e54138","b67c8c54-3f67-47b2-b452-16fb84ed417c","9e8fe6f0-8c27-4177-aa41-e49f1e7450be","78bcf04a-0b38-4996-9f4e-7372e9c2d020","98d0fd24-6a32-435f-96ac-2581938a8416","440010c7-039e-4ef3-9e9e-edd4d3771257","7a167d23-5ea5-481e-bbb6-fd19699af0ba","b91f0d9c-d737-426a-8f82-ae437dd9f96a","8d00c931-20c2-407b-9259-1ae4c88b028d","36fbf974-5e1b-4769-87fa-225eaa89d5f7","c9644b48-1200-4111-8f62-b0149217257e","a2922c7d-f507-4475-aa51-05d132d74533","016bbfac-c423-4c25-83e5-53853c691c9c","b4cdbea5-9617-4b09-b176-50240a07ba65","f6011a1e-5ed2-4965-b7fb-62ed5ac0ffd9","a21345ab2-4eb1-1323-c5ba-64ad3bd3ga25","f05244sn2-5ed2-4965-b7fb-62ee5ac0fh21","a03245sn2-5ac1-5745-a7eb-12ce5bc0fa23","e23137ab2-1ba3-2526-a3eb-14bd1bc1gb31","b13345ab2-5ea1-3436-a5eb-24ad2bc4gb31","c22325ab2-5ea1-3436-a5eb-14ad2ac4gb31","b22325db4-5ea1-3436-a5eb-14ad2ab4gb31","d22137ab2-6ba3-2426-a2eb-14ad1bc1gb32","a6552tt9-5ed2-4965-b7fb-62ee5ac0ff66","a3552tt9-4ed2-4665-b7eb-61ee5ac0fc46","d0fad1c6-6580-4c19-ad0b-d410db4e04d6","b838972e-f1e4-4141-be20-fcb264e283ac","77b86d68-0cad-4dbe-a475-89f76f524035","aad69aaf-18e3-480a-93f3-5e4fac15f772","064165C0-C98A-490F-B1CC-EEB7E97E14D7","C413DD46-FC07-4503-BD46-6675865964D9","43BDBB0E-EDEB-4553-9D3B-0F0FCD634A2A","11E85FFF-DB30-44EB-BF92-C1B2AE87FA67","903C2AAD-D6B3-4EBE-B36F-489BAE2CE89B","5A911040-8674-47FB-B9F6-82F16E98F6EE","ADB6AFF9-FEAD-443C-BCC8-704F586CC5A4","9a6be894-4674-4d77-8d2e-844a8eb28eae","a00fc011-6091-440b-8284-f9fac99a7afe","e804b73f-639a-4b9c-acc2-cbbbfa2ef312","ad05f177-82ee-43fb-8454-522e08f987e0","dfa672f3-f6ae-4eda-8550-1f7fbf1bcca1","6b2c4057-669d-493d-a6b3-fbb2a2f44fb3","a45ed096-b8c6-4ce1-ba2e-a6b5a52a7aae","64844757-e0db-4568-845c-cf608593778c","6c58d1d8-5dfe-4a65-9764-4bd50fbcf37d","d99254bc-99b3-421b-ba6c-8ef7d465ecfc","1b5f6e45-fefc-465e-ae38-5d5a57ce5d1a","cd98dfa9-1467-4c31-a378-b65063fea535"]}},{"id":"microsoft.containerinstance/containergroups","type":"Microsoft.ContainerInstance/containerGroups","displayName":"Microsoft Container Instances Services","description":"Tables for customer logs","related":{"tables":["ContainerInstanceLog","ContainerEvent"]}},{"id":"microsoft.documentdb/databaseaccounts","type":"Microsoft.DocumentDb/databaseAccounts","displayName":"Azure Cosmos DB","description":"All tables related to Azure CosmosDB Service.","related":{"tables":["AzureActivity","CDBDataPlaneRequests","CDBDataPlaneRequests5M","CDBDataPlaneRequests15M","CDBPartitionKeyStatistics","CDBPartitionKeyRUConsumption","CDBQueryRuntimeStatistics","CDBMongoRequests","CDBCassandraRequests","CDBGremlinRequests","CDBTableApiRequests","CDBControlPlaneRequests","AzureMetrics","AzureDiagnostics"],"queries":["bc0bf95e-735e-11ea-926d-c8348e02520c","bc0edc14-735e-11ea-85a2-c8348e02520c","bc0f5421-735e-11ea-93cb-c8348e02520c","bc0fc666-735e-11ea-9e0a-c8348e02520c","bc1014e4-735e-11ea-8c7b-c8348e02520c"]}},{"id":"microsoft.datacollaboration/workspaces","type":"Microsoft.DataCollaboration/workspaces","displayName":"Project CI Workspace","description":"All tables related to Project CI Workspaces.","related":{"tables":["AzureActivity","AzureMetrics","ACICollaborationAudit"],"queries":["3eb92137-5019-4eb0-8a01-7480256befea","bc25e051-3518-4aa2-9493-2dc1abf176b1","acd263c0-a5a3-42cd-af74-d12df6f577e3","1c7e3db4-ce89-43b3-a951-b7948e6f4874"]}},{"id":"microsoft.azuredatatransfer/connections","type":"Microsoft.AzureDataTransfer/connections","displayName":"Azure Data Transfer","description":"All tables related to Azure Data Transfer.","related":{"tables":["DataTransferOperations"],"queries":["1681882b-e00c-408b-8cd3-4f0b58374d7a","9d7c3fe3-1f56-4a92-9888-7ba597e3b0d2"]}},{"id":"microsoft.security/defenderforstoragesettings","type":"Microsoft.Security/DefenderForStorageSettings","displayName":"Defender for Storage Settings","description":"This table contains malware scan results of azure storage blob and files with detailed explanations on each scanned object, such as malware type or error information in case of failed scan.","related":{"tables":["StorageMalwareScanningResults"],"queries":["30a46f4f-dc1a-43e1-9fe4-c82750e218b3","dd5cd0fc-683c-4ace-a7da-ef6afd649407"]}},{"id":"microsoft.digitaltwins/digitaltwinsinstances","type":"Microsoft.DigitalTwins/digitalTwinsInstances","displayName":"Azure Digital Twins","description":"All tables related to Azure Digital Twins service.","related":{"tables":["AzureActivity","ADTDataHistoryOperation","ADTDigitalTwinsOperation","ADTEventRoutesOperation","ADTModelsOperation","ADTQueryOperation"],"queries":["bc4366ef-b269-43f2-aad7-4919e5defdfb","5fdb334b-28ad-411e-8679-e9ef7f40ad1f","bb5ff65d-0c7f-11eb-be85-c8348e03e0b8","bb60447f-0c7f-11eb-9344-c8348e03e0b8","bb604480-0c7f-11eb-828b-c8348e03e0b8","bb604481-0c7f-11eb-a61d-c8348e03e0b8","bb604482-0c7f-11eb-9834-c8348e03e0b8","bb604483-0c7f-11eb-b808-c8348e03e0b8","bb604484-0c7f-11eb-bef2-c8348e03e0b8","bb604485-0c7f-11eb-b2cf-c8348e03e0b8","bb604486-0c7f-11eb-ab5c-c8348e03e0b8"]}},{"id":"microsoft.network/dnsresolverpolicies","type":"Microsoft.Network/dnsResolverPolicies","displayName":"DNS Resolver Policies","description":"DNS resolver policies allows you to monitor and manage resolution of DNS queries coming from virtual network.","related":{"tables":["AzureActivity","DNSQueryLogs"],"queries":["24310862-5ed4-41f6-b7b0-66176ac8a4f3"]}},{"id":"microsoft.eventgrid/namespaces","type":"Microsoft.EventGrid/namespaces","displayName":"Event Grid Namespaces","description":"All tables related to Azure Event Grid Namespace resource.","related":{"tables":["AzureActivity","AzureMetrics","EGNSuccessfulMqttConnections","EGNFailedMqttConnections","EGNMqttDisconnections","EGNFailedMqttPublishedMessages","EGNFailedMqttSubscriptions","EGNSuccessfulHttpDataPlaneOperations","EGNFailedHttpDataPlaneOperations","AzureDiagnostics"],"queries":["9b5542ef-7676-40ad-999d-efba45f42e9c","22db387f-49a3-4b3e-88a4-13b1b00728b8","7a684553-e9ad-4fd8-a31f-75c1a4db8d2c","56bf07f2-0029-4c3a-9eb1-22320fd92b39","60E4B8B4-31FA-4BA7-9155-44AF1DDA8BA3"]}},{"id":"microsoft.eventgrid/topics","type":"Microsoft.EventGrid/topics","displayName":"Event Grid Topics","description":"All tables related to Azure Event Grid Topics resource.","related":{"tables":["AzureActivity","AzureMetrics","AegDataPlaneRequests","AzureDiagnostics","AegDeliveryFailureLogs","AegPublishFailureLogs"],"queries":["1a5d3292-cb61-4372-bf32-0c013cb15625","14ed6864-b898-400d-9083-b811bca96cb5","09073e9b-334f-43b8-8b42-58ddf7e6b1e2","0acad5d4-9b87-11ea-b69c-c8348e02520c","0acf42ae-9b87-11ea-b093-c8348e02520c","be55aaa8-ec2b-11ea-8a0a-c8348e03e0b8"]}},{"id":"microsoft.eventhub/namespaces","type":"Microsoft.EventHub/namespaces","displayName":"Event Hubs","description":"All tables related to Azure Event Hubs resource.","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","AZMSApplicationMetricLogs","AZMSOperationalLogs","AZMSRunTimeAuditLogs","AZMSDiagnosticErrorLogs","AZMSVnetConnectionEvents","AZMSArchiveLogs","AZMSAutoscaleLogs","AZMSKafkaCoordinatorLogs","AZMSKafkaUserErrorLogs","AZMSCustomerManagedKeyUserLogs"],"queries":["eaa7957b-aecb-406b-be10-f48696b0ecehdel","8a0df091-26c3-4e64-a3b9-d2b2bd397c4e","c6b1a9cd-8b76-468d-8a00-b3be3040cf2b","2600882e-3766-4e90-8823-4f1285d4595c","719df79c-282d-49ff-9163-35542afe3e47","cc0aeb16-1fe2-43c5-b483-cc8aba72b41c","b1101646-c48a-4f18-83b9-2a3af4cd2c2b","b8df4aec-7c87-46e1-a6fb-d20b9c0e0ef0","bcb23e62-59f9-4b81-b7f9-91f2157c051f","b48bce62-0ab9-4b29-9d48-fd0602f175c3","8741ae6e-c9d1-4af4-8e8b-e139342c94cd","6e754b00-8d1b-4191-a332-fe3c746d64ee","eeafb4d2-cc77-45de-8ee4-bcc7f804fa9b","375f9d9e-29bd-44ba-84ef-f30bbf8edbbb","03935bbe-6dcb-4712-a695-cba2e583784f","88ab8b25-c3c5-4c97-a93f-8e3158dc487e","9216f2d9-9b82-11ea-ba13-c8348e02520c","921acbc5-9b82-11ea-bebf-c8348e02520c","921bdcea-9b82-11ea-ad5d-c8348e02520c","921e4dd0-9b82-11ea-abb1-c8348e02520c","9220983b-9b82-11ea-a82a-c8348e02520c"]}},{"id":"microsoft.network/azurefirewalls","type":"Microsoft.Network/azureFirewalls","displayName":"Firewalls","description":"All tables related to Azure Firewall Service.","related":{"tables":["AZFWNetworkRule","AZFWFatFlow","AZFWFlowTrace","AZFWApplicationRule","AZFWThreatIntel","AZFWNatRule","AZFWIdpsSignature","AZFWDnsQuery","AZFWInternalFqdnResolutionFailure","AZFWNetworkRuleAggregation","AZFWApplicationRuleAggregation","AZFWNatRuleAggregation","AZFWDnsFlowTrace","AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["5eea8814-60dd-4d3c-bec0-3c364c88efca","8146e954-5df5-4eaa-afe6-1cef6c1583cb","ddacb4dd-a7c6-4f36-9642-71a0fac3a34c","3d806161-ab30-4c7c-a4fc-9bae0622e531","dca5053f-af30-44dc-bfa7-089e61668991","ae4119c9-1e46-4b3f-b9a6-df570e93e6f9","2705d573-c84c-4b40-973c-2aba2407ff22","04205bbc-69b9-4c56-8ef6-f99814abfcba","616c413f-dc29-402c-851e-3b524865ce2a","4d2fd56b-a0d4-42e1-8d0d-31e60f2e005b","48aa0383-62e4-11ea-9e82-c8348e025209","48b065a4-62e4-11ea-930c-c8348e025209","48b192a3-62e4-11ea-89fd-c8348e025209","8b7ea3bd-0571-0eec-1a82-605a44e00989","acaaa91b-7585-2e37-9930-d455f72013e5"]}},{"id":"microsoft.dashboard/grafana","type":"Microsoft.Dashboard/grafana","displayName":"Azure Managed Workspace for Grafana","description":"Azure Managed Workspace for Grafana is a joint-1st party solution from Microsoft and Grafana Labs which provides the monitoring and observability from Grafana Labs with reliable, secure, and seamless integration into Azure cloud platform.","related":{"tables":["AzureActivity","AGSGrafanaLoginEvents","AGSGrafanaUsageInsightsEvents"],"queries":["b2bd1ca4-8a33-11ec-8fd3-00155dd7661c"]}},{"id":"microsoft.healthcareinterop/workspaces","type":"Microsoft.HealthcareInterop/workspaces","displayName":"HealthCare Interoperability Service","description":"Logs generated through HealthCare Interoperability Service and pushed to Azure Monitoring.","related":{"tables":["AHCIDiagnosticLogs"],"queries":["e2c1b8a7-4f8b-4e2a-9a3d-2c6e8f7d5b1c","e8a2f7c1-5b3d-4c9a-9e2f-7d1b6a4c2f8e"]}},{"id":"microsoft.healthcareapis/workspaces","type":"Microsoft.HealthcareApis/workspaces","displayName":"Health Data Services","description":"Logs generated through Health Data Services and pushed to Azure Monitoring.","related":{"tables":["AHDSMedTechDiagnosticLogs","AHDSDicomDiagnosticLogs","AHDSDicomAuditLogs"],"queries":["68299a2f-71a3-4795-a11c-9dfc7b2d0651","af396c53-a04e-43aa-8bd9-c9cf75f96318","3dfc6cd3-9545-43f3-b1b8-7c4813d1da5c","5c33c4fb-04cf-410e-9556-04509fb24090","f1aa373c-ecc6-49cd-835a-05ac38b0749f","5d9df8e3-7ff1-45f5-9569-411f6ffacfc7","c3346bdf-e3db-4af3-b6f7-5e1e73ce0d2b"]}},{"id":"microsoft.keyvault/vaults","type":"Microsoft.KeyVault/vaults","displayName":"Key Vaults","description":"Cloud applications and services use cryptographic keys and secrets to help keep information secure. Azure Key Vault safeguards these keys and secrets. When you use Key Vault, you can encrypt authentication keys, storage account keys, data encryption keys, .pfx files, and passwords by using keys that are protected by hardware security modules (HSMs).","related":{"tables":["AzureActivity","AzureMetrics","AZKVAuditLogs","AZKVPolicyEvaluationDetailsLogs","AzureDiagnostics"],"queries":["126a5c26-d357-4b03-a4bc-5e8fbd26a1b8","d196c718-afdf-4eb1-9849-4f236030f51b","10026928-5243-4850-82e5-e1c4c175bc15","163b3a0a-e23d-4648-aec6-72906be0c027","dcfebdea-1637-46b9-8452-1979e9e30251","79cf6219-a0c3-4cac-a011-e5c02fc7cada","be6a0cec-b2bc-4513-88ce-64c555f5bca6","b397218a-c6a7-4221-8265-c1fa29303883","7f5b14e9-a072-4d31-b73b-cd8de50c63b3","314645a8-79f8-487d-8dc0-7103fa5dbc7a","1986631a-103b-403b-9860-2eb03a9564c6","f35fd4ac-7121-4085-8204-b6700a59d84b","36fdb8a7-ee08-4390-8bc4-8686b9b0d4bb","d661e902-a0a1-34c4-3e41-537475821a79","4f39e42a-1858-28a8-7a2e-fae3ee9f08fc","6e21eddd-12a4-1d5d-23b3-aaf0b32737b9"]}},{"id":"microsoft.loadtestservice/loadtests","type":"Microsoft.LoadTestService/loadtests","displayName":"Azure Load Testing","description":"Azure Load Testing Service enables developers and testers to generate high-scale load that reveal actionable insights into app performance, scalability, and capacity with a fully managed service.","related":{"tables":["AzureActivity","AzureLoadTestingOperation"],"queries":["2a9d8818-5683-41cc-bedb-493c61a04bb6","a4b29234-b732-486e-9e5a-1d61af4aaf1e"]}},{"id":"microsoft.managednetworkfabric/networkdevices","type":"Microsoft.ManagedNetworkFabric/networkDevices","displayName":"Network Devices (Operator Nexus)","description":"Azure Operator Nexus is a carrier grade hybrid cloud platform built for mission critical mobile network applications. This table represents all the logs collected from the Nexus Network Fabric - Network Devices.","related":{"tables":["AzureMetrics","AzureActivity","MNFDeviceUpdates","MNFSystemStateMessageUpdates","MNFSystemSessionHistoryUpdates"],"queries":["96c338bf-610b-4231-83b5-df264ddbf749","f789e18e-9204-43f0-9656-ae305a7c56d3","53052d78-882f-46b7-a711-69dca0f58af4","ade0fc51-681d-490d-b8f5-216b3203e419","c21d56d3-8079-46ff-b056-9d5be6505e88","a1378514-505d-453b-a0a9-44cd62cd5228","6f7d4fb8-e91c-4fa3-aa6f-c695d21e5e1a"]}},{"id":"microsoft.documentdb/cassandraclusters","type":"Microsoft.DocumentDB/cassandraClusters","displayName":"Azure Managed Instance for Apache Cassandra","description":"All tables related to Azure Managed Instance for Apache Cassandra.","related":{"tables":["AzureActivity","CassandraAudit","CassandraLogs"],"queries":["7f99e5e3-4b53-4ac2-8b96-3f2a5f92c7f9","d2752945-c33f-4a6b-9128-e2f8e2dbf6a1"]}},{"id":"microsoft.datareplication/replicationvaults","type":"Microsoft.DataReplication/ReplicationVaults","displayName":"Azure Migrate Data Replication","description":"All tables related to Azure Migrate Data Replication Service.","related":{"tables":["ASRv2JobEvents","ASRv2HealthEvents","ASRv2ReplicationVaults","ASRv2ReplicationPolicies","ASRv2ReplicationExtensions","ASRv2ProtectedItems"]}},{"id":"microsoft.documentdb/mongoclusters","type":"Microsoft.DocumentDB/mongoClusters","displayName":"Azure Cosmos DB for MongoDB (vCore)","description":"Logs related to Azure Cosmos DB for MongoDB (vCore).","related":{"tables":["VCoreMongoRequests","AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["7c29ceda-72da-4398-befe-2a17722165b1","5bb1d784-35fa-4065-bcfe-d780877bb42a","9883e7d9-5df2-4ced-bd47-3fc5f34f3c7a","4ad830b9-b8b6-4e8e-a934-754d4ad2d959"]}},{"id":"microsoft.azuremonitordiagnosticsagents/datacollection","type":"Microsoft.AzureMonitorDiagnosticsAgents/DataCollection","displayName":"Azure Monitor Diagnostics Agents","description":"All tables for conditional data sets collected by Azure Monitor Diagnostics Agents via Data Collection Rules (DCRs).","related":{"tables":["DataSetRuns","DataSetOutput","PerfInsightsRun","PerfInsightsFindings","PerfInsightsImpactedResources"],"queries":["37325c2f-a267-4c55-8b85-3a315e9e50a3","e70b8048-60cc-485e-aa4c-13681020dc97"]}},{"id":"microsoft.dashboard/dashboard","type":"Microsoft.Dashboard/dashboard","displayName":"Azure Monitor Dashboard with Grafana","description":"Azure Monitor Dashboards with Grafana enable you to use Grafana's query, transformation, and visualization capability on data sources such as Azure Monitor, Azure Managed Prometheus, and Azure Resource Graph within an Azure Monitor workspace.","related":{"tables":["AzureActivity","AGSUpdateEvents"],"queries":["1b1df069-ae9b-4026-876e-09b8d1c4cf12"]}},{"id":"microsoft.azuredatacollection/amawindows","type":"Microsoft.AzureDataCollection/amaWindows","displayName":"Azure Monitor Agent (Windows)","description":"All tables related to AMA telemetry and diagnostics data."},{"id":"microsoft.insights/workloadmonitoring","type":"Microsoft.Insights/WorkloadMonitoring","displayName":"Workload Monitoring of Azure Monitor Insights","description":"Tables used by Azure Monitor Workload Monitoring for collection of diagnostic logs.","related":{"tables":["InsightsMetrics"],"queries":["0d32e6ff-9894-415e-a981-2e9e5f76bd78"]}},{"id":"microsoft.netapp/netappaccounts/capacitypools","type":"Microsoft.NetApp/netAppAccounts/capacityPools","displayName":"Azure NetApp Files","description":"All tables related to Azure NetApp Files.","related":{"tables":["ANFFileAccess"],"queries":["f6544502-3c0c-4e40-916d-bac6bb3ce8cf","b0398ff8-d74a-11ec-9d64-0242ac120002"]}},{"id":"microsoft.networkcloud/baremetalmachines","type":"Microsoft.NetworkCloud/bareMetalMachines","displayName":"Nexus BareMetal Machines","description":"Azure operator Nexus is a carrier grade hybrid cloud platform built for mission critical mobile network applications. It simplifies the provisioning of new network services and optimizes the deployment of network functions and applications into on premise data centers. This table collects the system & security logs of the baremetal machines.","related":{"tables":["AzureActivity","AzureMetrics","NCBMSystemLogs","NCBMSecurityLogs","NCBMSecurityDefenderLogs","NCBMBreakGlassAuditLogs"]}},{"id":"microsoft.networkcloud/clustermanagers","type":"Microsoft.NetworkCloud/clusterManagers","displayName":"Nexus Cluster Managers","description":"Azure Operator Nexus is a carrier grade hybrid cloud platform built for mission critical mobile network applications. It simplifies the provisioning of new network services and optimizes the deployment of network functions and applications into on premise data centers. This table collects the logs about deployment and upgrade performed of the cluster managed by the cluster manager.","related":{"tables":["AzureActivity","AzureMetrics","NCMClusterOperationsLogs"]}},{"id":"microsoft.networkcloud/clusters","type":"Microsoft.NetworkCloud/clusters","displayName":"Nexus Clusters","description":"Azure operator Nexus is a carrier grade hybrid cloud platform built for mission critical mobile network applications. It simplifies the provisioning of new network services and optimizes the deployment of network functions and applications into on premise data centers.This table collects the kubernetes container & vmorchestration logs of the clusters.","related":{"tables":["AzureActivity","AzureMetrics","NCCIDRACLogs","NCCKubernetesLogs","NCCPlatformOperationsLogs","NCCVMOrchestrationLogs"]}},{"id":"microsoft.networkcloud/storageappliances","type":"Microsoft.NetworkCloud/storageAppliances","displayName":"Nexus Storage Appliances","description":"Azure operator Nexus is a carrier grade hybrid cloud platform built for mission critical mobile network applications. It simplifies the provisioning of new network services and optimizes the deployment of network functions and applications into on premise data centers.This table collects the audit & alert logs of the Storage Appliances.","related":{"tables":["AzureActivity","AzureMetrics","NCSStorageAudits","NCSStorageAlerts","NCSStorageLogs"]}},{"id":"microsoft.network/loadbalancers","type":"Microsoft.Network/LoadBalancers","displayName":"Load Balancers","description":"Azure Load Balancer is a low latency and high throughput network-layer load balancer that enables you to improve the availability and scalability of your applications by distributing network traffic.","related":{"tables":["ALBHealthEvent","AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["8f2774ec-9662-4eff-bc18-b223ec9ce86d"]}},{"id":"microsoft.network/natgateways","type":"Microsoft.Network/NatGateways","displayName":"NAT Gateways","description":"Azure NAT Gateway is a fully managed and highly resilient Network Address Translation (NAT) service in Azure.","related":{"tables":["NatGatewayFlowlogsV1"],"queries":["652774ec-9662-4e1f-bc18-b223ec9ce36d","252274ec-9662-4e3f-bc18-b225ec9ce31d"]}},{"id":"microsoft.playfab/titles","type":"Microsoft.PlayFab/titles","displayName":"Azure PlayFab","description":"All tables related to Azure PlayFab Services.","related":{"tables":["PFTitleAuditLogs"]}},{"id":"microsoft.securityinsights/purview","type":"Microsoft.SecurityInsights/Purview","displayName":"Microsoft Defender for cloud","description":"All tables related to Microsoft Defender for cloud offerings.","related":{"tables":["PurviewDataSensitivityLogs"]}},{"id":"microsoft.purview/accounts","type":"Microsoft.Purview/accounts","displayName":"Microsoft.Purview/accounts","description":"All tables related to Azure Purview service offerings such as data discovery, sensitive data classification, and end-to-end data lineage.","related":{"tables":["AzureActivity","PurviewScanStatusLogs","PurviewDataSensitivityLogs","PurviewSecurityLogs"],"queries":["5a5e640c-37d6-4f21-93c2-3287fd420ea3"]}},{"id":"microsoft.recoveryservices/vaults","type":"Microsoft.RecoveryServices/Vaults","displayName":"Recovery Services Vaults","description":"All tables related to Azure site recovery service.","related":{"tables":["AzureActivity","ASRJobs","ASRReplicatedItems","AzureBackupOperations","AzureDiagnostics","CoreAzureBackup","AddonAzureBackupJobs","AddonAzureBackupAlerts","AddonAzureBackupPolicy","AddonAzureBackupStorage","AddonAzureBackupProtectedInstance"],"functions":["b65a317e-7513-4379-b5fc-a467d3daa1d9","29112523-50d8-4bb9-931f-47b8b3da558f"],"queries":["d7328548-c02f-4461-a86d-ddea98534a3c","8ae09b10-bba7-4059-a179-4dd802f9dd28","4e376b4a-24d9-4110-9640-4c427e80af43","1b37f929-735e-11ea-b6cc-c8348e02520c","1b3a3fbb-735e-11ea-a165-c8348e02520c","1b3ab4e9-735e-11ea-bd69-c8348e02520c","1b3c1ae5-735e-11ea-9058-c8348e02520c","1b3c664d-735e-11ea-8315-c8348e02520c","1b3cdc20-735e-11ea-a43a-c8348e02520c","1b3e105a-735e-11ea-bc03-c8348e02520c","1b3ead6e-735e-11ea-9bb2-c8348e02520c","1b3f2289-735e-11ea-b431-c8348e02520c"]}},{"id":"microsoft.cache/redisenterprise","type":"Microsoft.Cache/redisEnterprise","displayName":"Azure Cache for Redis Enterprise","description":"All tables related to Azure Cache for Redis Enterprise service.","related":{"tables":["REDConnectionEvents"],"queries":["ddd81f93-5320-4626-ac94-a938757326a4","42dfde83-f564-4282-854d-612dfda54abf","e1629bb4-4c6e-49a1-a826-5627804b3dcf","d05ffa8d-2ca3-4a6b-9d91-2cee1feafc52","e4c56072-f3d4-4d90-89af-7b94cf0a80e1"]}},{"id":"microsoft.relay/namespaces","type":"Microsoft.Relay/namespaces","displayName":"Relay","description":"All tables related to Azure Relay resource.","related":{"tables":["AzureActivity","AzureMetrics","AZMSVnetConnectionEvents","AZMSHybridConnectionsEvents"],"queries":["07097c10-af17-46fd-b8a0-65c405f8b299","d25850ef-feda-42dc-afdb-d6f527854b8b","942c6acb-1f7e-498e-b5fa-d3c30f787f61"]}},{"id":"microsoft.servicebus/namespaces","type":"Microsoft.ServiceBus/namespaces","displayName":"Service Bus","description":"All tables related to Azure Service Bus resource.","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","AZMSOperationalLogs","AZMSVnetConnectionEvents","AZMSRunTimeAuditLogs","AZMSApplicationMetricLogs","AZMSDiagnosticErrorLogs"],"queries":["eaa7957b-aecb-406b-be10-f48696b0ecdf","eaa7957b-aecb-406b-be10-f48696b0ecdfdel","e16d5b06-e193-4e8f-8f2c-e3dd04413d9e","2b7d7c31-a6f4-4fcc-857e-c40fd9ecd918","9edb2134-7a9d-4193-b727-1900e50b133d","5956fb69-ccc1-40a2-a7be-8cf35a3fc627","39525fb9-8431-4c02-826f-c610eaaeb9c1","e42b82a3-12b7-49d3-90da-cb8f0d15090c","5378867d-d538-4133-b9ad-b98d8e920995","7f71e893-1960-4080-b67f-1a06c5a79143","1b9a6421-8d31-4a38-ae8c-35f70ffafdb8","1b159023-07e2-4d37-9447-af7b6cc5cfc6","1bd9dbca-3306-4985-8043-b4cb8c1f21e7","26f1dcce-f504-41fc-8613-e0458cce591a","e71a5c12-1ac5-4784-9c99-ce483f11da8d","ad8246e6-68dd-4bb6-a94a-dddb9c1e35d1","066798a4-70b2-4a0e-badb-a551fa92603d","c58b9b88-9b80-11ea-9137-c8348e02520c","c58ea8c7-9b80-11ea-afe7-c8348e02520c","c591b611-9b80-11ea-8243-c8348e02520c","c593ffdc-9b80-11ea-9200-c8348e02520c","c59845a8-9b80-11ea-8a09-c8348e02520c"]}},{"id":"microsoft.azuresphere/catalogs","type":"Microsoft.AzureSphere/catalogs","displayName":"Azure Sphere","description":"All tables related to the Azure Sphere Service.","related":{"tables":["ASCAuditLogs","ASCDeviceEvents"],"queries":["483f4b2c-5325-441f-9ec4-edc9baefcdd4","24acfce7-569c-4e05-9145-e09752fae02c","0c4a1b53-4761-4793-88ee-b5e569a333c4","f718df22-98e8-4b32-a6d0-bfd05f725a42","5ef6030d-8c6a-44a0-8739-5797f36eea20"]}},{"id":"microsoft.sql/servers","type":"microsoft.sql/servers","displayName":"SQL Servers","description":"All tables related to SQL Servers.","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["44e16774-d990-4192-8fce-2e543e34633a","59e7db22-9f52-11ea-b8de-c8348e02520c","59ecbd47-9f52-11ea-bc53-c8348e02520c","59f150f7-9f52-11ea-8681-c8348e02520c","59f34cde-9f52-11ea-a5c7-c8348e02520c"]}},{"id":"microsoft.standbypool/standbycontainergrouppools","type":"microsoft.standbypool/standbycontainergrouppools","displayName":"Microsoft.StandbyPool","description":"Standby pools improve scaling performance by pre-provisioning containers, which can be quickly moved into the container group, either in a running or stopped state, significantly reducing the time needed to scale out.","related":{"tables":["SCGPoolExecutionLog","SCGPoolRequestLog"],"queries":["aed2e616-52ae-4c8e-8562-af62c017718a","6f2a51a0-449a-4578-b715-4f634a4d084a"]}},{"id":"microsoft.standbypool/standbyvirtualmachinepools","type":"microsoft.standbypool/standbyvirtualmachinepools","displayName":"Microsoft.StandbyPool","description":"Standby pools improve scaling performance by pre-provisioning virtual machines, which can be quickly moved into the scale set, either in a running or stopped state, significantly reducing the time needed to scale out.","related":{"tables":["SVMPoolExecutionLog","SVMPoolRequestLog"],"queries":["d76e62a6-9777-4e9c-a455-1d2541deaaf2","485749e7-4fa6-4e11-80f7-ef1696cd7736"]}},{"id":"microsoft.networkfunction/azuretrafficcollectors","type":"Microsoft.NetworkFunction/AzureTrafficCollectors","displayName":"Azure Traffic Collector","description":"All tables related to Azure Traffic Collector.","related":{"tables":["AzureActivity","AzureMetrics","ATCExpressRouteCircuitIpfix","ATCPrivatePeeringMetadata","ATCMicrosoftPeeringMetadata"],"queries":["db83ff91-df3b-4d7d-b62f-559d49e7d63c","5c27eae1-f25b-46e1-b18b-c1cc11e35ddb","b40ab49e-3ef0-4c97-862b-207b98a68b02"]}},{"id":"microsoft.network/networkmanagers","type":"Microsoft.Network/networkManagers","displayName":"Azure Virtual Network Manager","description":"Azure Virtual Network Manager is a highly scalable, centralized network management solution that enables customers to configure the connectivity and security of network resources globally across subscriptions.","related":{"tables":["AzureActivity","AzureMetrics","AVNMNetworkGroupMembershipChange","AVNMRuleCollectionChange","AVNMConnectivityConfigurationChange","AVNMIPAMPoolAllocationChange"],"queries":["f4d4d8db-7fa4-4196-872f-c8235d23ee8e","70eca34a-da99-45bf-9d68-415eb5def7c3","7c5ca7f7-1d91-461b-b451-9bb10d8ebdde","10b9ae2f-97fd-4807-af5f-8039f9cc7491","32e84b39-f121-4053-8d37-111c385f3e1a","b09ac15b-67c3-4531-bbb6-b0e2dba38d73","e522b056-537a-4775-9e13-2bc6e83fcd9c","ed719e04-ef7e-4d72-b03f-14e429ce4a4f"]}},{"id":"microsoft.avs/privateclouds","type":"microsoft.avs/privateClouds","displayName":"AVS Private Cloud","description":"Azure VMware Solution offers private clouds that contain VMware vSphere clusters built from dedicated bare-metal Azure infrastructure.","related":{"tables":["AVSVcSyslog","AVSEsxiFirewallSyslog","AVSEsxiSyslog","AVSNsxManagerSyslog","AVSNsxEdgeSyslog","AVSSyslog"],"queries":["c864821b-bcc9-4305-a0e1-37dcb9f1f82d","462adba2-ab3c-42ad-8279-ba34d5f3cd49","517e9bd0-4635-44cd-9ddc-6f799d319de2","76378a5b-a5ed-4ad1-b0fa-8831475066be","a00b5597-266a-49b4-be69-ebf5606677a6","5206e354-d7a9-4eec-b3e9-7e5255a932a0","cfcdfea7-2e51-45b0-9d09-62a35900b151","7aef15d0-37cf-4db0-9691-fddd8508210b","0fc4a89c-1430-4422-816b-f3ead837b9c8","9dccb0ff-36b5-4682-b6ab-e7a4f085d782","fe1dd542-afb3-4b72-88c0-02e00a34608a","d4737f7d-28ee-4969-bf67-9065fd911210","09a0e87c-6410-4316-b7be-80b6592ca8e4","4bc9187e-5aec-464a-ba2f-86f07d1bc42b","a3b9cb07-69f5-4034-9b3d-c5f4ee3655c7","637510f2-9609-4eed-ad8d-8efc0bfe442a","cbcf3a45-5896-4020-abb3-bdc0c0581319","2079cc76-82bd-4deb-beb7-595a66c8e7b0","254a4228-9e71-489f-ba2c-e47017afbaa3"]}},{"id":"microsoft.botservice/botservices","type":"Microsoft.BotService/botServices","displayName":"Bot Services","description":"All tables related to Azure Bot Service.","related":{"tables":["AzureActivity","ABSBotRequests"],"queries":["64f87548-08b9-4b7a-83af-c05315d36666","8b407dc8-15eb-4ab6-8ddc-b9fa4d71ea0a","bc1ef3cf-7f5d-4516-9464-3d192bddce3b","60f51b61-07de-4bd5-a0ee-e0d9cf82d340","10fc7fcb-95db-4b92-aeb7-36e8fdec7d31","b8e80791-6507-423b-8cba-0e0b320af1c3","fec44dbd-94cd-4dab-8c68-0b0b64c256de","599d9097-d85c-44a3-8284-55e525590f20","599d9097-d85c-44a3-8284-55e525590f21","599d9097-d85c-44a3-8284-55e525590f23","599d9097-d85c-44a3-8284-55e525590f24","599d9097-d85c-44a3-8284-55e525590f25","599d9097-d85c-44a3-8284-55e525534f97"]}},{"id":"microsoft.chaos/experiments","type":"Microsoft.Chaos/experiments","displayName":"Chaos Experiment","description":"The experiment orchestration of chaos execution.","related":{"tables":["AzureActivity","ChaosStudioExperimentEventLogs"],"queries":["16191aba-3eee-4973-b338-7077300f32e1","151d25cf-7e9a-48eb-98ff-fe39a595ddff"]}},{"id":"microsoft.operationalinsights/workspaces","type":"Microsoft.OperationalInsights/Workspaces","displayName":"Log Analytics workspaces","description":"All tables related to Log Analytics Workspaces.","related":{"tables":["Event","AzureMetrics","Syslog","LAQueryLogs","LASummaryLogs","AzureMetricsV2","LAJobLogs","OTelResources","OTelSpans","OTelEvents","OTelLogs","OTelTraces","OTelTracesAgent"],"queries":["89e77e30-828d-4e3d-96a2-d28befa4275b","c6eb80df-d93e-451d-8a78-500adeb829ca","4a4819f6-4d4f-4c1e-8f9f-445c957af054","78b49d99-ccb7-4791-ba0c-73fbf2104daa","9edff33b-7951-4601-a50b-1da5fea7a127","3b374e0c-6e5c-4367-88a8-10d265ce5e42","323226e0-df9e-4287-92aa-3795cf8a964e","38d33331-aba2-43f7-92c5-c527123edbf6","bd465c3f-0a2c-4ab7-ad8b-43b616528363","3f8d4567-12ab-34cd-56ef-789012345678","1e2f3a4b-5c6d-7e8f-9012-3456789abcde","2a1b3c4d-6e7f-8901-bcde-f23456789abc"]}},{"id":"microsoft.cognitiveservices/accounts","type":"microsoft.cognitiveservices/accounts","displayName":"Cognitive Services","description":"Account for Cognitive Services resources","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.confidentialledger/ledgers","type":"Microsoft.ConfidentialLedger/Ledgers","displayName":"Azure confidential ledger","description":"Azure confidential ledger is a trusted, auditable data store ensuring highest levels of tamperproof integrity for sensitive data stored directly or via other data sources, such as Azure SQL database server, Azure Blob Storage and other connectors. It is suitable for audit logs/digest, confidential logs, and immutable records.","related":{"tables":["ACLTransactionLogs","ACLUserDefinedLogs"],"queries":["e159f354-4be5-40de-90cc-0152553aca5a","3f837a43-8382-465c-9681-cadd66b5755d"]}},{"id":"microsoft.connectedcache/cachenodes","type":"Microsoft.ConnectedCache/CacheNodes","displayName":"Microsoft Connected Cache","description":"ConnectedCache diagnostic logs, LogAnalytics tables","related":{"tables":["AzureActivity","AzureMetrics","MCCEventLogs"]}},{"id":"microsoft.connectedvehicle/platformaccounts","type":"Microsoft.ConnectedVehicle/platformAccounts","displayName":"Microsoft Connected Vehicle Platform","description":"Microsoft.ConnectedVehicle diagnostic log export, LogAnalytics tables","related":{"tables":["AzureActivity","AzureMetrics","MCVPOperationLogs","MCVPAuditLogs"]}},{"id":"microsoft.network/networkwatchers/connectionmonitors","type":"Microsoft.Network/NetworkWatchers/Connectionmonitors","displayName":"Network Watcher - Connection Monitor","description":"All tables related to Network Watcher - Connection Monitor","related":{"tables":["AzureActivity","NWConnectionMonitorTestResult","NWConnectionMonitorPathResult","NWConnectionMonitorDNSResult"],"queries":["8a9e48ac-20be-4074-8118-9366e73d8dac","da3145ca-5cb9-43f4-afcc-0544bc320d8d","a756c739-e5cb-4bf1-9b37-4d58d5a49e2d"]}},{"id":"microsoft.app/managedenvironments","type":"Microsoft.App/managedEnvironments","displayName":"Container Apps","description":"Logs for Azure Container Apps Environments configured with Azure Monitor support. Logs pushed to this Log Analytics resource originate from Shoebox Logs.","related":{"tables":["AzureActivity","ContainerAppConsoleLogs","ContainerAppSystemLogs","AppEnvSpringAppConsoleLogs","AppEnvSessionConsoleLogs","AppEnvSessionPoolEventLogs","AppEnvSessionLifecycleLogs"],"queries":["36891d32-455c-4492-9681-a06713a17de0","191c185d-0bb0-4690-a8cd-51a38289b9c0","9db05ad5-c9f7-4136-882e-a5bebb798cf1","e5922e5d-6e1c-4bb8-a0ba-eb64414622a6","10b27cd1-2881-481a-aa4e-7a7b310fe3af","67abc9cc-f88e-4d0f-9b47-51bbff409682","f94b4370-78dd-40ad-9b22-f3461f9d8446","cbb070f5-c424-41ff-96ab-f3e6e31e18f2","cf1dc664-075c-4fb6-962c-0280edb652a0"]}},{"id":"microsoft.d365customerinsights/instances","type":"Microsoft.D365CustomerInsights/instances","displayName":"Dynamics 365 Customer Insights","description":"All tables related to Customer Insights","related":{"tables":["AzureActivity","CIEventsAudit","CIEventsOperational"],"queries":["d42180dc-be37-4b53-9c02-302848dfff5f","6fabff7b-d466-43a6-b5e4-e91acd00a155","5de254d1-fd54-4468-a243-6756670c51ca","c72b0389-6dc7-40de-9e90-ce5ade614d46","427943d1-85ad-4fc2-b268-3da41e4a6c1a","e71bcfbf-4518-41ea-b013-80e249d62c28","bd46892d-853b-4b2e-a72d-040189673031","3888a9d5-61f3-43e1-af05-40cf805d0dc2"]}},{"id":"microsoft.databricks/workspaces","type":"Microsoft.Databricks/workspaces","displayName":"Azure Databricks Services","description":"Tables related to Databricks workspaces.","related":{"tables":["AzureActivity","AzureMetrics","DatabricksBrickStoreHttpGateway","DatabricksDashboards","DatabricksCloudStorageMetadata","DatabricksPredictiveOptimization","DatabricksDataMonitoring","DatabricksIngestion","DatabricksMarketplaceConsumer","DatabricksLineageTracking","DatabricksFilesystem","DatabricksApps","DatabricksClusterPolicies","DatabricksDataRooms","DatabricksGroups","DatabricksMarketplaceProvider","DatabricksOnlineTables","DatabricksRBAC","DatabricksRFA","DatabricksVectorSearch","DatabricksWebhookNotifications","DatabricksWorkspaceFiles","DatabricksLakeviewConfig","DatabricksFiles","DatabricksBudgetPolicyCentral","DatabricksAccounts","DatabricksClusters","DatabricksDBFS","DatabricksInstancePools","DatabricksJobs","DatabricksNotebook","DatabricksSQL","DatabricksSQLPermissions","DatabricksSSH","DatabricksSecrets","DatabricksTables","DatabricksWorkspace","DatabricksFeatureStore","DatabricksGenie","DatabricksGlobalInitScripts","DatabricksIAMRole","DatabricksMLflowAcledArtifact","DatabricksMLflowExperiment","DatabricksRemoteHistoryService","DatabricksGitCredentials","DatabricksWebTerminal","DatabricksDatabricksSQL"],"queries":["e2505eec-f620-4fbb-87e7-eb447d608a04"]}},{"id":"microsoft.insights/datacollectionrules","type":"Microsoft.Insights/datacollectionrules","displayName":"Data Collection Rules","description":"Diagnostic logs for DCR-based data collection","related":{"tables":["DCRLogErrors"],"queries":["d7d0e750-f20c-4d13-8887-2d088f25bb68"]}},{"id":"microsoft.dbformysql/flexibleservers","type":"Microsoft.DBForMySQL/flexibleServers","displayName":"Azure Database for MySQL Flexible Servers","description":"All tables related to Azure Database for MySQL Flexible Servers.","related":{"tables":["AzureActivity","AzureDiagnostics","AzureMetrics","MySqlAuditLogs","MySqlSlowLogs"],"queries":["09097f08-6a4b-4747-a251-21dd4237d99a","4fec14fe-d662-4b6f-a3a6-4a6bfcfe55cb","83c3b089-8510-4925-8614-f7f36a04af0b"]}},{"id":"microsoft.dbforpostgresql/flexibleservers","type":"Microsoft.DBForPostgreSQL/flexibleServers","displayName":"Azure Database for PostgreSQL Flexible Servers","description":"All tables related to Azure Database for PostgreSQL Flexible Servers.","related":{"tables":["AzureActivity","AzureDiagnostics","AzureMetrics","PGSQLPgStatActivitySessions","PGSQLDbTransactionsStats","PGSQLQueryStoreRuntime","PGSQLQueryStoreWaits","PGSQLAutovacuumStats","PGSQLServerLogs","PGSQLPgBouncer","PGSQLQueryStoreQueryText"],"functions":["bd5b5b75-dad2-40f2-b2f1-a58a0b41106d","7625213e-e8e7-433c-9f64-fdc984ad7ee0","cd3f45c0-2b70-42d9-bbad-cbbe7f3ee715","86401b72-78ca-46bd-a1ef-2f63d9230a5c","d6dad52a-5669-4cb4-bbbe-d5d1e4f9435d","2d003852-e92b-49b3-b12e-164332b0edab","f7a72ca9-df71-4cfb-811a-ea70469f3e3f"],"queries":["6c056893-0853-4a39-9638-35a5b0644363","61d8a45e-1589-489f-8d69-792c36fa8967","80ddf123-662f-408d-b1c9-1efcaee4ea25","3c0316ed-8069-4b75-8247-519398618f34","8c11b79a-eff0-439c-a54c-519a0cdc30cf","abca51a5-f135-4977-af75-46670f36017c","c50219bc-5393-40c6-b7aa-d5ac8cd065b8","c8e78040-e38f-46d1-a4ca-ec3fa1ea3c92","faffa3cc-01d7-4c65-9dcd-15c65d8db91f","54526cff-06de-4bec-bfa5-6909c04908bb","b61211bc-abef-4e01-b6f5-9154166f9021","8c1d6f16-f409-4be5-a36e-e7366e91fbc8","0f906ebd-a275-4f19-afb8-66956e3de6ba","d8825350-6728-45cd-8120-edf428e459f1","f41d96e1-a466-434c-96ba-f7ae31601398","bd908e0d-680a-40b9-88c2-b7fedf053c96","98ce5af3-de4d-45ac-91dc-b8a42f9bd2a4","f749c7ac-5407-4926-a42f-b8c684d6b169","6cba4bad-1a95-4970-9fc6-1a5f6936187b","c5ec4e2d-c7b3-42c3-9150-6ec344d62ee3","73917797-b07e-495f-874e-337d5c089123","3412a5f6-4520-4ac5-bd10-6b137a30845e","f88e66dd-2057-47d3-9758-3aab93c7602a"]}},{"id":"microsoft.devcenter/devcenters","type":"Microsoft.DevCenter/devcenters","displayName":"Dev Centers","description":"Dev Center is an Azure Service which will enable dev teams to self-serve development environments in the cloud, adhering to corporate security standards.","related":{"tables":["AzureActivity","AzureMetrics","DevCenterDiagnosticLogs","DevCenterResourceOperationLogs","DevCenterBillingEventLogs","DevCenterAgentHealthLogs","DevCenterConnectionLogs"],"queries":["44a38a05-1147-4795-bd5e-fa808308375f","51e6c592-e4f1-d373-e927-aab82f9c1044","25f8bafd-7cf8-4eb9-a10b-b8e23442f666","000c951d-5d77-4590-ab98-813149c42682","be18b9bb-7cde-4b04-961a-b08db7f51882"]}},{"id":"microsoft.devopsinfrastructure/pools","type":"Microsoft.DevOpsInfrastructure/pools","displayName":"Managed DevOps Pools","description":"Compliant compute to be used in Azure DevOps/Github pipelines.","related":{"tables":["AzureActivity","MDPResourceLog"]}},{"id":"microsoft.durabletask/schedulers","type":"Microsoft.DurableTask/schedulers","displayName":"Durable Task Schedulers","description":"Logs for Azure Durable Task Schedulers configured with Azure Monitor support. Logs pushed to this Log Analytics resource originate from Shoebox Logs.","related":{"tables":["AzureActivity","DurableTaskSchedulerLogs"],"queries":["dc826897-f00f-4d3d-8f4f-1c8a370a0e78","1e6825d2-847b-4027-a2d7-699d8875f6eb"]}},{"id":"microsoft.dynamics/fraudprotection/purchase","type":"Microsoft.Dynamics/FraudProtection/Purchase","displayName":"Microsoft.Dynamics.FraudProtection/purchase","description":"All tables related to Dynamics Fraud Protection service offerings such as purchase, purchase status, bank event, refund, chargeback."},{"id":"microsoft.experimentation/experimentworkspaces","type":"Microsoft.Experimentation/experimentWorkspaces","displayName":"Experiment Workspace","description":"All tables related to Experimentation service.","related":{"tables":["AzureActivity","AEWAuditLogs","AEWComputePipelinesLogs","AEWAssignmentBlobLogs","AEWExperimentAssignmentSummary","AEWExperimentScorecards","AEWExperimentScorecardMetricPairs"],"queries":["4a8a8d90-af11-1302-7556-02c1a6c4287f","307938f2-3ebe-e1dd-e6cd-60181b631133","c6b38466-c4e7-4b51-59c6-9dc6ab8b7d56","8abfa818-c87f-81c7-99ef-fa38d0c750b3","bcec51fd-9e72-40a8-b01b-6d3fd16e0fb6","967eb9bf-2d91-4a86-8115-18ee8b458d0e","7f870b0a-b457-4221-a739-20bf3ece31f3"]}},{"id":"microsoft.hdinsight/clusters","type":"Microsoft.HDInsight/Clusters","displayName":"HDInsight Clusters","description":"All tables related to HDInsight Service.","related":{"tables":["AzureActivity","HDInsightKafkaLogs","HDInsightKafkaMetrics","HDInsightHBaseLogs","HDInsightHBaseMetrics","HDInsightStormLogs","HDInsightStormMetrics","HDInsightStormTopologyMetrics","HDInsightGatewayAuditLogs","HDInsightAmbariSystemMetrics","HDInsightAmbariClusterAlerts","HDInsightSparkApplicationEvents","HDInsightSparkBlockManagerEvents","HDInsightSparkEnvironmentEvents","HDInsightJupyterNotebookEvents","HDInsightSparkExecutorEvents","HDInsightSparkExtraEvents","HDInsightSparkJobEvents","HDInsightSparkSQLExecutionEvents","HDInsightSparkStageEvents","HDInsightSparkStageTaskAccumulables","HDInsightSparkTaskEvents","HDInsightSparkLogs","HDInsightSecurityLogs","HDInsightRangerAuditLogs","HDInsightHiveAndLLAPLogs","HDInsightHiveAndLLAPMetrics","HDInsightHadoopAndYarnLogs","HDInsightHadoopAndYarnMetrics","HDInsightOozieLogs","HDInsightHiveQueryAppStats","HDInsightHiveTezAppStats"]}},{"id":"microsoft.healthdataaiservices/deidservices","type":"Microsoft.HealthDataAIServices/deidServices","displayName":"Azure Health Data Services de-identification service","description":"Logs generated through Azure Health Data Services de-identification service and pushed to Azure Monitoring.","related":{"tables":["AHDSDeidAuditLogs"]}},{"id":"microsoft.intune/operations","type":"microsoft.intune/operations","displayName":"Intune Specialist Reports.","description":"Intune Specialist Reports.","related":{"tables":["Windows365AuditLogs"]}},{"id":"microsoft.aadiam/tenants","type":"microsoft.aadiam/tenants","displayName":"Azure Active Directory Logs","description":"All tables related to Azure Active Directory logs.","related":{"tables":["AADB2CRequestLogs"],"queries":["0672f0f4-b973-486e-8f05-25f93f3799cb","d6cf92b1-3b52-4b8b-b5c6-c4c1a0d657ee","e16559ad-9ff2-418b-b194-8bccf6fb184c","cdeed2a7-e6b7-4e08-bd8e-a7d9d6ec08a8","6b26cc79-2a2f-4d29-9caa-bd14690e53ed","29ccaaf9-d25b-4aec-8b2b-3047a16516f9","e3e89b71-9c05-46e9-a981-6ec61edbd52d","000c3177-e775-4c3b-8425-c346af81389d","d02256eb-1eae-46e9-b63b-4e389f6ce0ae","ae89676f-3dbe-495a-a5e6-b9673afe98ca","58719d71-dd9e-4c0c-9405-2e3d5a47f10a","f3b8ad66-b178-49bf-b165-31c2896c406b","9e1062d5-b526-42d0-9d46-80ec8604da4d","62ae5228-928d-4ef8-a383-3d3793dec41c"]}},{"id":"microsoft.compute/virtualmachines/extensions","type":"Microsoft.Compute/VirtualMachines/Extensions","displayName":"Azure virtual machine extensions","description":"Understand monitoring agent status. Keep track of agents deployed in Azure or Azure Arc-connected environments."},{"id":"microsoft.compute/virtualmachines","type":"Microsoft.Compute/VirtualMachines","displayName":"Virtual machines","description":"Understand monitoring agents status. Keep track of agents deployed in Azure, other cloud environments, or on-premises","related":{"tables":["Heartbeat","W3CIISLog","AzureActivity","AzureMetrics","ADAssessmentRecommendation","ADReplicationResult","ComputerGroup","ContainerLog","DataSetOutput","DataSetRuns","DnsEvents","DnsInventory","SecurityBaselineSummary","SQLAssessmentRecommendation","ConfigurationChange","ConfigurationData","Event","Perf","PerfInsightsFindings","PerfInsightsImpactedResources","PerfInsightsRun","ProtectionStatus","SecurityBaseline","SecurityEvent","Syslog","Update","UpdateRunProgress","UpdateSummary","VMBoundPort","VMConnection","VMComputer","VMProcess","WindowsFirewall","WireData","InsightsMetrics","HealthStateChangeEvent","CommonSecurityLog"],"queries":["c8f597f3-9251-468a-86b3-d94ed8ea996d","bdbc27e8-3f5d-4981-9050-5ed7f63615a8","ba8b1839-7334-11ea-bed0-c8348e02520c","ba8e256b-7334-11ea-99d3-c8348e02520c","35883956-d397-42e6-a820-01eaceb11471","32b49610-7500-4578-a909-b937a976ebfe","d2f75376-07d4-4ef7-b3b4-36a97d5b6228","f4ee7d36-fcae-4d21-879b-e11f9a831590","6810d165-9ec6-4e87-84e4-800d74cf85ad","b6aa1541-5290-41c5-9bc3-48e26fd6f899","10eeb5b8-140d-4790-a509-e6f2d62c6abe","d78e5c0b-190f-42b3-9b90-43758415fab2","e7e0e961-d151-41fd-9062-260808ae1190","ccbfe85d-b880-4ec2-8760-c382d17db131","820798dc-cd18-4f1a-b7f0-1163f78e3935","8318f5a7-adba-41d0-8170-c5af5b31e494","f7a287bb-a9ab-44c1-942f-1ec5c03e388e","043360e8-9071-46fe-8ae2-1c27eeca2d7b","5cd45fcf-8566-11ea-821c-c8348e02520c","5cd6f7ed-8566-11ea-a2a1-c8348e02520c","5cd745fe-8566-11ea-9fa7-c8348e02520c","5cd79425-8566-11ea-ab11-c8348e02520c","5cd7e251-8566-11ea-b5f3-c8348e02520c","5cd85792-8566-11ea-b77a-c8348e02520c","51c067a6-a025-11ea-a1b8-c8348e02520c","51c43753-a025-11ea-b382-c8348e02520c","51c6ccf0-a025-11ea-93fd-c8348e02520c","51d5d5cb-a025-11ea-a80b-c8348e02520c","51d64afb-a025-11ea-a30b-c8348e02520c","51d84768-a025-11ea-a170-c8348e02520c","51d8e30c-a025-11ea-a73e-c8348e02520c","51da42ca-a025-11ea-8b9b-c8348e02520c","51db05ee-a025-11ea-93b5-c8348e02520c","51db7b14-a025-11ea-96a8-c8348e02520c","51dcdaa5-a025-11ea-8887-c8348e02520c","51dd28da-a025-11ea-9725-c8348e02520c","51dd9de7-a025-11ea-99e2-c8348e02520c"]}},{"id":"microsoft.logic/integrationaccounts","type":"Microsoft.Logic/integrationAccounts","displayName":"Integration Account.","description":"Diagnostics data for B2B messages in Azure Logic Apps. After you set up B2B communication between trading partners in your integration account, those partners can exchange messages by using protocols such as AS2, X12, and EDIFACT. To check that this communication works the way you expect, you can enable monitoring in your integration account. These minitoring logs appear here.","related":{"tables":["AzureActivity","LIATrackingEvents"]}},{"id":"microsoft.machinelearningservices/workspaces","type":"Microsoft.MachineLearningServices/workspaces","displayName":"Machine Learning","description":"All tables related to OnlineEndpoints.","related":{"tables":["AzureActivity","AmlOnlineEndpointConsoleLog","AmlOnlineEndpointTrafficLog","AmlOnlineEndpointEventLog","AzureMetrics","AmlComputeClusterEvent","AmlComputeClusterNodeEvent","AmlComputeJobEvent","AmlRunStatusChangedEvent","AmlComputeCpuGpuUtilization","AmlComputeInstanceEvent","AmlDataLabelEvent","AmlDataSetEvent","AmlDataStoreEvent","AmlDeploymentEvent","AmlEnvironmentEvent","AmlInferencingEvent","AmlModelsEvent","AmlPipelineEvent","AmlRunEvent"],"queries":["a5c31bf6-314c-4c77-9144-eacc566de521","a3e072ef-5aa5-484a-9641-11485b55cb42","ddc56a57-a0a1-442d-b738-a600bca740f8","3fe8395a-8be3-46ac-9e04-f134ad813588","bb1d1cd0-b41e-428a-956b-15090b9e836e","f8741bb2-5e77-4b74-b2e0-726b1853a495","8d0b6135-2074-4e4f-8ad1-dd4c589562f8","8ba385dd-d37a-4240-b8d6-a39d4fbea568","ca209759-fcc0-40b3-afc3-fc0194b022ac","3b3a2331-4f85-43fe-956e-916ffa4af31d","7c64371a-7305-4213-8b63-d60407569f86","93b4628f-0bc4-40dc-84f9-927ecee32ff4","1e7c9aa6-8c97-4d20-b5ba-fca641339521"]}},{"id":"microsoft.machinelearningservices/registries","type":"Microsoft.MachineLearningServices/registries","displayName":"Machine Learning","description":"All tables related to Registries.","related":{"tables":["AzureActivity","AmlRegistryReadEventsLog","AmlRegistryWriteEventsLog"],"queries":["efb1f6c6-6498-4eba-9f42-71ca1b4ae3ee"]}},{"id":"microsoft.confidentialledger/managedccfs","type":"Microsoft.ConfidentialLedger/ManagedCCFs","displayName":"Azure Managed CCF","description":"Managed CCF is a platform service that runs the Confidential Consortium Framework(CCF). Customers can host confidential applications on it.","related":{"tables":["CCFApplicationLogs"],"queries":["3d08f663-9b40-4dcb-824c-e073806d5257"]}},{"id":"microsoft.security/security","type":"Microsoft.Security/Security","displayName":"Microsoft Defender for Cloud","description":"All tables related to Microsoft Defender for Cloud.","related":{"tables":["SecurityAttackPathData"],"queries":["bdb7da24-8f5f-422d-927e-14b06c75a407","5a1c1fd7-a9c7-428a-a804-64d0b46d1c18","ca4f4032-55e0-48c9-aac1-aa14d6ff21d3","1e4f66c0-41e2-45ff-864f-39e9d7a4f492","1558bfb7-2aa3-49e1-8386-f4f8509e514c"]}},{"id":"microsoft.securityinsights/mde","type":"Microsoft.SecurityInsights/MDE","displayName":"Azure Sentinel MDE","description":"All Microsoft Defender for Endpoints (MDE) tables related to Azure Sentinel."},{"id":"microsoft.monitor/accounts","type":"Microsoft.Monitor/accounts","displayName":"Azure Monitor Workspace","description":"Schema for generating metrics insights for Azure Monitor Workspaces.","related":{"tables":["AMWMetricsUsageDetails"]}},{"id":"microsoft.media/mediaservices","type":"Microsoft.Media/mediaservices","displayName":"Media Services","description":"All tables related to Azure Media Services","related":{"tables":["AzureActivity","AzureMetrics","AMSKeyDeliveryRequests","AMSMediaAccountHealth","AMSLiveEventOperations","AMSStreamingEndpointRequests","AzureDiagnostics"],"queries":["8b5511d4-2df9-445f-ac8c-183615aeff4f","b098e967-079a-4467-898a-8568b6f96f6a","e5d93d90-7ff9-4c4d-b46f-5bc037afa284","7308fa13-7b01-48d3-b9b6-8ac464ba5b3f","fba0fd35-f822-4df0-bc10-2ca0d9041d63","ecdcd5a9-ac4e-4e24-9ce6-bcb9b2e0cfa6","1b582828-0234-4b71-9949-c9e08be3bc04","3a2a2aea-8ada-497f-8ff1-e3a01c2469da"]}},{"id":"microsoft.orbital/geocatalogs","type":"Microsoft.Orbital/geocatalogs","displayName":"Microsoft Planetary Computer Pro","description":"All tables related to Microsoft Planetary Computer Pro","related":{"tables":["OGOAuditLogs","MPCIngestionLogs"]}},{"id":"microsoft.azureplaywrightservice/accounts","type":"Microsoft.AzurePlaywrightService/accounts","displayName":"Microsoft Playwright Testing","description":"Microsoft Playwright Testing is a fully managed service that uses the cloud to enable you to run Playwright tests with much higher parallelization across different operating system-browser combinations simultaneously.","related":{"tables":["AzureActivity","AzureMetrics"],"queries":["26e8acf3-e27d-4d7b-9718-31bda68a0b1d","e198f4d4-6420-4506-a965-f752b002f744"]}},{"id":"microsoft.graph/tenants","type":"Microsoft.Graph/tenants","displayName":"Microsoft Graph Logs","description":"All tables related to Microsoft Graph logs.","related":{"tables":["AzureActivity","SigninLogs","AuditLogs"],"queries":["a697d547-302a-4092-a3ad-b3cb8e43c204","a697d547-302a-4092-a3ad-b3cb8e43c205"]}},{"id":"microsoft.networkanalytics/dataproducts","type":"Microsoft.NetworkAnalytics/DataProducts","displayName":"Azure Operator Insights - Data Product","description":"A high performance analytics solution, targeted at telecoms operators. Telemetry data is sent from customer systems to Azure, where it is processed and stored. The data is then made available for analysis and visualization via 2 ADXs.","related":{"tables":["AzureActivity","AzureMetrics","AOIDigestion","AOIDatabaseQuery","AOIStorage"],"queries":["839b634d-aa61-4eeb-9826-e42b57a650dc","4caba217-a14b-4690-934f-d57b9ccbd1da","9788de8c-73da-4b6f-b259-28f89c8f8964","1d326b1d-b84f-475a-9ce6-78dc33d33461","2f7096f6-093c-4c1d-bd85-b47737aa1aa7","0bd960eb-b761-4ff6-bf0e-73bc57590734","30005149-f6be-42fc-871c-65b45fbb7891"]}},{"id":"microsoft.network/networksecurityperimeters","type":"Microsoft.Network/NetworkSecurityPerimeters","displayName":"Network Security Perimeters","description":"Network Security Perimeters allow administrators to define logical network isolation boundaries and configure common external access controls for PaaS resources.","related":{"tables":["NSPAccessLogs"]}},{"id":"nginx.nginxplus/nginxdeployments","type":"NGINX.NGINXPLUS/nginxDeployments","displayName":"NGINXaaS","description":"NGINXaaS is an Azure-native solution co-developed by F5 and Microsoft.","related":{"tables":["NGXOperationLogs","NGXSecurityLogs","NginxUpstreamUpdateLogs"],"queries":["eff2d4f3-9a25-4a3e-9434-b1ce56ff7d8c","55b0b24b-dd8a-4f91-a797-2c0eae9ea440","4d51c78c-2124-4637-8fd1-0450556306bc","26551BF0-E908-4C30-8199-335F7CC86520"]}},{"id":"microsoft.onlineexperimentation/workspaces","type":"Microsoft.OnlineExperimentation/workspaces","displayName":"Online Experiment Workspace","description":"All tables related to Online Experimentation service.","related":{"tables":["AzureActivity","OEWAuditLogs","OEWExperimentAssignmentSummary","OEWExperimentScorecards","OEWExperimentScorecardMetricPairs"],"queries":["a7cb524f-2347-4ed2-a9ff-3ce04cb87913","3964f9a7-6371-445c-924f-9efdaef758ca","1e349818-951d-456b-b4b5-90dc93330b98"]}},{"id":"microsoft.openenergyplatform/energyservices","type":"Microsoft.OpenEnergyPlatform/energyServices","displayName":"Azure Data Manager for Energy","description":"Open Energy Platform diagnostic log.","related":{"tables":["OEPAirFlowTask","OEPElasticOperator","OEPElasticsearch","OEPAuditLogs","OEPDataplaneLogs"],"queries":["df341dc6-ff0a-4579-b23e-d84b22419c91","b3e13991-72f2-4b47-aaa1-37ea6c4bcae9","b6e48dd7-12b6-494a-b164-52df19d45a9d","29adebd2-37b1-44fc-a684-422431bf0ddd","3ac59a15-04e1-4474-9b8d-8046477d177e","91d7b5a5-93b8-4a8f-8875-b5c511bc9e41","7f9d3e8f-df6d-4156-93c7-0877c1000716","ea5e6919-17ea-4cc9-880c-0626d5a351f3","6e113596-c393-4745-b93f-c371d452d94f","394023dd-9607-44b9-8f6d-45740903d67a","c646d0fd-7eee-44d1-ae13-0791e3f7b766"]}},{"id":"microsoft.openlogisticsplatform/workspaces","type":"Microsoft.OpenLogisticsPlatform/Workspaces","displayName":"Microsoft.OpenLogisticsPlatform/Workspaces","description":"This manifest holds schemas related to Open Logistics Platform.","related":{"tables":["OLPSupplyChainEvents","OLPSupplyChainEntityOperations"],"queries":["a4d5c564-f185-450d-9024-ac003c123456","a4d5c564-f185-450d-9024-ac003c456789"]}},{"id":"oracle.database/cloudvmclusters","type":"Oracle.Database/cloudVmClusters","displayName":"Oracle Cloud","description":"Oracle Cloud logs.","related":{"tables":["OracleCloudDatabase"],"queries":["a4934395-ec10-438d-8dfa-b01b44f86c65"]}},{"id":"oracle.database/cloudexadatainfrastructures","type":"Oracle.Database/cloudExadataInfrastructures","displayName":"Oracle Exadata Infrastructure","description":"Oracle Exadata Infrastructure logs.","related":{"queries":["def050d2-9447-4229-8a62-b980bb38ca9a"]}},{"id":"microsoft.powerbi/tenants","type":"Microsoft.PowerBI/tenants","displayName":"Power BI Datasets","description":"Operational logs from Power BI datasets. Supports artifacts in a customer tenant.","related":{"tables":["PowerBIDatasetsTenant"]}},{"id":"microsoft.powerbi/tenants/workspaces","type":"Microsoft.PowerBI/tenants/workspaces","displayName":"Power BI Datasets","description":"Operational logs from Power BI datasets. Supports artifacts in a customer workspace.","related":{"tables":["PowerBIDatasetsWorkspace"]}},{"id":"microsoft.securityinsights/cef","type":"Microsoft.SecurityInsights/CEF","displayName":"Azure Sentinel CEF Table","description":"All data types related to the CommonSecurityLog table","related":{"tables":["CommonSecurityLog"],"queries":["1cf50156-0581-4890-8563-e04def3dbd26","86016240-9a8e-4aa3-8195-73609ef95294"]}},{"id":"microsoft.securityinsights/datacollection","type":"Microsoft.SecurityInsights/dataCollection","displayName":"Azure Sentinel data collection","description":"All tables related to data collection in Sentinel.","related":{"queries":["64ded722-608e-472b-a3dd-17f94b7cac07","6307514a-d00a-4ada-a0fb-087b72bee4f5"]}},{"id":"microsoft.securityinsights/anomalies","type":"Microsoft.SecurityInsights/Anomalies","displayName":"Azure Sentinel Anomaly Table","description":"Anomalies generated by Azure Sentinel Anomaly analytics rules.","related":{"queries":["d343d7e2-9407-485a-96e5-8fb5d0031ee2","650380ee-8027-4dc3-8763-c338222be64a"]}},{"id":"microsoft.securityinsights/amazon","type":"Microsoft.SecurityInsights/Amazon","displayName":"Azure Sentinel Amazon","description":"All tables related to Amazon.","related":{"queries":["8d9fc68f-84a8-4186-9675-952013133dc9","44640527-2945-467a-a5db-fcaf8b11f1b1","affffc71-5531-497d-ae2b-6d536ae12784"]}},{"id":"microsoft.securityinsights/amazoneks","type":"Microsoft.SecurityInsights/AmazonEKS","displayName":"Azure Sentinel Amazon EKS","description":"AWS EKS audit logs connector for Microsoft Sentinel."},{"id":"microsoft.securityinsights/crowdstrike","type":"Microsoft.SecurityInsights/CrowdStrike","displayName":"Azure Sentinel CrowdStrike","description":"All tables related to CrowdStrike.","related":{"queries":["f8a1b2c3-4d5e-6f7a-8b9c-0d1e2f3a4b5c","a9b8c7d6-5e4f-3a2b-1c0d-9e8f7a6b5c4d","b1c2d3e4-f5a6-7b8c-9d0e-1f2a3b4c5d6e","4e44198b-0072-4be0-a2aa-60b8804da78f"]}},{"id":"microsoft.securityinsights/gcp","type":"Microsoft.SecurityInsights/GCP","displayName":"Azure Sentinel GCP","description":"All tables related to GCP.","related":{"queries":["0b4777dd-730e-4b8b-8a13-2bb21f5626c1"]}},{"id":"microsoft.securityinsights/ilumio","type":"Microsoft.SecurityInsights/Ilumio","displayName":"Azure Sentinel Ilumio","description":"All Ilumio tables related to Azure Sentinel.","related":{"queries":["32e805e5-fe72-4141-aac4-f49c8ae6d03c"]}},{"id":"microsoft.securityinsights/llmactivity","type":"Microsoft.SecurityInsights/LLMActivity","displayName":"Log Analytics LLM Activity","description":"Audit logs for Microsoft Copilot and other AI workloads collected in Log Analytics.","related":{"queries":["a1b2c3d4-e5f6-7890-abcd-ef1234567890","b2c3d4e5-f6g7-8901-bcde-f12345678901","c3d4e5f6-g7h8-9012-cdef-123456789012","d4e5f6g7-h8i9-0123-defg-234567890123","e5f6g7h8-i9j0-1234-efgh-345678901234","f6g7h8i9-j0k1-2345-fghi-456789012345"]}},{"id":"microsoft.securityinsights/securityinsights/mcas","type":"Microsoft.SecurityInsights/securityInsights/MCAS","displayName":"Azure Sentinel MCAS","description":"All Microsoft Defender for Cloud App (MCAS) table related to Azure Sentinel.","related":{"queries":["f3e18c86-c0aa-4d1a-8f30-6e8c6cd3cad2"]}},{"id":"microsoft.securityinsights/mda","type":"Microsoft.SecurityInsights/MDA","displayName":"Azure Sentinel MDA","description":"All Microsoft Defender Alerts (MDA) tables related to Azure Sentinel.","related":{"queries":["ad9ab554-0b90-4eca-b39a-7871b96d23f4","be15042c-877f-4842-8e66-5bdb4355bcde"]}},{"id":"microsoft.securityinsights/mdi","type":"Microsoft.SecurityInsights/MDI","displayName":"Azure Sentinel MDI","description":"All Microsoft Defender for Endpoints (MDI) tables related to Azure Sentinel.","related":{"queries":["6c605c9c-6eca-4945-8a42-18833ad3cf42","68b79dce-2343-49e7-a1a1-1e9c61cc9888","09be64ab-51be-4f8c-8c03-17243fbfdfbc","67e621ec-0a84-412a-ac48-1cfd80f30a43"]}},{"id":"microsoft.securityinsights/mdo","type":"Microsoft.SecurityInsights/MDO","displayName":"Azure Sentinel MDO","description":"All Microsoft Defender for Endpoints (MDO) tables related to Azure Sentinel.","related":{"queries":["44fc0e47-dc0e-4d77-8fcb-0e7aa58b7e92","824be1eb-27b7-44e9-97b6-ceba952b5301","90f66bc3-2a34-4ea7-8849-2a0c1abb9a75","d826f137-f675-459e-a758-5acbc604ce90","d353de41-be6b-4bd0-9c88-62f8db108f09","4759e733-d0b0-4415-bd31-72b9765994d6","a2cdbdc7-3abb-426d-a77f-771d6bf5a4f9","fb42f174-b844-4416-8033-9f40cd9162a4","11769810-ba17-4663-bdc3-d6114617aadd"]}},{"id":"microsoft.securityinsights/microsoftpurview","type":"Microsoft.SecurityInsights/MicrosoftPurview","displayName":"Microsoft Purview","description":"Audit logs for Microsoft Purview solutions collected by Azure Sentinel.","related":{"queries":["4e7a449a-ae3f-4100-9598-197f4a43abc1"]}},{"id":"microsoft.securityinsights/office365","type":"Microsoft.SecurityInsights/Office365","displayName":"Azure Sentinel Office 365","description":"Audit logs for Office 365 collected by Azure Sentinel.","related":{"queries":["8df595d6-7c32-4257-8280-90182a32c23a","d5f248e0-45a6-45a7-9bd2-8ef963d39a05","d6a06676-95e8-4632-b949-44bc00f0793f"]}},{"id":"microsoft.securityinsights/okta","type":"Microsoft.SecurityInsights/Okta","displayName":"Azure Sentinel Okta","description":"All Okta tables related to Azure Sentinel.","related":{"queries":["054777d1-722e-4b86-512d-2bb21f562cc1"]}},{"id":"microsoft.securityinsights/powerplatform","type":"Microsoft.SecurityInsights/PowerPlatform","displayName":"Microsoft Sentinel Power Platform.","description":"Audit logs for Power Platform collected by Microsoft Sentinel.","related":{"queries":["d5eec317-3dee-4aa9-92ec-28af5f25242f","8c391e1d-f7d0-4a0b-bab1-a0fc8978e108","af2a6875-f636-497f-a721-10070b187d3a","65800d1d-80dd-4792-a147-5ce60fdd84bb","9fb56969-bd66-46b7-9c43-1aae797a302a","52f7ea87-5e0f-4366-90fa-d73f627b3bc6"]}},{"id":"microsoft.operationalinsights/workspaces/tables","type":"Microsoft.OperationalInsights/workspaces/tables","displayName":"Azure Sentinel Qualys Knowledge Base","description":"All Qualys Knowledge Base tables related to Azure Sentinel.","related":{"queries":["63b0b1fc-ec04-4485-900d-a656aa32111e","3b26c2e7-62eb-4cb1-b350-1afbdac2d7e0"]}},{"id":"microsoft.securityinsights/sap","type":"Microsoft.SecurityInsights/SAP","displayName":"Azure Sentinel SAP","description":"All SAP tables related to Azure Sentinel.","related":{"queries":["180e9e53-1653-4483-aab8-9f55725e8a63","e0b79a1a-edf7-4a0e-9ed4-8a0ae14d3a85"]}},{"id":"microsoft.securityinsights/securityinsights","type":"Microsoft.SecurityInsights/securityInsights","displayName":"Azure Sentinel","description":"All tables related to Azure Sentinel.","related":{"tables":["SecurityAlert","WindowsEvent","SecurityEvent","DnsAuditEvents","AggregatedSecurityAlert","SentinelBehaviorInfo","SentinelBehaviorEntities"],"functions":["a152e090-0c01-4ecf-825b-f95512bbaccf","30e646df-c60a-4fc0-ad20-b42c2f3be07d","edb65ae4-a2b8-5321-9f93-57a81f552023","38425253-f081-5574-8d01-1ef25366d20c","6004200a-ea4c-5963-8ea7-7411196da9b8","36a1bf66-3208-5df0-9964-04ec9bb2ea98","3d93296d-00b9-5e04-8126-edd84e9ff112","8db4427b-54d0-5f94-87f9-5e7a8d2b8370","89909bc5-63b2-590b-b3b3-e8f5bea2fcfd","1fb5bab9-8bf8-5745-bb46-1858f0bdca77","af841918-ea4a-515c-bb21-0a7a5bc741fc","a3969e5c-574a-526d-937a-f347c8c77929","cf296479-dace-5fb4-906c-a270dcee23d8","9acfdefa-84a4-531b-a67c-296df42d9e4f","a22d978f-3944-5ad8-9452-757225af75b0","5fe2edb1-cf39-5039-bf18-5abc1bae5f4c","e316c508-8b3f-5198-88b0-8fd97672a930","c6259971-9108-5987-9e17-56cf8fc1ae52","d2f30bd8-b742-50ac-b597-8e87631d5ab5","7deeb113-dcc0-59d7-87cb-c24333c61527","73f523ef-c4c8-5d6d-8344-e4426d763242","020f486b-2b61-5a05-ac2e-fea3e90e4611","3609ce33-4573-50d6-b32b-501da4bbd9b8","93c664d8-6aca-5fba-84dc-93e372845c58"],"queries":["dcd68ba6-0656-43f8-8c16-21ed36226048","bffd4ec5-3957-408c-9831-3f49a4614e93","2ceeb9da-0e43-44b8-b0c7-9debf01d0d89","aecb76d9-4063-422b-8837-9f4dba347a56"]}},{"id":"microsoft.securityinsights/threatintelligence","type":"Microsoft.SecurityInsights/ThreatIntelligence","displayName":"Microsoft Sentinel Threat Intelligence.","description":"All tables related to Microsoft Sentinel Threat Intelligence.","related":{"tables":["ThreatIntelObjects","ThreatIntelIndicators","ThreatIntelExportOperation"]}},{"id":"microsoft.securityinsights/tvm","type":"Microsoft.SecurityInsights/TVM","displayName":"Azure Sentinel TVM","description":"All Threat & Vulnerability Management (TVM) tables related to Azure Sentinel.","related":{"functions":["967d69e8-0b42-460b-935a-9ca4b41a6996","7eabe0ef-f8fb-46c4-86cb-9b0fd77057bc"],"queries":["09786294-08ad-48b1-b467-55ff30e7ca28","7014f07d-00e7-48ae-85df-df5913ee6174","a894f0af-bb74-4525-bf5a-7e0faaf345d4"]}},{"id":"microsoft.securityinsights/watchlists","type":"Microsoft.SecurityInsights/Watchlists","displayName":"Azure Sentinel Watchlist","description":"All tables related to Azure Sentinel Watchlists.","related":{"queries":["94477231-37df-47e8-88a1-862e04d16a75","d2812a18-ed70-4a01-b124-0f1bf86e86ac","957d87b7-6acf-4cae-85b0-c45c65e69d0d","cc80f907-6e9d-4ec0-99f6-e6dbc2ecd528"]}},{"id":"microsoft.securityinsights/alerteventnormalized","type":"Microsoft.SecurityInsights/AlertEventNormalized","displayName":"Microsoft Sentinel Alert Event ASim schema","description":"The Microsoft Sentinel alert events normalized table stores events using the Alert Event ASIM normalized schema associated with security events, ensuring consistent and efficient analysis across different data sources.","related":{"tables":["ASimAlertEventLogs"],"queries":["9fe432a8-1b0a-4cb5-8878-0825e01c66fa"]}},{"id":"microsoft.securityinsights/asimtables","type":"Microsoft.SecurityInsights/ASimTables","displayName":"Microsoft Sentinel ASim","description":"All tables related to ASim - see https://learn.microsoft.com/en-us/azure/sentinel/normalization-about-schemas","related":{"tables":["ASimDhcpEventLogs","ASimFileEventLogs","ASimUserManagementActivityLogs","ASimRegistryEventLogs"],"functions":["0b52622c-efc0-598a-9f5b-bbb3eaa1a1b2","2ba8a52f-8c63-506e-b52d-2fb281e363be","006342ba-acb0-54f9-abac-9e8d77e5cca1","3912cecf-a0fd-554f-a102-a4490a0c379b","dc6b50a3-d19d-519f-9ddf-71ee933244bc","6891f070-90fe-572f-81cd-82858392278a","d8d50a40-7f2f-546a-b7e0-5e1b645e4326","ed507fbd-5ed6-5691-a314-83a588b86c30","772cfc0a-fa4a-57e9-81fa-2aea1c62c16e","c3eac87f-f4e3-5e2c-b77d-fe9811c31c72","6698263a-5e7c-5d52-8b59-2b2100e45954","16c6a3b1-24d5-509c-a568-3dda0deda604","5ed013bc-6070-5d6a-ace5-30b451f75b8b","6bb41b84-2964-571b-a653-0f5039c50af8","5121531d-7e18-56eb-ab30-77af4fefd829","f0586352-639f-538d-a91e-ce9701d3c92a","f2b38451-801c-5a14-93b4-659c6f07b516","a18af53e-f058-5b49-bcd6-73f2ec59da4f","bc2c82fe-fafd-5ffc-8665-bd7b1bb6ab0b","f2098813-1799-53cc-a8ad-8047b4f2d80e","8691e151-39ce-582a-b524-7f54b65eea26","ab79e25b-194f-593a-86c1-b0f0398e0749","21ac799a-7fab-51e2-b708-5a3a0966c572","77ed9d57-1e22-5298-bb95-f857e2c06b2f","ae8924bb-3358-5474-856c-32915255733e","f48e9583-3107-5b75-bcb4-8fa6b344cc72","68815256-8748-5527-987c-0eaf06283fa5","93448a67-dbab-5c6e-b14d-89ab7db2b316","4765afde-a6fc-5a38-863f-72ec306ed465","2e8e7c1a-5104-5885-b659-d26e17f9af4c","cce83520-0fd8-5bff-88a1-14a21dbd431c","d3e75b28-3354-5d5b-813a-1f82deb43217","002f8919-da28-5edc-9480-9c679de0e646","d29fe90a-0a0e-5143-bf67-76c8cd791bf1","84ad59fb-630a-529f-87f3-87c45ad38820","1aff9978-3622-55f6-8892-2fd7877667d4","35332196-f904-5e15-8d2e-d5a05150593e","61b00b6e-dda8-5932-a906-948f9bb7365e","a43850a6-f2f3-53cc-babe-cfb0767e7f70","4307fca3-d9f8-5aa4-b086-c4aa15308cdb","224cf01f-0221-5923-abf8-1cc94412bff9","421a3eaf-8242-501c-a0e1-71f1d4352bae","3c6c520c-7ab5-54fb-8591-5dc17f3390bb","8b81bec8-5153-5410-99d9-c3540fb3da49","d6059a71-ae14-5e4e-8cfb-1ff54c3eb450","00e37d77-ff2d-5c92-bbba-0ba865661020","77446755-f919-5a23-9f96-6be9e657a2e7","ac5ae0be-532a-5fb9-b7dd-11fde8f2d53f","aaa811e7-673b-50a0-ba97-27ddee2d40b5","cb4d38a6-00ef-579b-ac76-e2f55bec7579","1b96e561-b300-5a7e-933d-9fa98b4518ef","fbf9e04d-8ad2-5e0d-9ad7-fb655bc29bf3","3589c230-1df7-54c2-b179-7780bafa7229","12d89e36-3e8e-5e54-8fd5-ba969eb266e6","a2395934-e85c-5da1-a1f0-07a298219d34","5d59511a-8bd8-59ba-b49a-c7fc5e7011c3","39152ac1-2a72-530c-86be-1711210a28b2","4fbbf424-f21e-51a2-ae26-a33b354125b8","76af9035-4665-5009-8281-60ae1485a98c","9cbf2c15-f05c-5385-8f28-6ae28a427608","be182916-38f9-564c-b476-fe81169d7e84","e37de94c-ac58-56c0-8ec7-0b673722bb1b","3f46b554-47ea-5f12-9cb5-324c2cb09ac9","1534d8aa-acc0-5be4-b089-6d503ce07e41"]}},{"id":"microsoft.securityinsights/auditeventnormalized","type":"Microsoft.SecurityInsights/AuditEventNormalized","displayName":"Microsoft Sentinel Audit Event ASim schema","description":"The Microsoft Sentinel audit events normalized table stores events using the Audit Event ASIM normalized schema associated with the audit trail of information systems.","related":{"tables":["ASimAuditEventLogs"],"functions":["2e568486-7d77-5798-9dc5-433bb6562e68","56612ec1-3218-5ec1-b32c-33c80359f1a0","74fd6481-7b1b-59cf-9851-e52156150f78","7d890293-0dcb-5584-bf7b-d615f9cb7f70","02b4eeed-157c-5172-b75c-151fcfd068ac","cb8ce4aa-25e2-5141-a5b4-337c24285e3d","723f7b25-c699-5469-9ac6-1b5704a2b63a","e61fa185-7fbc-5367-a10c-45e05f1c7eee","721cf9fc-2ce7-51fc-bf6b-da02a715fedc","f1022015-c977-5720-9d94-b64c4a5d5636","d6bacb8f-166f-5712-9bbb-cffd517caf31","719d3b89-0644-5cc5-ba2e-53eac0ee8207","e0efc4c1-efd6-5481-a2b1-0e3fd1cb6684","2ce6a16e-0477-5513-9727-033e4a21887a","e40a1659-cd0a-5d18-bd5c-c02e366ae3ff","dd2fa0d1-84ff-519c-87d9-2dc811b31b69","a9b3ece6-cc53-58e8-8516-1e91acd1879e","0fbae1e3-fc59-5107-829b-378d2e27f899","727bba25-3447-547a-b5c5-dcb64d01a803","c66a7dfe-5675-523b-9456-e91ef524749a","cca20c2b-be0c-5a07-88d3-7fb44877fe15","781b072f-53cc-5e7e-8118-d227d0298aac","dfa1aaf1-da4e-56a1-87c6-f18149b9ae4a","6ed977f4-618e-5e00-bcad-8d4793548b0d","71bc574f-91da-5cc1-833f-512b05ad4b20","216c9995-fad4-5d6b-9ec2-0d5887731a81","38ee78f3-fc07-5cdd-b0b6-cfd041f902c0","d1f104fb-fa94-5f31-a28f-62f72bc72797","7a9bcf3d-f393-5317-be98-05bce368ca2c","82914f3f-2b23-54fb-a3c8-9c2d318e8244"]}},{"id":"microsoft.securityinsights/authenticationevent","type":"Microsoft.SecurityInsights/AuthenticationEvent","displayName":"Microsoft Sentinel Authentication Event ASIM schema","description":"The Microsoft Sentinel authentication events normalized table stores events using the Authentication Event ASIM normalized schema associated, for example, with the user authentication, sign-in, and sign-out.","related":{"tables":["ASimAuthenticationEventLogs"],"functions":["26a0f406-f0ce-5fb0-92c0-2926b7756f65","b48a2e8f-2564-5b1e-8244-1691b0e87633","ac388398-fdf9-5f7a-ac58-55c75ac0e1b5","df14d375-8404-51b6-9f09-e3212e11a2a6","38d46b58-a32a-5b23-9ba6-05f04c0b52ac","a97d800b-106f-5bf0-97b0-994addb824a9","df313bea-5248-5e8c-a6d7-e6bddb5f8717","5ba5660e-2a1e-52ae-adc9-1d6b08d2bb7d","1fcfe820-c75e-5952-bc58-8f3e80f842c2","3aefb468-db13-5f6b-bbdb-3ffde1bd1317","bab57609-83c6-5faf-97a6-905beae9323b","56288712-29ec-5df6-9a3f-81efe80ea649","7eb6a2df-9e8f-53bc-aacd-234841774da4","4d58d107-a6ab-5bc5-90dd-2b0087cf4f50","776c6a6c-6923-59a4-9618-2abd13114785","6b75cb62-2433-589d-b618-44eda2b07f9b","ba94da36-305b-5ad0-8bd0-1edfda438da9","91783af5-c270-5b96-b955-910c3ee5b681","068cd71c-44ec-5d95-9288-6d7b7b94a4cf","127348e8-cc78-556e-b503-a764a1f5e862","a0a3d98c-e4c7-596a-a832-ca57ac301fd2","601063a8-2ad6-51b2-8269-a9bf88793338","9b17aa5d-f557-5cce-b0d3-ca069f133bcc","89348ee3-6aeb-5a04-ad1d-d48b1a7ba686","e75d711c-4e13-5c99-b771-065c8a65a21e","440cc65c-1f24-58d7-a03c-5a7b32559cfa","faa9385d-b3b4-5150-8caa-686d73034598","045e9ce2-e479-57cd-a473-f49ee8bf1bb9","c388dfc7-dc9f-5b2c-acc6-be7dc5b05fe2","2aa4e228-ebd8-5e57-b13a-cc8a8777fee9","7765aa9d-5d8c-5760-ab75-7827c9d8378d","4253b281-edf2-54a7-8b4c-ed6d82562842","090947e4-eb27-50d5-b0aa-295684c0f504","6d31c590-f1cf-5977-ad0e-98760e4adaf2","58a9982a-10a7-5375-aa43-cf2c92919cd1","6d1a0114-0988-51c4-968e-ae724bbc0741","a883fc10-c239-51ff-92e8-d2ee3ebb7a56","472a0def-2c79-538e-b25c-6151f6e8ec56","810886bf-781f-53eb-af42-85fec417b5db","987bc689-20d4-5536-ab25-20c43137212a","28711922-7194-5661-9b56-0084740d77a3","49e89c0a-0759-5596-92af-91ec2817b0a8","474823eb-1dcf-5681-9ac4-e78d35e2d0ae","1b3a8c0f-cdf7-5b95-a7e6-0f7c1aae0c85","3c6c7bcb-d601-5f76-9c0b-9287b3b24925","4b77cf85-b9c1-55e4-a544-45af35831796","8f408c7b-683f-5f90-94fa-1e74e99de73d","ade252fa-dc3a-5c25-94b8-26ba24b4dfdb","b5880c46-266d-5876-93ff-30ab99682d8e","1be457d9-37da-557e-b848-c876083c4195","f1fc2811-bd43-5dab-98a8-cb28d397eaa9","87ddc195-2d14-51b3-8d0d-92d249accb62","88822288-e98c-56f2-921b-6304ef0b1aa3","7950b63d-a675-5cfe-b3ab-c373006726cb","7d89135b-ec75-5276-b490-1670d85993c9","3d021f21-b9b5-5da5-95de-d121c54a3652","23ede1f9-100a-53de-a0e0-2f9898af2954","a0a3d428-f331-5baa-a242-0055471f44be","169a3ea2-bd40-56a1-89db-9ddfe487faaa","3ca213f1-7c16-5b8c-bdb2-c8d24097d73b","686d1b26-62f3-5e14-9f94-c36d07c303b5","ee68e59b-fb60-5079-9533-ecd5b5389520","9e9fc152-813f-5ae6-86c6-a8ddc51f5641","c861b54b-80b4-50b1-94c8-60249c6365d5","491394d2-fda2-5a10-8488-48ecd3cc4ada","52b80ba7-df6b-5a81-8c78-37b2df8656e4","2b85b99d-5d3d-5c81-a79f-dd379ee52c24","7126b721-8c8f-5cc9-a4ae-1ffd4ff65c0d","01d425b3-4ea5-58b6-ad05-dd382aa75727","51a34575-887b-514c-9d0a-84db2c759525","332fd5d3-95b2-574b-94a7-5b056115defb","004e41c2-2cf4-57eb-9131-855fea21e0cb","296533c8-1431-52d4-b4d3-440bd01bd983","51222627-761c-5c9c-82d6-f673193610e2","7e67c8a0-0ef5-533e-8559-9e359be23a78","b7527ae5-d322-50e4-9abc-c2ada6b97733","763a8f5c-6449-5e00-9ef2-e3f9443ea07c","0758d388-f402-5004-8e98-4b8d58d4e68e","a3b2c0db-8614-5720-aa27-b0d88120ed03","c33f5553-01b5-5f89-92cd-61bdadcbaea3"]}},{"id":"microsoft.securityinsights/dnsnormalized","type":"Microsoft.SecurityInsights/DnsNormalized","displayName":"Microsoft Sentinel DNS activity ASim schema","description":"All data types related to the ASimDnsActivityLogs table, for example windows DNS events.","related":{"tables":["ASimDnsActivityLogs"],"functions":["cba623d4-dcc5-523b-97f1-902c04bc14bd","d01fc365-24f6-587e-8c30-2e450ab7ca81","c39af2d5-ce82-5bad-ab3d-fee798dde336","9e586f9b-925b-5830-a979-d510cab99dd3","bd97655a-1311-54f6-b344-3f997c69ef73","ee29d8bf-9567-5c21-b060-d2a95de59682","6766687b-e8f2-5e29-b8e4-09001a6a2106","a1712e60-355e-5946-a25a-bbc9c187ec6b","bbe046de-19c5-5557-ab27-4df676195bdb","1d6a9420-068e-53fb-b07d-84a46dcba3e9","37684ffa-7f8f-5053-b9e8-589618aabde4","3f54a213-5941-52f2-81da-ec2ddd8037d8","06afff4c-4b38-54c4-a744-56e63428e412","764d1d4f-0832-57bc-b6fb-67ca754c1866","355c44cb-79ef-53dd-8cf2-d942d8021c69","7ba58875-d3d2-5a57-8b33-7a1653f5ad48","233ba9c2-c98b-5dd7-b8ea-cfae04cad57d","78cce07f-cd1a-513b-8332-d1d1ee4bbd19","8d7388e5-da2f-5315-9226-05e2f75c299e","0d7559dd-7bbd-55b8-9ca4-fe389c945329","3177d4de-9896-56e5-b318-1723498e94db","20c9220c-935f-5596-8378-81c7ca594434","b7822d73-2b22-54a2-8356-8704b1699648","547ab839-511a-594c-8541-6188a6a56c4a","3cb1e1a4-566e-5476-8d7b-a582b523a32a","460afa13-3ef0-5c8f-a3d6-64a593beb628","46c5e6ec-3431-5f99-b361-0ae03353ac6a","ab6ef070-1f88-59c1-a0a3-511fb1140500","c563481d-d8ba-58ca-bd83-e5033f370715","f3daf1da-2284-57e7-90a2-122d1ca8a1fc","1d4ab680-de7f-5a17-b787-6cd634995e4a","0f3b2de2-15fa-5ea2-a7e7-3f5adc3691cc","3da27875-fa0c-5f10-8ddf-abc6f8b7c8a6","7ad17758-6e1b-5ca9-911e-6b64cdd3d1fe","0b2a8509-ddf3-56e7-9e4a-bc6ea62275f0","7a82d264-ada7-56a4-87b9-bd8e395a9f38","87d6f873-5ad7-51af-bbde-6ff91f2762cb","74e8ea21-f1d7-5647-884c-9be0570cef82","36030c6d-4196-5c11-bd02-44e8770888f9","b23b0698-ede3-539a-949d-5cb282c6a7ca","c1cc7004-9b76-573c-8a24-fc451c5b9f96","697d7a3f-2e46-5c87-befb-33779577dbd6","eeb3cb96-5e24-57cb-9a13-44ffcf9393be","ef5b91c9-43f4-582c-a8f6-12ef90f6802f","3e08df47-9631-5b5a-98df-180d315eda4d","5f982731-7285-5515-9f4b-765a1496f7d5","3cd64d79-6e5a-57e4-b0bf-74d4b19b98cc","02153d00-0817-56d3-b321-9cfe843a92c3","5f0e9e37-72b5-533e-8e35-1ed932fe3084","bfdd6394-ae64-5290-82c1-55a36afed3dd","2d9a69e2-3201-542c-bea8-051759a39af8","8e48ee40-bfa8-5488-8d7d-85ca2cf47b7b","704ec65f-8a60-56b9-a055-f9895167993c","49f387d7-a884-541a-8b40-9ab4f7888d92","8b9637e8-b0b0-5a6a-bf53-9334621b50ca","4a183e31-7207-5300-ac05-db11c690822b","2a486c0d-35ec-5bd7-a12c-99f70a5002a7","c1596326-3460-5ad0-a612-59e167280101","deefabef-75d6-5587-8d3b-4022938682a5","fc7155c4-0d2d-575b-b014-efe5ec8f1461","bcaeb6c1-14b2-502e-9d32-2d988dc732f6","554a060b-7206-5e58-b2d5-14ab58dca532","70fea7f8-d50d-5dc9-bfc1-58e92bede9f6","b052f410-754b-5cbb-a24d-c88c78bbafad","47f91632-cd30-5d96-aa10-01e864bb9148","c476dc64-cefe-5543-98a4-8530a0a48964"],"queries":["083f9ca4-df5c-43d1-951c-0dc34ea73db1","30963fe3-2352-42de-94af-43ef3f63b1e3"]}},{"id":"microsoft.securityinsights/networksessionnormalized","type":"Microsoft.SecurityInsights/NetworkSessionNormalized","displayName":"Microsoft Sentinel Network Session ASim schema","description":"The Microsoft Sentinel network session normalization schema represents an IP network activity.","related":{"tables":["ASimNetworkSessionLogs"],"functions":["816f3388-03fa-5540-aa97-63c5b7c7c32c","ed0b0f98-3578-5a1b-8434-69543bb411cd","4ed288c0-dcba-552a-91dc-b4c5f2e3d05a","1670afab-1460-5c11-bbfc-eec173edb62c","242ae4aa-16e9-5a96-b75b-ea51ae629f1e","282d4349-0db6-5ac5-a769-fcede4a77bb9","1196120e-827c-57b8-9366-14ed9c34d7e8","37cf01dd-9020-5af1-927b-e0e405390f02","d9791bb4-97fb-5b4d-8660-5a6ff2a3df1e","58d7054c-f8bc-5279-9d1d-97b3bc2595cc","b4289b5a-1661-5712-923d-82e20333e87e","26e44d1f-f6ab-546d-8001-0a0f26267fcf","0802950d-28b9-56de-a05a-6a887a6611ab","cd0aa1b1-d08c-59af-a032-9b463c90101a","8e17ba20-e2da-58f6-bf1d-b7eb5273b3c5","51010255-1487-5347-a517-a56e8a3061f8","922e05ef-0941-587f-a2e3-34a062e53888","2722ab8e-1141-5636-97cd-4c416669a402","ab36ec57-c9a0-5291-8aec-d848bc3757e3","123c03bc-6d03-53ca-8027-8a1172717fbe","fb1c0a95-92fa-56ec-9e88-e79dba5ba6b6","4ae5bd55-29f1-597f-9158-8ffd95a2fbd5","41e93b7d-a101-55b1-a38a-a6f53db3d5a5","3cf99445-20d2-5de8-9c1c-0e83745991f0","c6f2ffa9-e5dc-52de-bb89-5ae52f529882","6bc54658-a37a-515e-844f-3263d82a6e1b","d2f1abd3-3815-5e54-9da5-7478b0c956b8","aabe34e4-524c-5c64-b514-05e82d6d7158","04fc8565-21c5-5d76-a24e-3bbe5d05ed6b","8856ddd1-8bdd-538f-b007-13b6bc37da38","ed4cbf37-ca1f-5b41-bd3c-8a9aa0f424c4","5f7e57b5-9301-5a4a-9df4-aa09373300c9","3278e078-9adb-58a5-8dab-0136b69e0754","3d74887b-4a91-55a3-b8a7-8eb437fcf2ed","b6f80673-9685-5486-939e-0d8427f0ab42","18cec1b9-295c-57ba-85b4-bdbe2b014f7e","b7f8ff2a-274f-50b1-be1a-38bff328a942","6d9ba913-7800-5bc6-8c12-5c8003d402d3","f72bedb2-6af8-5f65-a153-1a5880771538","5721e7ee-ece3-50a0-b342-e17b5b389a45","c4c2c7f0-6344-529c-8e94-e4455d60e104","d79c96eb-ddd8-5e1d-8d90-5197f02ffcd3","2d51a07c-c2c7-5425-8f5e-162d0f1f9005","3b99a232-e260-562e-a503-13993a879f59","43261809-eb88-597e-8efa-26bff1194394","3c29786d-858d-596b-9cf9-4256677c69b1","d8b3754f-61e3-57d3-8acf-0e19df9f5477","e55278df-daa7-5d5c-934c-19afc6d3f13e","3884854a-6d4e-52f2-9725-03044e787b76","6de16aaf-29eb-5a55-b863-8935487a9bec","a559199e-b624-52f2-b029-73a9535421da","ec935ea2-52a9-59c4-90f1-d9402a477805","77083011-7edc-5791-8618-f1f9158ea41b","00efb338-e9e3-514d-a25f-4c37f14f4898","1c61f70e-ed3a-57bc-8461-05248f2034dd","956cb456-b35e-55da-b341-ce1e36f7bd03","67a14dba-d3c4-53fa-be3b-3cbf03e1d79d","cf4579e4-8c1d-575b-8deb-3d0d5ee6406a","7e6f7906-9973-5dbb-8483-8dfd15a8c157","1631c13d-6a8b-597b-8440-499670ea27a9","4748f1b3-6d39-5d11-a600-bf03380b3238","c8497248-ea1a-5d15-a5fe-92b4bcec0b24","5045a3bb-5eb2-5bd1-82d1-d441e2483389","8e1ce13e-2ccf-5987-98a5-a8bcd674a6e4","7879fedd-58f2-5d1f-bfbe-30175f1214bb","8042fcb0-0832-5410-b5f0-07f88ffe1542","5d4e8758-105c-57a1-b7f0-94917a97b44d","14780bc9-6124-576d-bb4e-beba8925b1ba","d8a5216c-6199-50ba-baca-36790a8c67ec","c965ce5a-9e94-53e4-9c87-fadf4fcb7d34","f9197aaa-d494-5ec6-a8d8-f73e7bcf4813","0af07881-11c6-5021-b383-84ffcfec7464","1aaa6ee7-e89b-593e-a415-7cd39411b8e9","75c736eb-4f5a-5812-b660-2ba38634317a","c6800e07-60e2-5d99-ab45-b7560783d9f7","80e7c5a5-e464-5d40-a919-7d6016fd5139","d231873c-84b4-5f5a-bce5-beb249ecc66a","3131be79-e850-5c85-8506-d81f4b94e2ce","790aa4c4-22c5-5e22-9c90-2cde73b11753","d7cc9882-2480-56d0-a51d-7de5e4b9191e","a152e47c-bec2-5b9a-81ba-1f8acb6b9fb2","37e82ca7-5e24-53bf-9347-232e6693f457","b9adf131-c494-5194-adfb-b3b8e8cd1fe2","417479ee-8547-5670-90d5-c9f0ae9f69de","8b201351-4549-5c55-b121-a96bf9118650","a8bdb9c2-f4fc-5529-a6aa-8b0bb0a7ee6d","85642a47-664d-5495-883e-7ae653ff0846","0aa9c175-dcbc-5b95-8b66-56e58ae6826a","7a73b552-bd0b-5211-9ec7-e44dfabb98d9","f1a00484-9cb0-5d8f-afdc-030f12d9ec38","5c3903bc-49c4-5758-8fe6-d73654b884e6","aa4d9df2-a67e-5d97-9fa4-3ed4e6737955","0edddb52-93bd-5f90-afac-edb3146c008b","837ae332-8b20-5dbd-b04b-9e9860b38bfc","6cddbedf-d394-5fa7-898b-d963693c6721","0d7864b9-9bac-553c-a79c-0d649e897d32","addc9f66-7971-566d-b08d-996089aeb5de","a95e86b0-2f20-52f1-b671-09d21c66437d","f54b0991-1e8d-5250-90fe-3e6595674a8a","68d40ff0-9463-53e3-ad76-37a0622a2898","fbcb34a1-deef-534b-a2dd-4ae8238cea6e","591de502-56a5-54d6-89ab-4833dd64ed20","0b1fbfb4-302a-5732-ba05-92f2d94f1eed","e23a78f6-7d17-54f5-960e-323f884c66a8","d81086d3-e6da-5654-bde5-dae00abcebeb","7ce918b7-a9ed-5c4f-b0c7-70fadc2c1f9f","09585ee7-9d88-5777-bc4a-cbae33245b13","0c2c2e0f-dc1f-52fa-b9da-36b52a23d3a9","af797219-5c17-5da4-b443-3caf50fc8801","b6d17033-720a-5de2-9a90-519f75b8416a","541bc2b4-1f59-5bd1-bd1e-bf4a12b9eabf","cefbbe26-cc18-5c86-9bfc-6dcab2180042","3e9030df-c50b-593f-a88f-f0ccc84e827c","d3be83df-5cb8-50de-9621-8e57ad13d0b4","bbe13f75-3038-553f-b8bf-7c479bc22d04","8028ab03-8201-5a4f-9972-89356634aa79","c2d9e50d-0cdd-593e-9a14-f2d2f1cca848","0b513511-eef1-5848-9f69-6ea73071105c","9e8643f9-f7c9-5801-9776-8b89e2050180","dfffb01d-51c4-5d60-a565-df866a05e870","d8eb6aa6-9268-55da-9d9f-5ca487a9bcd1","6db4636c-e1f0-5889-88f2-48a76cbf4f7d","d8a4137f-d6fe-5db6-a6ce-56f50cc2e0f8","c16e7c03-d7a2-5511-8cab-f53e1cce0633","295989f1-465a-51be-95f8-0d70971fcfef","6f171db5-d77b-574f-8a92-2ef49c27dc84","a193f5ee-962e-5185-9711-1f3966c17550","5637b37c-34be-55c7-8b71-c0d9bd2c8a2b","bc2b4e1e-10f0-59bc-b81f-17446082c5f0","3ce73260-a1e1-582d-a8fa-7e4c1fbb75af","af77b66f-bbc9-56c2-aad0-4ea27366d870","a09dd048-0e87-5220-8a5c-70c7dcb90691","950f5409-8df0-52b6-a016-6645aefcd374","9a3e11a6-6b46-55cb-a5b9-5acfa32b112b","a8a1c15f-a18b-5f78-859b-cba700840d48"]}},{"id":"microsoft.securityinsights/processeventnormalized","type":"Microsoft.SecurityInsights/ProcessEventNormalized","displayName":"Microsoft Sentinel Process Event ASim schema","description":"The Microsoft Sentinel process events normalized table stores events using the Process Event ASIM normalized schema associated with creation or termination of a process.","related":{"tables":["ASimProcessEventLogs"],"functions":["bab3d2d1-014b-5126-86fd-c056a66f1135","3e198abb-e072-54c4-9e43-cb58532c6c2a","61274267-54b5-58aa-806f-04de1fef09d9","1f4691cc-50e5-5a48-b6cc-386060a34432","c56934e7-4163-5759-a386-bb5e45191eb0","254ced33-035d-5472-8a2e-7d4824d4fcab","19c7a3a2-0074-56fd-8c77-01417d1b69a5","7e5a666f-961c-55cb-9e4a-fdf89c099447","26baf752-5748-51f5-8eb7-83d85adf2cb8","e05b7046-f392-500f-9804-bea9748c51c1","7a91f3e8-0c29-57e1-b380-da2a801882e6","b34c18bf-43d0-5e28-83ed-deee72ee74ff","5c84f668-05ab-5d6e-b390-c97ba4d10d34","d0c84fb1-70c4-5f05-b9ea-ea264d3f91b8","a981fd67-71ab-5e13-b87e-3632666d745f","18e56d86-053e-549f-9c0d-c3970f46d478","7c617f08-970c-5884-9ea5-e07dd5c3dfe8","9bb77b98-9da2-55c3-895c-c27feaccf670","92130422-ba25-5b51-b0b0-5b9b790e6ebb","c5f1b49b-1dfe-5d35-8ed5-09a816424ddf","2f31c831-b45d-50f9-b4ef-fe4f5f39c044","04d7a06e-8462-5f8a-bb07-2d7863c3122c","d666a9f7-14e2-5924-b009-3a2db5f1ff02","21828232-0edd-522c-bc39-43765d87aebe","5e589d20-639d-51df-8cfc-6250ab0fe546","ae009c38-3679-51d1-94c1-ecbb3a58fd77","5613f237-db83-5a0f-8780-60bc6bdcb67a","c4f57756-0989-52d2-b462-a0cdd592cc60","5af48b34-382c-5de9-b942-6a39d3e5ecc2","f3aadd2e-71b1-5331-b9a4-bbffc003f778","1150e4b9-e0bf-5244-a32b-a4c6d16ad42a","130955c9-c74c-5779-a42a-cd24be011e4b","703b746a-1815-5a4f-b932-239289d4fa4f","176a740a-4523-5f75-a135-3fb04cfbebf0","8126a19b-9eec-59a4-aa68-ca3199401d87","42f6b318-eefb-5436-9c4e-614bb78d905d","78a1805f-dbe6-5fa4-92f1-8b25f20badfd"]}},{"id":"microsoft.securityinsights/websessionlogs","type":"Microsoft.SecurityInsights/WebSessionLogs","displayName":"Azure Sentinel Web Session Logs","description":"All tables related to Web Session Logs. - see https://learn.microsoft.com/en-us/azure/sentinel/web-normalization-schema.","related":{"tables":["ASimWebSessionLogs"],"functions":["842563f8-c0c6-564b-b70a-8eb0cf3cc5ab","56a8defd-3b2a-5281-81c9-24522c51052f","29bae92d-e879-5c1c-b702-dda9f4953353","bd437462-80e2-55dc-a5e5-2f36cc5a3bc1","5698d436-975a-5019-bb60-364cb9d4591d","1950a5c6-57ea-5972-93fb-487fb03213bd","63091b21-f597-5f96-b0cf-766cf25e8a09","b041f11f-14f1-515d-8561-2039b527a875","9e10882a-c0bf-5392-8358-9fc4b8c23f96","5dabe1db-06c0-53d9-865b-50fed81cdaef","82bd4748-6c5d-505a-9b69-83ee6241d0b7","6766a411-0a1d-5300-ab9b-e47bcf39b630","594302dd-80b9-53d0-9fd7-931c395b0ba5","09473163-8c9a-57f9-9ecd-00df0c71b862","d3856611-8bd1-52a1-bd43-d74c4d401ca3","9d82073d-6b2d-5959-ac70-34fc8915545a","942f7015-0858-50dd-b3a1-ea23bc395e0b","0a1a141b-2243-5275-87ad-5f5ba0a0a818","3f8b03e0-e95c-585d-a6c1-72cb23058c63","342c83a1-c87d-5f13-84c1-f5b241c4d244","45483341-e59d-565f-8c67-3b6b920374f3","d4b6ca42-6305-5094-b814-ffdbd22663fb","3c6c1d83-f581-5604-949a-ba64d7949fa7","460926e6-800a-577e-86a9-799bb8d375ca","2424ad34-e613-5906-a22e-59666a3b13c8","98dc2b4a-9239-527e-b5e1-518d926a0c87","9a241dc1-9a8a-5810-a3f7-f1229fb1f2a5","d5ffffe3-6545-5e38-9547-ba42d802963f","1e4a9783-ebfa-548d-950a-dcebdeff40fd","6a32c22d-1617-5ab9-9868-8bda79135cbe","d6c30943-04b8-5e10-ba49-d2bf86f18362","4fec4bb7-e66e-5d95-9f1c-e330ff756391","9ea8ffac-eac2-5aaa-b31a-fca5e6c76d9b","220c024e-c004-5a42-8bbb-9ce9f6fc4ee5","593270fa-7236-582c-ba03-6f71f5b84471","f362af26-1d94-58de-b6ab-6f86560af853","42f3f10f-253e-53b8-8059-53ea3a0c442a","31b740e7-598d-5c33-a4d8-cff376292c02","dae05563-8462-5711-8351-9a4772e4c729","42d1b18f-abde-5a05-a911-79165d21eab1","c2e506a7-2989-5e71-8cae-10c49855d431","b6375b9f-7ca6-5f77-be85-3631c19242a2","eda0fd87-5e4a-554b-be5c-cff59d3ce07a","e061dea2-6572-555c-8d35-ab675dbcc310","fd81f29b-7bac-5411-a20d-a06aaa20224d","577d78f4-8a19-5485-b2d0-2d76804d3a9b","93521939-ad22-5090-bcd7-35d1b7cc18fa","215fc6ab-b6fe-5e5e-8550-1369e65fab3e","e55841f8-8ec4-5c48-a286-a29e17f3ca05","d367d573-36bf-5820-8a87-6e0f51c229f6","33f7b64a-a938-5d12-a1e5-9457e688e9b9","2420a4b3-1758-54af-bb7f-906f762865fa","8052c91c-d8f8-5f92-8a2a-82a7710dd73e","e3e500c9-c7ee-5711-bdd4-75d16e835a87","82d93f1a-1917-5897-bbda-a1dd80c6ba0e","046cb5bd-2e6f-5d88-8791-1e0c3de4b327","065e3f27-1508-5603-ad00-f05ee67778a1","b7fb35fe-659f-5db8-b204-e8da026493c5","3e729a7c-5a0b-5fe2-91c2-24283b90a16b"]}},{"id":"microsoft.storage/storageaccounts","type":"Microsoft.Storage/storageAccounts","displayName":"Storage Accounts","related":{"tables":["AzureActivity","AzureMetrics","StorageTableLogs","StorageQueueLogs","StorageFileLogs","StorageBlobLogs"],"queries":["0a9a8546-8566-11ea-85d3-c8348e02520c","0a9be4e3-8566-11ea-bb0a-c8348e02520c","0a9d1db1-8566-11ea-86f4-c8348e02520c","0a9d6b7a-8566-11ea-8fbe-c8348e02520c","0a9de0a6-8566-11ea-96d1-c8348e02520c","0a9e2ecc-8566-11ea-95b0-c8348e02520c"]}},{"id":"microsoft.storageinsights/storagecollectionrules","type":"Microsoft.StorageInsights/storageCollectionRules","displayName":"Storage Collection Rules","description":"All tables related to Storage Insights Service"},{"id":"microsoft.storagecache/amlfilesytems","type":"Microsoft.StorageCache/amlFilesytems","displayName":"Azure Managed Lustre","description":"Azure Managed Lustre provides an easy-to-deploy, fully managed Lustre file system for on-demand use with data stored in Azure Blob.","related":{"tables":["AzureActivity","AzureMetrics","AFSAuditLogs"],"queries":["c4cdf677-7d39-4fc9-9894-e2264e719916","1ef86e81-77c6-467a-a7a6-f5769f1df2f2"]}},{"id":"microsoft.storagecache/caches","type":"Microsoft.StorageCache/caches","displayName":"Azure HPC Cache","description":"Log Analytics tables for Microsoft Azure HPC Cache","related":{"tables":["StorageCacheOperationEvents","StorageCacheUpgradeEvents","StorageCacheWarningEvents"],"queries":["84dd84da-6817-4482-92a6-4bcb3ec96cb6","cee04e51-5743-4b8e-9913-6d50f3813742","1d18a296-9f63-4753-a271-cc9e38e32e5a","aa3b3c6e-70e0-4d36-89d3-8ff32afb2c09","4b6de6c1-0bc4-4056-bb4b-07feaea2b6f3"]}},{"id":"microsoft.storagemover/storagemovers","type":"Microsoft.StorageMover/storageMovers","displayName":"Azure Storage Mover","description":"All tables related to Azure Storage Mover.","related":{"tables":["AzureActivity","AzureMetrics","StorageMoverCopyLogsFailed","StorageMoverCopyLogsTransferred","StorageMoverJobRunLogs"],"queries":["df057014-305f-4fa9-8522-18ccf8caaa22","13b56153-595a-4ef8-94dc-683d94e99579","7411a1ee-3bec-4f66-8147-ab0938b5a2c2","88553d7a-4cd4-4250-80da-702cb0b40fde","6df88c2e-cba9-44d2-8c9a-e18d9d581b32","06a6ed27-dbc4-478c-83a8-b8182c8f9fe3"]}},{"id":"microsoft.synapse/workspaces","type":"Microsoft.Synapse/workspaces","displayName":"Synapse Workspaces","description":"All tables related to Synapse.","related":{"tables":["AzureActivity","SynapseRbacOperations","SynapseGatewayApiRequests","SynapseSqlPoolExecRequests","SynapseSqlPoolRequestSteps","SynapseSqlPoolDmsWorkers","SynapseSqlPoolWaits","SynapseSqlPoolSqlRequests","SynapseIntegrationPipelineRuns","SynapseLinkEvent","SynapseIntegrationActivityRuns","SynapseIntegrationTriggerRuns","SynapseBigDataPoolApplicationsEnded","SynapseBuiltinSqlPoolRequestsEnded","SQLSecurityAuditEvents","SynapseScopePoolScopeJobsEnded","SynapseScopePoolScopeJobsStateChange","AzureMetrics","SynapseDXCommand","SynapseDXFailedIngestion","SynapseDXIngestionBatching","SynapseDXQuery","SynapseDXSucceededIngestion","SynapseDXTableUsageStatistics","SynapseDXTableDetails"],"queries":["f355a34a-0902-469d-a20d-126b6abe9647"]}},{"id":"microsoft.network/networkwatchers/trafficanalytics","type":"Microsoft.Network/NetworkWatchers/TrafficAnalytics","displayName":"Network Watcher - Traffic Analytics","description":"All tables related to Network Watcher - Traffic Analytics","related":{"queries":["a2995731-5c93-42bc-894e-704789d8deba"]}},{"id":"microsoft.updatecompliance/updatecompliance","type":"microsoft.updatecompliance/updatecompliance","displayName":"Update Compliance","description":"Update compliance tables. A complete list of Update Compliance tables can be viewed when filtering by solution.","related":{"queries":["6c73ae0a-50af-46ee-9ff1-e19b1d3d9a0b","367b4e64-9488-45f8-94fa-88905a332c73"]}},{"id":"microsoft.videoindexer/accounts","type":"Microsoft.VideoIndexer/accounts","displayName":"Video Indexer","description":"All tables related to Video Indexer","related":{"tables":["VIAudit","VIIndexing"],"queries":["b81828c9-f1b6-4901-8705-744199b363c5","ed8f4b3c-4e68-47a7-98d8-86e8dae96466","a933b563-1729-4a4a-aae6-0918df2a3762","260cbcfa-559a-416b-b97d-31c385b384be","9ddee6d4-c94d-411d-8fb9-ee10fc74502b","8a09c867-4caf-4a3c-ae4a-d8bd5c2b0263"]}},{"id":"microsoft.edge/diagnostics","type":"Microsoft.Edge/diagnostics","displayName":"workload orchestration","description":"workload orchestration is a cloud-native, cross-platform orchestrator that simplifies and streamlines the deployment, management, and update of different application solutions across different edge environments.","related":{"tables":["AzureActivity","AzureDiagnostics","WOUserAudits","WOUserDiagnostics"],"queries":["f6dd9440-131a-478c-a85d-815c5ee81fc6","5bac9c74-6e1e-4a67-8693-9661cc3fdb1e","b3bdb478-5088-4179-a6f9-669e1b97f2d6"]}},{"id":"microsoft.desktopvirtualization/hostpools","type":"Microsoft.DesktopVirtualization/hostPools","displayName":"Desktop Virtualization Host Pools","description":"Windows Virtual Desktop Host Pools.","related":{"tables":["WVDAgentHealthStatus","WVDMultiLinkAdd","AzureActivity","AzureMetrics","WVDConnections","WVDErrors","WVDCheckpoints","WVDManagement","WVDHostRegistrations","WVDConnectionNetworkData","WVDSessionHostManagement","WVDAutoscaleEvaluationPooled","WVDConnectionGraphicsDataPreview"],"queries":["9301ac33-090c-4cb5-b841-dc31c5d1ce13","7409e5d2-1178-4487-8f11-fb38a1a368ac","b544376e-b9ef-11ea-afad-c8348e03e0b8","b544ac5e-b9ef-11ea-9479-c8348e03e0b8","b544d256-b9ef-11ea-a8fb-c8348e03e0b8","b544d257-b9ef-11ea-8a32-c8348e03e0b8","b544d258-b9ef-11ea-840c-c8348e03e0b8","b544d259-b9ef-11ea-b62a-c8348e03e0b8","b544d25a-b9ef-11ea-9067-c8348e03e0b8","b544d25b-b9ef-11ea-b824-c8348e03e0b8","b544d25c-b9ef-11ea-94c4-c8348e03e0b8","b544d25d-b9ef-11ea-870f-c8348e03e0b8","b544d25e-b9ef-11ea-96fb-c8348e03e0b8","39382287-7d94-4b21-a8ee-e2f08b55f721","304217d6-6dcf-498e-b052-8fda82967980","66f7c5e9-bf9f-4ce8-b1d9-5f74c9e58749","2a537cac-6349-435a-8bbd-4cf2d1d3819a","a92ee56d-4ba3-49f5-9966-bd66cb58063f","91eb68a2-9d4f-4e83-86e3-323f414b4b96","7fb96445-e76f-41dc-8edb-22803c52c8af"]}},{"id":"microsoft.zerotrustsegmentation/segmentationmanagers","type":"Microsoft.ZeroTrustSegmentation/segmentationManagers","displayName":"Zero Trust Segmentation","description":"Tables related to Zero Trust Segmentation.","related":{"tables":["ZTSRequest","AzureActivity"],"queries":["716e9029-57e3-485d-87f4-97497192d3cb"]}},{"id":"default","type":"default","displayName":"Default schema for a resource","related":{"tables":["AzureActivity"]}},{"id":"subscription","type":"subscription","displayName":"Azure Subscription","related":{"tables":["AzureActivity"]}},{"id":"resourcegroup","type":"resourceGroup","displayName":"Azure Resource Group","related":{"tables":["AzureActivity"]}},{"id":"microsoft.signalrservice/webpubsub","type":"Microsoft.SignalRService/WebPubSub","displayName":"SignalR Service WebPubSub","related":{"tables":["AzureActivity","WebPubSubHttpRequest","WebPubSubMessaging","WebPubSubConnectivity"]}},{"id":"microsoft.insights/components","type":"microsoft.insights/components","displayName":"Application Insights","related":{"tables":["AzureActivity","AppAvailabilityResults","AppBrowserTimings","AppDependencies","AppEvents","AppMetrics","AppPageViews","AppPerformanceCounters","AppRequests","AppSystemEvents","AppTraces","AppExceptions"],"queries":["3391637e-7394-489f-b190-e5786da9c8e7","7deda973-b5cf-4c58-a4e7-f41cc30555fc","20ad87bf-b901-4d0b-b548-0f65a6c1210b","47a8646f-f2e5-45b7-9e27-63b4235d1137","d31cc37e-b086-4ab2-9dad-742d6a4d46c6","bada9215-5cf1-4723-9c2e-9f91e2c13738","33447b49-182b-4b6f-a26b-e2267279df81","59cfa403-4b7c-4610-b650-de70dc4af480","0e39010e-0b8e-4698-a435-e1ffa3451896","58147e09-cf5b-4a47-99c4-a5aedbb7c32c","87bcb1a9-2519-4671-a450-bb2971575507","58a835f6-b86f-4d79-a800-26f1d5265a76","7f050aba-bfab-11ea-995b-c8348e03e0b8","91e3ee17-bfab-11ea-bad1-c8348e03e0b8","55ca5870-bfab-11ea-ac5f-c8348e03e0b8","95035ec2-bfab-11ea-a608-c8348e03e0b8","9a9283e8-bfab-11ea-b7f5-c8348e03e0b8","9f16b134-bfab-11ea-99c3-c8348e03e0b8","e40b84ff-bfab-11ea-9407-c8348e03e0b8","ed941c7f-bfab-11ea-8dd3-c8348e03e0b8","fdfc57ce-bfab-11ea-ba10-c8348e03e0b8","1ab9dc94-bfac-11ea-8dcb-c8348e03e0b8","26172a26-bfac-11ea-9c5e-c8348e03e0b8","321b088f-bfac-11ea-b703-c8348e03e0b8"]}},{"id":"microsoft.desktopvirtualization/applicationgroups","type":"Microsoft.DesktopVirtualization/applicationGroups","displayName":"Desktop Virtualization Application Groups","related":{"tables":["AzureActivity","AzureMetrics","WVDErrors","WVDCheckpoints","WVDManagement"],"queries":["b544376e-b9ef-11ea-afad-c8348e03e0b8","b544ac5e-b9ef-11ea-9479-c8348e03e0b8","b544d256-b9ef-11ea-a8fb-c8348e03e0b8","b544d25b-b9ef-11ea-b824-c8348e03e0b8"]}},{"id":"microsoft.desktopvirtualization/workspaces","type":"Microsoft.DesktopVirtualization/workspaces","displayName":"Desktop Virtualization workspaces","related":{"tables":["AzureActivity","AzureMetrics","WVDFeeds","WVDErrors","WVDCheckpoints","WVDManagement"],"queries":["b544376e-b9ef-11ea-afad-c8348e03e0b8","b544ac5e-b9ef-11ea-9479-c8348e03e0b8","b544d256-b9ef-11ea-a8fb-c8348e03e0b8","b544d25b-b9ef-11ea-b824-c8348e03e0b8"]}},{"id":"microsoft.timeseriesinsights/environments","type":"Microsoft.TimeSeriesInsights/environments","displayName":"Time Series Insights Environments","related":{"tables":["AzureActivity","AzureMetrics","TSIIngress"],"queries":["35aa1317-608e-11eb-9456-b831b58816f3","35aa1318-608e-11eb-a734-b831b58816f3","35aa1319-608e-11eb-8fa0-b831b58816f3"]}},{"id":"microsoft.workloadmonitor/monitors","type":"Microsoft.WorkloadMonitor/monitors","displayName":"Workload Monitor","related":{"tables":["AzureActivity","AzureMetrics"]}},{"id":"microsoft.analysisservices/servers","type":"microsoft.analysisservices/servers","displayName":"Analysis Services","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.batch/batchaccounts","type":"microsoft.batch/batchaccounts","displayName":"Batch Accounts","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["14b2fa58-8560-11ea-b457-c8348e02520c","7bbc0cff-8560-11ea-9ac3-c8348e02520c","7e6d856a-8560-11ea-9a95-c8348e02520c","837689e6-8560-11ea-9a45-c8348e02520c","898689c9-8560-11ea-bb44-c8348e02520c"]}},{"id":"microsoft.appplatform/spring","type":"Microsoft.AppPlatform/Spring","displayName":"Azure Spring Apps","related":{"tables":["AzureActivity","AzureMetrics","AppPlatformLogsforSpring","AppPlatformSystemLogs","AppPlatformIngressLogs","AppPlatformBuildLogs","AppPlatformContainerEventLogs"],"queries":["758fc257-7359-11ea-9fad-c8348e02520c","759342e9-7359-11ea-bb5a-c8348e02520c","7593b6c0-7359-11ea-88c8-c8348e02520c","8393bf25-50e9-e88d-23b3-afabe2d845e9","6b63ba82-9e35-babe-0386-96b648bb1a56","d1a21eb9-4d9e-0e21-a81d-7e78dc488f84","c6f0918a-a022-4273-9737-05312ae54211","bfdd0f36-f300-425f-b149-65c21f652297"]}},{"id":"microsoft.signalrservice/signalr","type":"Microsoft.SignalRService/SignalR","displayName":"SignalR","related":{"tables":["AzureActivity","AzureMetrics","SignalRServiceDiagnosticLogs"],"queries":["7cef51e4-3e2a-4090-9227-9d5940c8e542","0d314981-ea13-468d-9693-08f17978b07c","ee407f4b-01d9-4867-99d6-b69f9cbc48fb","23669822-eee9-4fc7-ad01-3002e4e1f2c7","14f5f1bb-1d32-4c36-8cec-3fb5669f116b","bd1a9d5b-a31e-4b0e-8e32-ae4fdf667edd","4c761634-8075-45d0-bb0a-17020cedd849","d1fadd92-2480-461a-b576-9fd63214c197","ef05fc29-2ade-40c0-8a2b-a5e44c96d864","b95779e5-8cae-4d4e-9caa-8d4c463946a2","73336bb3-52b5-4005-8130-45c6385ae708"]}},{"id":"microsoft.containerregistry/registries","type":"Microsoft.ContainerRegistry/registries","displayName":"Container Registries","related":{"tables":["AzureActivity","AzureMetrics","ContainerRegistryLoginEvents","ContainerRegistryRepositoryEvents"],"queries":["590ef5ae-7354-11ea-8b23-c8348e02520c","96578d25-6dbf-475c-a6fd-adcafd97a138","5911dbf1-7354-11ea-b34d-c8348e02520c"]}},{"id":"microsoft.kusto/clusters","type":"Microsoft.Kusto/Clusters","displayName":"Azure Data Explorer Clusters","related":{"tables":["AzureActivity","AzureMetrics","FailedIngestion","SucceededIngestion","ADXIngestionBatching","ADXCommand","ADXQuery","ADXTableUsageStatistics","ADXTableDetails","ADXJournal"],"queries":["a42903db-1d24-11eb-88c1-c8348e03e0b8","a42903d9-1d24-11eb-afcb-c8348e03e0b8","a42903da-1d24-11eb-9b58-c8348e03e0b8","a42903df-1d24-11eb-99e3-c8348e03e0b8","a42903e0-1d24-11eb-9739-c8348e03e0b8","a42903de-1d24-11eb-ae49-c8348e03e0b8","a42903dd-1d24-11eb-9fdf-c8348e03e0b8","a42903dc-1d24-11eb-a6ff-c8348e03e0b8","a42903e3-1d24-11eb-a60d-c8348e03e0b8","a42903e2-1d24-11eb-a6da-c8348e03e0b8","a42903e4-1d24-11eb-83c0-c8348e03e0b8","a42903e5-1d24-11eb-bf99-c8348e03e0b8","a42903e6-1d24-11eb-9ef5-c8348e03e0b8","a42903e7-1d24-11eb-944e-c8348e03e0b8","a42903e8-1d24-11eb-bc91-c8348e03e0b8","a42903e1-1d24-11eb-ab6e-c8348e03e0b8"]}},{"id":"microsoft.blockchain/blockchainmembers","type":"Microsoft.Blockchain/blockchainMembers","displayName":"Azure Blockchain Service","related":{"tables":["AzureActivity","AzureMetrics","BlockchainApplicationLog","BlockchainProxyLog"]}},{"id":"microsoft.eventgrid/domains","type":"Microsoft.EventGrid/domains","displayName":"Event Grid Domains","related":{"tables":["AzureActivity","AzureMetrics","AegDeliveryFailureLogs","AegPublishFailureLogs","AegDataPlaneRequests"],"queries":["0ad18cad-9b87-11ea-9184-c8348e02520c","0ad29e51-9b87-11ea-9bee-c8348e02520c","be55f9e0-ec2b-11ea-a6d1-c8348e03e0b8"]}},{"id":"microsoft.eventgrid/partnernamespaces","type":"Microsoft.EventGrid/partnerNamespaces","displayName":"Event Grid Partner Namespaces","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","AegPublishFailureLogs","AegDataPlaneRequests"]}},{"id":"microsoft.eventgrid/partnertopics","type":"Microsoft.EventGrid/partnerTopics","displayName":"Event Grid Partner Topics","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","AegDeliveryFailureLogs"]}},{"id":"microsoft.eventgrid/systemtopics","type":"Microsoft.EventGrid/systemTopics","displayName":"Event Grid System Topics","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","AegDeliveryFailureLogs"]}},{"id":"microsoft.conenctedvmwarevsphere/virtualmachines","type":"Microsoft.ConenctedVMwarevSphere/VirtualMachines","displayName":"VMware","related":{"tables":["AzureActivity","AzureMetrics","ADAssessmentRecommendation","ADReplicationResult","ComputerGroup","ContainerLog","DnsEvents","DnsInventory","SecurityBaselineSummary","SQLAssessmentRecommendation","ConfigurationChange","ConfigurationData","Event","Heartbeat","Perf","ProtectionStatus","SecurityBaseline","SecurityEvent","Syslog","Update","UpdateRunProgress","UpdateSummary","VMBoundPort","VMConnection","VMComputer","VMProcess","W3CIISLog","WindowsFirewall","WireData","InsightsMetrics","HealthStateChangeEvent","CommonSecurityLog"]}},{"id":"microsoft.azurestackhci/virtualmachines","type":"Microsoft.AzureStackHCI/VirtualMachines","displayName":"Azure Local","related":{"tables":["AzureActivity","AzureMetrics","ADAssessmentRecommendation","ADReplicationResult","ComputerGroup","ContainerLog","DnsEvents","DnsInventory","SecurityBaselineSummary","SQLAssessmentRecommendation","ConfigurationChange","ConfigurationData","Event","Heartbeat","Perf","ProtectionStatus","SecurityBaseline","SecurityEvent","Syslog","Update","UpdateRunProgress","UpdateSummary","VMBoundPort","VMConnection","VMComputer","VMProcess","W3CIISLog","WindowsFirewall","WireData","InsightsMetrics","HealthStateChangeEvent","CommonSecurityLog"]}},{"id":"microsoft.scvmm/virtualmachines","type":"Microsoft.SCVMM/VirtualMachines","displayName":"System Center Virtual Machine Manager","related":{"tables":["AzureActivity","AzureMetrics","ADAssessmentRecommendation","ADReplicationResult","ComputerGroup","ContainerLog","DnsEvents","DnsInventory","SecurityBaselineSummary","SQLAssessmentRecommendation","ConfigurationChange","ConfigurationData","Event","Heartbeat","Perf","ProtectionStatus","SecurityBaseline","SecurityEvent","Syslog","Update","UpdateRunProgress","UpdateSummary","VMBoundPort","VMConnection","VMComputer","VMProcess","W3CIISLog","WindowsFirewall","WireData","InsightsMetrics","HealthStateChangeEvent","CommonSecurityLog"]}},{"id":"microsoft.compute/virtualmachinescalesets","type":"Microsoft.Compute/virtualMachineScaleSets","displayName":"Virtual Machine Scale Sets","related":{"tables":["AzureActivity","AzureMetrics","ConfigurationChange","ConfigurationData","ContainerLog","DataSetOutput","DataSetRuns","Event","Heartbeat","Perf","PerfInsightsFindings","PerfInsightsImpactedResources","PerfInsightsRun","ProtectionStatus","SecurityBaseline","SecurityEvent","Syslog","Update","UpdateRunProgress","UpdateSummary","VMBoundPort","VMConnection","VMComputer","VMProcess","W3CIISLog","WindowsFirewall","WireData","InsightsMetrics","CommonSecurityLog"],"queries":["ddf44599-d5a6-11ea-930c-c8348e03e0b8","ddf4459a-d5a6-11ea-a6e8-c8348e03e0b8","ddf4459b-d5a6-11ea-85e5-c8348e03e0b8","ddf4459c-d5a6-11ea-bcd7-c8348e03e0b8","ddf4459d-d5a6-11ea-b154-c8348e03e0b8","ddf4459e-d5a6-11ea-b023-c8348e03e0b8","ddf4459f-d5a6-11ea-b7ce-c8348e03e0b8","ddf445a0-d5a6-11ea-8c67-c8348e03e0b8"]}},{"id":"microsoft.azurestackhci/clusters","type":"Microsoft.AzureStackHCI/clusters","displayName":"Azure Local","related":{"tables":["Perf","Event"],"queries":["993e8088-d4af-46bd-bb26-2eb6ef2873d2","d180b15e-73ee-4275-8f99-a5b5a7e8cb97","0542e63c-e978-4f1a-a141-2675e0d49e88","7d2e183d-421e-4240-a1f6-6c139473ec27","dbd3ee2d-b50b-4def-9955-0e3d0576eeca","4445a657-aced-497b-a588-a86f845e4ea7","bed7fb50-cd96-48a4-80f9-3976b0529235","b82a0150-a330-49ba-ae11-81a950b55a5b","a03eab02-f73b-493f-90ff-e0223bfb4ce1","8adbd857-a7a7-44fb-9ab4-c11743fc21f2","b90c8414-fce6-478f-b372-a80827a3c7f9"]}},{"id":"microsoft.hybridcontainerservice/provisionedclusters","type":"Microsoft.HybridContainerservice/Provisionedclusters","displayName":"Azure Arc Provisioned Clusters","related":{"tables":["AzureActivity","AzureDiagnostics","AzureMetrics","ContainerImageInventory","ContainerInventory","ContainerLog","ContainerLogV2","ContainerNodeInventory","ContainerServiceLog","KubeEvents","KubeNodeInventory","KubePodInventory","KubePVInventory","KubeServices","KubeMonAgentEvents","InsightsMetrics","Perf","Syslog","Heartbeat"]}},{"id":"microsoft.insights/autoscalesettings","type":"Microsoft.Insights/AutoscaleSettings","displayName":"Azure Monitor autoscale settings","related":{"tables":["AzureActivity","AzureMetrics","AutoscaleEvaluationsLog","AutoscaleScaleActionsLog"],"queries":["f82e2799-dd42-11ea-9ea5-c8348e03e0b8","f82e75b8-dd42-11ea-b884-c8348e03e0b8","f82e75b9-dd42-11ea-a8b1-c8348e03e0b8","f82e75ba-dd42-11ea-a077-c8348e03e0b8"]}},{"id":"microsoft.devices/iothubs","type":"Microsoft.Devices/IotHubs","displayName":"IoT Hub","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","InsightsMetrics"],"queries":["79ff4844-6154-11ea-aec5-c8348e025209","7a01741c-6154-11ea-b256-c8348e025209","7a01e758-6154-11ea-8513-c8348e025209","7a02356e-6154-11ea-9f6e-c8348e025209","7a02aa98-6154-11ea-be45-c8348e025209","7a02f8bb-6154-11ea-ae08-c8348e025209","27374154-3ae9-5c0f-047b-059790771ae2","2fb22203-1815-2061-2dcf-f2f162ee3334","fde796bf-52b0-120a-7bff-444d8f9a60ed"]}},{"id":"microsoft.servicefabric/clusters","type":"Microsoft.ServiceFabric/clusters","displayName":"Service Fabric Clusters","related":{"tables":["AzureActivity","AzureMetrics"]}},{"id":"microsoft.logic/workflows","type":"Microsoft.Logic/workflows","displayName":"Logic Apps","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","LogicAppWorkflowRuntime"],"queries":["83d6b912-8565-11ea-a50d-c8348e02520c","83d88aba-8565-11ea-9c59-c8348e02520c","83d8d8ae-8565-11ea-bb97-c8348e02520c","83d94dca-8565-11ea-aceb-c8348e02520c"]}},{"id":"microsoft.automation/automationaccounts","type":"Microsoft.Automation/AutomationAccounts","displayName":"Automation account","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","Heartbeat","Update","UpdateSummary","UpdateRunProgress"],"queries":["a5e5e3f2-773b-11ea-b11e-c8348e02520c","a5eac4ad-773b-11ea-83e6-c8348e02520c","a5ee200a-773b-11ea-8e01-c8348e02520c","a5efcdbd-773b-11ea-8034-c8348e02520c","a5f2180e-773b-11ea-a27d-c8348e02520c","a5f28cd0-773b-11ea-8000-c8348e02520c","a5f4136f-773b-11ea-90bb-c8348e02520c","a5f48946-773b-11ea-b628-c8348e02520c","a5f65d8f-773b-11ea-8092-c8348e02520c","a5f6f9b3-773b-11ea-83b3-c8348e02520c","a5f795e5-773b-11ea-aa8e-c8348e02520c","a5fb8d87-773b-11ea-9f44-c8348e02520c"]}},{"id":"microsoft.datafactory/factories","type":"Microsoft.DataFactory/factories","displayName":"Data factories","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics","ADFActivityRun","ADFPipelineRun","ADFTriggerRun","ADFSandboxActivityRun","ADFSandboxPipelineRun","ADFSSISIntegrationRuntimeLogs","ADFSSISPackageEventMessageContext","ADFSSISPackageEventMessages","ADFSSISPackageExecutableStatistics","ADFSSISPackageExecutionComponentPhases","ADFSSISPackageExecutionDataStatistics"],"queries":["a6428837-f7fb-11ea-bb94-c8348e03e0b8","a6428838-f7fb-11ea-af2d-c8348e03e0b8","a6428839-f7fb-11ea-aa48-c8348e03e0b8","a642883a-f7fb-11ea-8c76-c8348e03e0b8","a642883b-f7fb-11ea-ae71-c8348e03e0b8","a642883c-f7fb-11ea-a8e7-c8348e03e0b8","a642883d-f7fb-11ea-9dfe-c8348e03e0b8","a642883e-f7fb-11ea-95c6-c8348e03e0b8","a642883f-f7fb-11ea-832d-c8348e03e0b8"]}},{"id":"microsoft.datalakestore/accounts","type":"Microsoft.DataLakeStore/accounts","displayName":"Data Lake Storage Gen1","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.datalakeanalytics/accounts","type":"Microsoft.DataLakeAnalytics/accounts","displayName":"Data Lake Analytics","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.powerbidedicated/capacities","type":"microsoft.powerbidedicated/capacities","displayName":"Power BI Embedded","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.datashare/accounts","type":"Microsoft.DataShare/accounts","displayName":"Data Share","related":{"tables":["AzureActivity","AzureMetrics","MicrosoftDataShareSentSnapshotLog","MicrosoftDataShareReceivedSnapshotLog"],"queries":["fa0c8117-6153-11ea-8cb3-c8348e025209","fa0ef211-6153-11ea-8bab-c8348e025209","fa1078e9-6153-11ea-a498-c8348e025209","fa112e83-6153-11ea-b11d-c8348e025209","fa117c9a-6153-11ea-9c29-c8348e025209","fa11cab7-6153-11ea-8733-c8348e025209","fa1320ea-6153-11ea-90da-c8348e025209","fa136ede-6153-11ea-857e-c8348e025209"]}},{"id":"microsoft.sql/managedinstances","type":"Microsoft.Sql/managedInstances","displayName":"SQL Managed Instances","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["67756e5c-735e-11ea-a1fc-c8348e02520c","67787b98-735e-11ea-8214-c8348e02520c","6778f0c8-735e-11ea-9bcd-c8348e02520c","67798d1e-735e-11ea-9066-c8348e02520c"]}},{"id":"microsoft.sql/servers/databases","type":"Microsoft.Sql/servers/databases","displayName":"SQL Databases","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["59e7db22-9f52-11ea-b8de-c8348e02520c","59ecbd47-9f52-11ea-bc53-c8348e02520c","59f150f7-9f52-11ea-8681-c8348e02520c","59f34cde-9f52-11ea-a5c7-c8348e02520c"]}},{"id":"microsoft.dbformysql/servers","type":"Microsoft.DBforMySQL/servers","displayName":"Azure Database for MySQL Servers","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["39530689-8564-11ea-a825-c8348e02520c","3953c9e1-8564-11ea-90b5-c8348e02520c","395417f2-8564-11ea-a1fa-c8348e02520c","39559e97-8564-11ea-b62e-c8348e02520c","3955ecb1-8564-11ea-9064-c8348e02520c"]}},{"id":"microsoft.dbforpostgresql/servers","type":"Microsoft.DBforPostgreSQL/servers","displayName":"Azure Database for PostgreSQL Servers","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["f057bedc-8564-11ea-bde7-c8348e02520c","f059e1be-8564-11ea-baa5-c8348e02520c","f05a2fd3-8564-11ea-b82c-c8348e02520c","f05a7df3-8564-11ea-8cd4-c8348e02520c","f05af337-8564-11ea-8713-c8348e02520c","f05b415a-8564-11ea-8e4c-c8348e02520c","f05c7a2c-8564-11ea-9d91-c8348e02520c","f05cc7e5-8564-11ea-bd57-c8348e02520c","f05d162a-8564-11ea-9b09-c8348e02520c","f05d8b32-8564-11ea-be76-c8348e02520c","f05dd951-8564-11ea-a396-c8348e02520c","f05f601a-8564-11ea-9958-c8348e02520c","f05ffc32-8564-11ea-8128-c8348e02520c","f0604a53-8564-11ea-9866-c8348e02520c","f061a449-8564-11ea-8a9c-c8348e02520c","f0621953-8564-11ea-904e-c8348e02520c"]}},{"id":"microsoft.dbforpostgresql/serversv2","type":"Microsoft.DBforPostgreSQL/serversv2","displayName":"Azure Database for PostgreSQL Servers V2","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.dbformariadb/servers","type":"Microsoft.DBforMariaDB/servers","displayName":"Azure Database for MariaDB Servers","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["18879673-8564-11ea-b38b-c8348e02520c","188a2ec5-8564-11ea-b3bc-c8348e02520c","188aa3a9-8564-11ea-bf1e-c8348e02520c","188b66fe-8564-11ea-b1c6-c8348e02520c","188bdc5b-8564-11ea-be3c-c8348e02520c"]}},{"id":"microsoft.devices/provisioningservices","type":"Microsoft.Devices/ProvisioningServices","displayName":"Device Provisioning Services","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.network/expressroutecircuits","type":"Microsoft.Network/expressRouteCircuits","displayName":"ExpressRoute Circuits","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["c5992ffc-9b80-11ea-8243-c8348e02520c","c5997e17-9b80-11ea-8e07-c8348e02520c","c59b04a4-9b80-11ea-9429-c8348e02520c","c59b52d1-9b80-11ea-abe2-c8348e02520c","c59bc801-9b80-11ea-a673-c8348e02520c","c59c161a-9b80-11ea-b8e4-c8348e02520c"]}},{"id":"microsoft.network/frontdoors","type":"Microsoft.Network/frontdoors","displayName":"Front Doors","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["3dedfcff-6154-11ea-b43b-c8348e025209","3df04ba0-6154-11ea-a4a9-c8348e025209","3df099bd-6154-11ea-950e-c8348e025209","3df22024-6154-11ea-bb45-c8348e025209","3df26e48-6154-11ea-8a19-c8348e025209","3df2e36e-6154-11ea-954a-c8348e025209","3df49151-6154-11ea-99f0-c8348e025209","3df4df3b-6154-11ea-a9a8-c8348e025209"]}},{"id":"microsoft.network/networkinterfaces","type":"Microsoft.Network/networkinterfaces","displayName":"Network Interfaces","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.network/networksecuritygroups","type":"Microsoft.Network/NetworkSecurityGroups","displayName":"Network Security Groups","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["a6428840-f7fb-11ea-9f84-c8348e03e0b8","a6428841-f7fb-11ea-a564-c8348e03e0b8","a6428842-f7fb-11ea-9339-c8348e03e0b8","c04f8b4c-8f78-8652-28db-d12cb5296bcb"]}},{"id":"microsoft.network/publicipaddresses","type":"Microsoft.Network/PublicIpAddresses","displayName":"Public IP Addresses","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["a6428840-f7fb-11ea-9f84-c8348e03e0b8","a6428841-f7fb-11ea-a564-c8348e03e0b8","a6428842-f7fb-11ea-9339-c8348e03e0b8"]}},{"id":"microsoft.network/trafficmanagerprofiles","type":"Microsoft.Network/trafficmanagerprofiles","displayName":"Traffic Manager Profiles","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["92237ddb-9b82-11ea-805c-c8348e02520c"]}},{"id":"microsoft.network/virtualnetworkgateways","type":"Microsoft.Network/virtualNetworkGateways","displayName":"Virtual Network Gateways","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["f82e75bb-dd42-11ea-8cee-c8348e03e0b8","f82e75bc-dd42-11ea-bd9c-c8348e03e0b8","f82e75bd-dd42-11ea-8c4d-c8348e03e0b8","f82e75be-dd42-11ea-bdca-c8348e03e0b8","f82e75bf-dd42-11ea-98ce-c8348e03e0b8","f82e75c0-dd42-11ea-8d89-c8348e03e0b8","f82e75c1-dd42-11ea-a974-c8348e03e0b8","f82e75c2-dd42-11ea-a2f7-c8348e03e0b8"]}},{"id":"microsoft.network/vpngateways","type":"Microsoft.Network/vpnGateways","displayName":"Virtual Private Network Gateways","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.network/virtualnetworks","type":"Microsoft.Network/virtualNetworks","displayName":"Virtual Networks","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["a6428840-f7fb-11ea-9f84-c8348e03e0b8","a6428841-f7fb-11ea-a564-c8348e03e0b8","a6428842-f7fb-11ea-9339-c8348e03e0b8"]}},{"id":"microsoft.search/searchservices","type":"Microsoft.Search/searchServices","displayName":"Search Services","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"]}},{"id":"microsoft.streamanalytics/streamingjobs","type":"microsoft.streamanalytics/streamingjobs","displayName":"Stream Analytics jobs","related":{"tables":["AzureActivity","AzureMetrics","AzureDiagnostics"],"queries":["b4d66462-3b14-48e0-8f73-69963f167e07","5ee61bc5-7ab3-4ea6-bd8a-894199439250","b90dfde7-6647-431a-ba33-a8d15ce03cfd","787bfae4-3b13-4edf-b04c-df38392915f0","b8c03410-f001-4b97-9cd7-0e0f133dec66","3d9fb8b2-befb-4583-8c92-1da2bf3411b4","4d078508-6a71-4f6d-8408-74cc20ad7867","aa09b62c-25ef-446e-b7b3-a950aef7800f","8fb2034b-6c12-47bc-838b-b657bd5f5300","b1c25cc3-f90b-4514-8391-283ca87952bd","33fb2c35-1ffd-4325-9f93-0a23ccf6d0d4","052020ef-b3ca-4980-8c22-cd02e0471ee2","a5921654-c003-4486-8122-60092622db9f","1ba813c0-8d01-4837-b8b4-ea954aa2c02d","c64e6268-9405-45fa-acce-e59dea7054fe","1c4e1e99-3d45-4125-ab76-320c8fdd3413","ec788186-ccc0-43fd-b974-1def808dfa21","801fa603-7ed8-4a4a-b028-5b0ff6277eb5","5b86398a-8291-40ce-8d97-c534997f61e6","366f2856-ffd7-4f9b-9c42-862e3b201f3c"]}},{"id":"microsoft.network/bastionhosts","type":"Microsoft.Network/bastionHosts","displayName":"Bastions","related":{"tables":["AzureActivity","AzureMetrics","MicrosoftAzureBastionAuditLogs"]}},{"id":"microsoft.healthcareapis/services","type":"Microsoft.HealthcareApis/services","displayName":"Azure API for FHIR","related":{"tables":["AzureActivity","AzureMetrics","MicrosoftHealthcareApisAuditLogs"]}}]}