Data/basic-plan-tables.json
|
{
"source": "https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables-features", "generatedOn": "2026-09-06", "tables": [ "AADAgentRiskEvents", "AADDomainServicesDNSAuditsDynamicUpdates", "AADDomainServicesDNSAuditsGeneral", "AADGraphActivityLogs", "AADManagedIdentitySignInLogs", "AADNonInteractiveUserSignInLogs", "AADProvisioningLogs", "AADRiskyAgents", "AADRiskyServicePrincipals", "AADRiskyUsers", "AADServicePrincipalRiskEvents", "AADServicePrincipalSignInLogs", "AADUserRiskEvents", "ABAPAuditLog", "ABAPAuthorizationDetails", "ABAPChangeDocsLog", "ABAPTableDataLog", "ABAPUserDetails", "ACLTransactionLogs", "ACLUserDefinedLogs", "ACRConnectedClientList", "ACREntraAuthenticationAuditLog", "ACSAdvancedMessagingOperations", "ACSCallAutomationIncomingOperations", "ACSCallAutomationMediaSummary", "ACSCallAutomationStreamingUsage", "ACSCallClientMediaStatsTimeSeries", "ACSCallClientOperations", "ACSCallClientServiceRequestAndOutcome", "ACSCallClosedCaptionsSummary", "ACSCallDiagnostics", "ACSCallDiagnosticsUpdates", "ACSCallRecordingIncomingOperations", "ACSCallRecordingSummary", "ACSCallSummary", "ACSCallSummaryUpdates", "ACSCallingMetrics", "ACSJobRouterIncomingOperations", "ACSOptOutManagementOperations", "ACSRoomsIncomingOperations", "ACSSMSIncomingOperations", "ADFSSignInLogs", "AEWExperimentAssignmentSummary", "AEWExperimentScorecardMetricPairs", "AEWExperimentScorecards", "AFSAuditLogs", "AGCAccessLogs", "AGCFirewallLogs", "AGSUpdateEvents", "AGWAccessLogs", "AGWFirewallLogs", "AGWPerformanceLogs", "AHCIDiagnosticLogs", "AHDSDeidAuditLogs", "AHDSDicomAuditLogs", "AHDSDicomDiagnosticLogs", "AHDSMedTechDiagnosticLogs", "AKSAudit", "AKSAuditAdmin", "AKSControlPlane", "ALBHealthEvent", "AMAHealth", "AMSKeyDeliveryRequests", "AMSLiveEventOperations", "AMSMediaAccountHealth", "AMSStreamingEndpointRequests", "AMWMetricsUsageDetails", "AOIDatabaseQuery", "AOIDigestion", "AOIStorage", "APIMDevPortalAuditDiagnosticLog", "ASCAuditLogs", "ASCDeviceEvents", "ASRv2HealthEvents", "ASRv2JobEvents", "ASRv2ProtectedItems", "ASRv2ReplicationExtensions", "ASRv2ReplicationPolicies", "ASRv2ReplicationVaults", "ASimAgentEventLogs", "ASimAlertEventLogs", "ASimAssetEntityLogs", "ASimAuditEventLogs", "ASimAuthenticationEventLogs", "ASimDhcpEventLogs", "ASimDnsActivityLogs", "ASimFileEventLogs", "ASimNetworkSessionLogs", "ASimProcessEventLogs", "ASimRegistryEventLogs", "ASimUserManagementActivityLogs", "ASimWebSessionLogs", "AVNMConnectivityConfigurationChange", "AVNMIPAMPoolAllocationChange", "AVNMNetworkGroupMembershipChange", "AVNMRuleCollectionChange", "AVSEsxiFirewallSyslog", "AVSEsxiSyslog", "AVSNsxEdgeSyslog", "AVSNsxManagerSyslog", "AVSSyslog", "AVSVcSyslog", "AWSALBAccessLogs", "AWSCloudTrail", "AWSCloudWatch", "AWSEKSLogs", "AWSELBFlowLogs", "AWSGuardDuty", "AWSNLBAccessLogs", "AWSNetworkFirewallAlert", "AWSNetworkFirewallFlow", "AWSNetworkFirewallTls", "AWSRoute53Resolver", "AWSS3ServerAccess", "AWSSecurityHubFindings", "AWSVPCFlow", "AWSWAF", "AZFWApplicationRule", "AZFWApplicationRuleAggregation", "AZFWDnsFlowTrace", "AZFWDnsQuery", "AZFWFatFlow", "AZFWFlowTrace", "AZFWIdpsSignature", "AZFWInternalFqdnResolutionFailure", "AZFWNatRule", "AZFWNatRuleAggregation", "AZFWNetworkRule", "AZFWNetworkRuleAggregation", "AZFWThreatIntel", "AZKVAuditLogs", "AZKVPolicyEvaluationDetailsLogs", "AZMSApplicationMetricLogs", "AZMSArchiveLogs", "AZMSAutoscaleLogs", "AZMSCustomerManagedKeyUserLogs", "AZMSDiagnosticErrorLogs", "AZMSHybridConnectionsEvents", "AZMSKafkaCoordinatorLogs", "AZMSKafkaUserErrorLogs", "AZMSOperationalLogs", "AZMSRunTimeAuditLogs", "AZMSVnetConnectionEvents", "AgentsInfo", "AggregatedSecurityAlert", "AlertEvidence", "AlertInfo", "Anomalies", "ApiManagementGatewayLlmLog", "ApiManagementGatewayLogs", "ApiManagementGatewayMCPLog", "ApiManagementWebSocketConnectionLogs", "AppEnvSessionConsoleLogs", "AppEnvSessionLifecycleLogs", "AppEnvSessionPoolEventLogs", "AppEnvSpringAppConsoleLogs", "AppGenAIContent", "AppTraces", "ArcK8sAudit", "ArcK8sAuditAdmin", "ArcK8sControlPlane", "AzureDevOpsAuditing", "AzureMetrics", "AzureMetricsV2", "AzureMonitorPipelineLogErrors", "BehaviorEntities", "BehaviorInfo", "CCFApplicationLogs", "CDBCassandraRequests", "CDBControlPlaneRequests", "CDBDataPlaneRequests", "CDBDataPlaneRequests15M", "CDBDataPlaneRequests5M", "CDBGremlinRequests", "CDBMongoRequests", "CDBPartitionKeyRUConsumption", "CDBPartitionKeyStatistics", "CDBQueryRuntimeStatistics", "CDBTableApiRequests", "CampaignInfo", "ChaosStudioExperimentEventLogs", "CloudAppEvents", "CloudAuditEvents", "CloudDnsEvents", "CloudHsmHardwareOperationAuditLogs", "CloudHsmServiceOperationAuditLogs", "CloudProcessEvents", "CloudStorageAggregatedEvents", "CommonSecurityLog", "CommunicationComplianceActivity", "ContainerAppConsoleLogs", "ContainerAppHTTPLogs", "ContainerLogV2", "ContainerNetworkLogs", "CopilotActivity", "CrowdStrikeAlerts", "CrowdStrikeAuditEvents", "CrowdStrikeCases", "CrowdStrikeDetections", "CrowdStrikeHosts", "CrowdStrikeIncidents", "CrowdStrikeVulnerabilities", "DNSQueryLogs", "DataSetOutput", "DataSetRuns", "DataTransferOperations", "DatabricksAccounts", "DatabricksApps", "DatabricksBrickStoreHttpGateway", "DatabricksBudgetPolicyCentral", "DatabricksCapsule8Dataplane", "DatabricksClamAVScan", "DatabricksCloudStorageMetadata", "DatabricksClusterLibraries", "DatabricksClusterPolicies", "DatabricksClusters", "DatabricksDBFS", "DatabricksDashboards", "DatabricksDataMonitoring", "DatabricksDataRooms", "DatabricksDatabricksSQL", "DatabricksDeltaPipelines", "DatabricksFeatureStore", "DatabricksFiles", "DatabricksFilesystem", "DatabricksGenie", "DatabricksGitCredentials", "DatabricksGlobalInitScripts", "DatabricksGroups", "DatabricksIAMRole", "DatabricksIngestion", "DatabricksInstancePools", "DatabricksJobs", "DatabricksLakeviewConfig", "DatabricksLineageTracking", "DatabricksMLflowAcledArtifact", "DatabricksMLflowExperiment", "DatabricksMarketplaceConsumer", "DatabricksMarketplaceProvider", "DatabricksModelRegistry", "DatabricksNotebook", "DatabricksOnlineTables", "DatabricksPartnerHub", "DatabricksPredictiveOptimization", "DatabricksRBAC", "DatabricksRFA", "DatabricksRemoteHistoryService", "DatabricksRepos", "DatabricksSQL", "DatabricksSQLPermissions", "DatabricksSSH", "DatabricksSecrets", "DatabricksServerlessRealTimeInference", "DatabricksUnityCatalog", "DatabricksVectorSearch", "DatabricksWebTerminal", "DatabricksWebhookNotifications", "DatabricksWorkspace", "DatabricksWorkspaceFiles", "DataverseActivity", "DevCenterAgentHealthLogs", "DevCenterBillingEventLogs", "DevCenterConnectionLogs", "DevCenterDiagnosticLogs", "DevCenterResourceOperationLogs", "DeviceBehaviorEntities", "DeviceBehaviorInfo", "DeviceCustomFileEvents", "DeviceCustomImageLoadEvents", "DeviceCustomNetworkEvents", "DeviceCustomProcessEvents", "DeviceCustomRegistryEvents", "DeviceCustomScriptEvents", "DeviceEvents", "DeviceFileCertificateInfo", "DeviceFileEvents", "DeviceImageLoadEvents", "DeviceInfo", "DeviceLogonEvents", "DeviceNetworkEvents", "DeviceNetworkInfo", "DeviceProcessEvents", "DeviceRegistryEvents", "DeviceTvmSecureConfigurationAssessment", "DeviceTvmSecureConfigurationAssessmentKB", "DeviceTvmSoftwareInventory", "DeviceTvmSoftwareVulnerabilities", "DeviceTvmSoftwareVulnerabilitiesKB", "DiscoveryBookshelfAuditLogs", "DiscoverySupercomputerAuditLogs", "DiscoveryWorkspaceAuditLogs", "DisruptionAndResponseEvents", "DnsAuditEvents", "DragonCopilot", "DurableTaskSchedulerLogs", "DynamicEventCollection", "EGNFailedHttpDataPlaneOperations", "EGNSuccessfulHttpDataPlaneOperations", "EdgeActionConsoleLog", "EdgeActionServiceLog", "EmailAttachmentInfo", "EmailEvents", "EmailPostDeliveryEvents", "EmailUrlInfo", "EnrichedMicrosoft365AuditLogs", "FileMaliciousContentInfo", "GCPApigee", "GCPAuditLogs", "GCPCDN", "GCPCloudRun", "GCPCloudSQL", "GCPComputeEngine", "GCPDNS", "GCPFirewallLogs", "GCPIAM", "GCPIDS", "GCPLoadBalancer", "GCPMonitoring", "GCPNAT", "GCPNATAudit", "GCPResourceManager", "GCPVPCFlow", "GKEAPIServer", "GKEApplication", "GKEAudit", "GKEControllerManager", "GKEHPADecision", "GKEScheduler", "GoogleCloudSCC", "GoogleWorkspaceReports", "IdentityAccountInfo", "IdentityDirectoryEvents", "IdentityEvents", "IdentityLogonEvents", "IdentityQueryEvents", "IlumioInsights", "IntuneDevices", "LAJobLogs", "LAQueryLogs", "LASummaryLogs", "LIATrackingEvents", "LedgerTransactionLogs", "LedgerUserDefinedLogs", "MDCDetectionDNSEvents", "MDCDetectionFimEvents", "MDCDetectionGatingValidationEvents", "MDCDetectionK8SApiEvents", "MDCDetectionProcessV2Events", "MDCFileIntegrityMonitoringEvents", "MDPResourceLog", "MNFDeviceUpdates", "MNFSystemSessionHistoryUpdates", "MNFSystemStateMessageUpdates", "MPCAuditLogs", "MPCIngestionLogs", "MeshControlPlane", "MessageEvents", "MessagePostDeliveryEvents", "MessageUrlInfo", "MicrosoftGraphActivityLogs", "MicrosoftGraphPolicyLogs", "MicrosoftPurviewInformationProtection", "MicrosoftServicePrincipalSignInLogs", "MySqlAuditLogs", "MySqlSlowLogs", "NCBMBreakGlassAuditLogs", "NCBMSecurityDefenderLogs", "NCBMSecurityLogs", "NCBMSystemLogs", "NCCIDRACLogs", "NCCKubernetesAPIAuditLogs", "NCCKubernetesLogs", "NCCPlatformOperationsLogs", "NCCVMOrchestrationLogs", "NCMClusterOperationsLogs", "NCSStorageAlerts", "NCSStorageAudits", "NCSStorageLogs", "NGXOperationLogs", "NGXSecurityLogs", "NSPAccessLogs", "NetworkAccessAlerts", "NetworkAccessConnectionEvents", "NetworkAccessGenerativeAIInsights", "NetworkAccessTraffic", "NetworkSessions", "NginxUpstreamUpdateLogs", "OAuthAppInfo", "OEPDataplaneLogs", "OEWAuditLogs", "OTelEvents", "OTelLogs", "OTelSpans", "OTelTraces", "OTelTracesAgent", "OktaSystemLogs", "OracleCloudDatabase", "PGSQLAutovacuumStats", "PGSQLDbTransactionsStats", "PGSQLPgStatActivitySessions", "PGSQLQueryStoreQueryText", "PGSQLQueryStoreRuntime", "PGSQLQueryStoreWaits", "PGSQLServerLogs", "PaymentHsmHardwareOperationAuditLogs", "Perf", "PerfInsightsFindings", "PerfInsightsImpactedResources", "PerfInsightsRun", "PowerAppsActivity", "PowerAutomateActivity", "PowerBIActivity", "PowerBIDatasetsTenant", "PowerBIDatasetsWorkspace", "PowerPlatformAdminActivity", "PowerPlatformConnectorActivity", "PowerPlatformDlpActivity", "PreAuthenticationDiscoveryLogs", "ProjectActivity", "QualysKnowledgeBase", "QuantumProviderAccountDeviceOperationLogs", "QuantumProviderAccountJobAuditLogs", "QuantumProviderAccountQueueAuditLogs", "QuantumProviderAccountTargetAuditLogs", "QuantumWorkspaceJobAuditLogs", "REDConnectionEvents", "Rapid7InsightVMCloudAssets", "Rapid7InsightVMCloudVulnerabilities", "RemoteNetworkHealthLogs", "RetinaNetworkFlowLogs", "SCGPoolExecutionLog", "SCGPoolRequestLog", "SVMPoolExecutionLog", "SVMPoolRequestLog", "SalesforceAuditTrail", "SalesforceLoginHistory", "SecurityAttackPathData", "SecurityCaseEvent", "SecurityEvent", "SentinelAlibabaCloudAPIGatewayLogs", "SentinelAlibabaCloudVPCFlowLogs", "SentinelAlibabaCloudWAFLogs", "SentinelBehaviorEntities", "SentinelBehaviorInfo", "SentinelImpervaWAFCloudV2Logs", "SigninLogs", "StorageBlobLogs", "StorageFileLogs", "StorageMalwareScanningResults", "StorageMoverAuditLogs", "StorageMoverCopyLogsFailed", "StorageMoverCopyLogsTransferred", "StorageMoverJobRunLogs", "StorageQueueLogs", "StorageTableLogs", "SynapseSqlPoolDmsWorkers", "SynapseSqlPoolExecRequests", "SynapseSqlPoolRequestSteps", "SynapseSqlPoolSqlRequests", "SynapseSqlPoolWaits", "TOUserAudits", "TOUserDiagnostics", "ThreatIntelIndicators", "ThreatIntelObjects", "UrlClickEvents", "VCoreMongoRequests", "WOUserAudits", "WOUserDiagnostics", "Windows365AuditLogs", "Windows365CheckpointLogs", "Windows365ConnectionErrorLogs", "Windows365ConnectionLogs", "Windows365NetworkLogs", "ZTSGraph", "ZTSJobStatus", "ZTSMetadata", "ZTSRequest" ] } |