Compartilhar via


Consultas de exemplo do Azure Monitor Log Analytics.

Os logs de recursos do Azure Monitor são logs emitidos pelos serviços do Azure que descrevem a operação desses serviços ou recursos. Quando exportados para um workspace do Log Analytics, os logs são armazenados em tabelas. Esse conjunto de artigos contém consultas de exemplo para recuperar dados das tabelas do Log Analytics. As consultas também estão disponíveis no workspace do Log Analytics.

Exemplo de consultas por tabela

AACAudit

AACHttpRequest

AADCustomSecurityAttributeAuditLogs

AADDomainServicesAccountLogon

AADDomainServicesAccountManagement

AADDomainServicesDirectoryServiceAccess

AADDomainServicesLogonLogoff

AADDomainServicesPolicyChange

AADDomainServicesPrivilegeUse

AADManagedIdentitySignInLogs

AADNonInteractiveUserSignInLogs

AADProvisioningLogs

AADRiskyUsers

AADServicePrincipalRiskEvents

AADServicePrincipalSignInLogs

AADUserRiskEvents

ABSBotRequests

Auditoria de Colaboração ACIC

ACRConnectedClientList

ACREntraAuthenticationAuditLog

ACSAdvancedMessagingOperations

ACSAuthIncomingOperations

ACSBillingUsage

ACSCallAutomationIncomingOperations

ACSCallAutomationMediaSummary

ACSCallClientMediaStatsTimeSeries

ACSCallClientOperations

ACSCallDiagnostics

ACSCallRecordingIncomingOperations

ACSCallRecordingSummary

ACSCallSummary

Pesquisa ACSCallSurvey

ACSChatIncomingOperations

ACSEmailSendMailOperacional

ACSEmailStatusUpdateOperacional

ACSJobRouterIncomingOperations

ACSRoomsIncomingOperations

ACSSMSIncomingOperations

ADAssessmentRecommendation

ADFActivityRun

ADFPipelineRun

ADFSSignInLogs

ADFTriggerRun

ADTDataHistoryOperation

ADTDigitalTwinsOperation

ADTEventRoutesOperation

ADTModelsOperation

ADTQueryOperation

ADXIngestionBatching

ADXTableUsageStatistics

AEWComputePipelinesLogs

AFSAuditLogs

AGCAccessLogs

AGSGrafanaLoginEventos

AHDSDicomAuditLogs

AHDSDicomDiagnosticLogs

AHDSMedTechDiagnosticLogs

AKSAudit

AKSAuditAdmin

AKSControlPlane

ALBHealthEvent

AMSKeyDeliveryRequests

AMSLiveEventOperations

AMSMediaAccountHealth

AMSStreamingEndpointRequests

AOIDatabaseQuery

AOIDigestion

AOIStorage

ASCDeviceEvents

ASRJobs

ASRReplicatedItems

ASimDnsActivityLogs

AVNMConnectivityConfigurationChange

AVNMIPAMPoolAllocationChange

AVNMNetworkGroupMembershipChange

AVNMRuleCollectionChange

AVSSyslog

AWSCloudTrail

AWSGuardDuty

AWSVPCFlow

AZFWApplicationRule

AZFWDnsQuery

AZFWFatFlow

AZFWFlowTrace

AZFWIdpsSignature

AZFWInternalFqdnResolutionFailure

AZFWNatRule

AZFWNetworkRule

AZFWThreatIntel

AZKVAuditLogs

AZMSDiagnosticErrorLogs

AZMSHybridConnectionsEvents

AZMSOperationalLogs

AZMSRunTimeAuditLogs

AZMSVnetConnectionEvents

AddonAzureBackupJobs

AddonAzureBackupStorage

AegDataPlaneRequests

AegDeliveryFailureLogs

AegPublishFailureLogs

AgriFoodApplicationAuditLogs

AgriFoodFarmManagementLogs

AgriFoodJobProcessedLogs

AlertEvidence

AlertInfo

AmlComputeClusterEvent

AmlComputeCpuGpuUtilization

AmlComputeJobEvent

AmlDataSetEvent

AmlEnvironmentEvent

AmlModelsEvent

AmlOnlineEndpointConsoleLog

AmlOnlineEndpointEventLog

AmlOnlineEndpointTrafficLog

AmlRegistryWriteEventsLog

Anomalias

ApiManagementGatewayLogs

AppDependencies

AppEnvSpringAppConsoleLogs

AppExceptions

AppPageViews

AppPlatformLogsforSpring

AppPlatformSystemLogs

AppRequests

AppServiceAppLogs

AppServiceAuditLogs

AppServiceAuthenticationLogs

AppServiceConsoleLogs

AppServiceFileAuditLogs

AppServiceHTTPLogs

AutoscaleEvaluationsLog

AutoscaleScaleActionsLog

AzureActivity

AzureAttestationDiagnostics

AzureBackupOperations

AzureDiagnostics

AzureLoadTestingOperation

AzureMetrics

CCFApplicationLogs

CIEventsAudit

CIEventsOperacional

CassandraLogs

ChaosStudioExperimentEventLogs

CloudAppEvents

CommonSecurityLog

Lista de observação confidencial

ConfigurationChange

ConfigurationData

ContainerAppConsoleLogs

ContainerImageInventory

ContainerInventory

ContainerLog

ContainerLogV2

ContainerNodeInventory

ContainerRegistryLoginEvents

ContainerRegistryRepositoryEvents

ContainerServiceLog

CoreAzureBackup

DCRLogErrors

DNSQueryLogs

DataTransferOperations

DatabricksWorkspaceLogs

Atividade do Dataverse

DevCenterDiagnosticLogs

DevCenterResourceOperationLogs

Calendário do Dispositivo

Limpeza de dispositivo

DeviceHardwareHealth

Saúde do dispositivo

DispositivoSkypeHeartbeat

DeviceTvmSecureConfigurationAssessment

DeviceTvmSoftwareInventory

DeviceTvmSoftwareVulnerabilities

DnsEvents

EGNFailedHttpDataPlaneOperations

EGNFailedMqttConnections

EGNMqttDesconexões

EGNSuccessfulHttpDataPlaneOperations

EGNSuccessfulMqttConnections

EmailAttachmentInfo

EmailEvents

EmailPostDeliveryEvents

EmailUrlInfo

Evento

FailedIngestion

FunctionAppLogs

GCPAuditLogs

Pulsação

IdentityDirectoryEvents

IdentityLogonEvents

IdentityQueryEvents

InsightsMetrics

KubeEvents

KubeMonAgentEvents

KubeNodeInventory

KubePodInventory

KubeServices

LAQueryLogs

LASummaryLogs

LogicAppWorkflowRuntime

MDCDetectionDNSEvents

MDCDetectionFimEvents

MNFDeviceUpdates

MNFSystemSessionHistoryUpdates

MNFSystemStateMessageUpdates

MicrosoftDataShareReceivedSnapshotLog

MicrosoftDataShareSentSnapshotLog

MicrosoftGraphActivityLogs

MicrosoftPurviewInformationProtection

NGXOperationLogs

NGXSecurityLogs

NWConnectionMonitorPathResult

NWConnectionMonitorTestResult

Sessões de rede

OEPAirFlowTask

OLPSupplyChainEntityOperations

OfficeActivity

Perf

Atividade do PowerApps

PowerAutomateActivity

PowerBIActivity

PowerPlatformAdminActivity

PowerPlatformConnectorActivity

PowerPlatformDlpActivity

ProjectActivity

ProtectionStatus

PurviewSecurityLogs

REDConnectionEvents

ResourceManagementPublicAccessLogs

SQLAssessmentRecommendation

SecurityAttackPathData

SecurityEvent

Auditoria Sentinela

SignalRServiceDiagnosticLogs

SigninLogs

StorageBlobLogs

Eventos de operação de cache de armazenamento

Eventos de atualização de cache de armazenamento

Eventos de Aviso de Cache de Armazenamento

ArmazenamentoMalwareScanningResults

SucceededIngestion

SynapseLinkEvent

syslog

TSIIngress

UCDOAggregatedStatus

UCDOStatus

Atualizar

UpdateRunProgress

UpdateSummary

UrlClickEvents

Uso

VCoreMongoRequests

VIAudit

VIIndexing

W3CIISLog

WVDAgentHealthStatus

WVDCheckpoints

WVDConnectionNetworkData

WVDConnections

WVDErrors

WaaSDeploymentStatus

WaaSUpdateStatus

Watchlist

WindowsEvent

WireData

WorkloadDiagnosticLogs

Próximas etapas