Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Reference for WOUserAudits table in Azure Monitor Logs.
| Attribute | Value |
|---|---|
| Category | Audit, Azure Resources |
| Basic Logs Eligible | ✓ Yes (source) |
| Supports Transformations | ✓ Yes (source) |
| Ingestion API Supported | ✗ No |
| Azure Monitor Tables Reference | View Documentation |
Source: Azure Monitor documentation
| Column Name | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable isfalseingestion isn't billed to your Azure account |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| Category | string | Category of the event. |
| CorrelationId | string | Correlation ID of the operation. |
| EdgeLocation | string | The Azure Edge custom location resource Id on which the operation happens. |
| Location | string | Azure region in which the workload orchestration diagnostic resource is located. |
| Message | string | The audit message. |
| OperatingResourceId | string | The operating resource id refers to the specific operational resource that the workload orchestration is managing when this event is triggered. |
| OperatingResourceK8SId | string | The operating resource K8s id refers to K8s resource id (namespace/name) of the specific operational resource that the workload orchestration is managing when this event is triggered. |
| OperationName | string | Operation name of the event. |
| Properties | dynamic | Properties of the event. |
| SourceSystem | string | The type of agent the event was collected by. For example,OpsManagerfor Windows agent, either direct connect or Operations Manager,Linuxfor all Linux agents, orAzurefor Azure Diagnostics |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | Event generation time. |
| Type | string | The name of the table |
| User | string | The Microsoft Entra ID object Id of the requester. |
| WOServiceInstance | string | workload orchestration service pod name. |
| WOServiceName | string | workload orchestration service name. |
This table collects data from the following Azure resource types:
microsoft.edge/diagnosticsBrowse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊