Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Reference for DiscoveryWorkspaceAuditLogs table in Azure Monitor Logs.
| Attribute | Value |
|---|---|
| Category | Audit |
| Basic Logs Eligible | ✓ Yes (source) |
| Supports Transformations | ✗ No (source) |
| Ingestion API Supported | ✗ No |
| Lake-Only Ingestion | ✓ Yes |
| Azure Monitor Tables Reference | View Documentation |
Source: Azure Monitor documentation
| Column Name | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable isfalseingestion isn't billed to your Azure account |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| Category | string | The log category of the event. |
| ObjectId | string | The object identifier of the principal that performed the operation. |
| OperationName | string | The name of the operation that triggered the audit event, including the controller and action name. |
| SourceSystem | string | The type of agent the event was collected by. For example,OpsManagerfor Windows agent, either direct connect or Operations Manager,Linuxfor all Linux agents, orAzurefor Azure Diagnostics |
| Tenant | string | The Discovery tenant identifier associated with the workspace. |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | Timestamp when the log entry was ingested. |
| Type | string | The name of the table |
Official Microsoft Learn documentation for field/column information:
This table collects data from the following Azure resource types:
microsoft.discovery/workspacesBrowse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊