tests/fixtures/collector-golden/Monitor/DataCollectionRules.json
|
{
"SchemaVersion": 1, "Category": "Monitor", "Name": "DataCollectionRules", "FixturePath": "tests/fixtures/collector-equivalence/Monitor.json", "FixtureSha256": "774e3208935f54173f9a4f3d9901aa375c7e636ba84f7f22ec73920bbb3cb0a2", "Rows": [ "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1a|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-000000000001/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1a-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:1|Subscription=s:sub-fixture-01|Tag Name=s:env|Tag Value=s:prod|Transformations=s:Yes (KQL transformations applied)", "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1b|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-000000000001/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1b-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:1|Subscription=s:sub-fixture-01|Tag Name=s:env|Tag Value=s:prod|Transformations=s:Yes (KQL transformations applied)", "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1b|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-000000000001/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1b-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:0|Subscription=s:sub-fixture-01|Tag Name=s:owner|Tag Value=s:platform|Transformations=s:Yes (KQL transformations applied)", "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1c|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-000000000001/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1c-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:1|Subscription=s:sub-fixture-01|Tag Name=s:|Tag Value=s:|Transformations=s:Yes (KQL transformations applied)", "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1d|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-0000000000ff/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1d-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:1|Subscription=<null>|Tag Name=s:env|Tag Value=s:dev|Transformations=s:Yes (KQL transformations applied)", "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1e|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-000000000001/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1e-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:1|Subscription=s:sub-fixture-01|Tag Name=s:env|Tag Value=s:prod|Transformations=s:Yes (KQL transformations applied)", "Data Collection Endpoint=s:res-value|Data Flows=s:Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1|Data Sources=s:Performance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value|DCR Name=s:datacollectionrules-t1f|Description=s:res-value|Destinations=s:Log Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value|ID=s:/subscriptions/00000000-0000-0000-0000-000000000001/resourceGroups/rg-fixture-01/providers/microsoft.insights/datacollectionrules/datacollectionrules-t1f-1|Immutable ID=s:res-value|Location=s:res-value|Resource Group=s:res-value|Resource U=j:1|Subscription=s:sub-fixture-01|Tag Name=s:env|Tag Value=s:prod|Transformations=s:Yes (KQL transformations applied)" ], "Workbook": { "WithoutTags": "Subscription\tResource Group\tDCR Name\tDescription\tLocation\tData Sources\tDestinations\tData Flows\tTransformations\tData Collection Endpoint\tImmutable ID\tResource U\nsub-fixture-01\tres-value\tdatacollectionrules-t1a\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1b\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1b\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t0\nsub-fixture-01\tres-value\tdatacollectionrules-t1c\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t1\n\tres-value\tdatacollectionrules-t1d\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1e\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1f\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t1", "WithTags": "Subscription\tResource Group\tDCR Name\tDescription\tLocation\tData Sources\tDestinations\tData Flows\tTransformations\tData Collection Endpoint\tImmutable ID\tTag Name\tTag Value\tResource U\nsub-fixture-01\tres-value\tdatacollectionrules-t1a\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\tenv\tprod\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1b\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\tenv\tprod\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1b\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\towner\tplatform\t0\nsub-fixture-01\tres-value\tdatacollectionrules-t1c\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\t\t\t1\n\tres-value\tdatacollectionrules-t1d\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\tenv\tdev\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1e\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\tenv\tprod\t1\nsub-fixture-01\tres-value\tdatacollectionrules-t1f\tres-value\tres-value\tPerformance Counters (res-value); Performance Counters (res-value); Windows Event Logs (res-value); Windows Event Logs (res-value); Syslog (res-value); Syslog (res-value); Extension: res-value; Extension: res-value\tLog Analytics: res-value; Log Analytics: res-value; Azure Monitor Metrics; Event Hub: res-value; Event Hub: res-value; Storage: res-value; Storage: res-value\tStreams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1; Streams: res-item-0, res-item-1 -> Dest: res-item-0, res-item-1\tYes (KQL transformations applied)\tres-value\tres-value\tenv\tprod\t1" } } |