Skip to content

Commit d4a4e2c

Browse files
refactor: Remove obsolete Windows Event Logs configuration from data collection rules
1 parent 3facc1a commit d4a4e2c

File tree

1 file changed

+0
-33
lines changed

1 file changed

+0
-33
lines changed

infra/main.bicep

Lines changed: 0 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -591,27 +591,6 @@ module windowsVmDataCollectionRules 'br/public:avm/res/insights/data-collection-
591591
name: 'perfCounterDataSource60'
592592
}
593593
]
594-
windowsEventLogs: [
595-
{
596-
name: 'SecurityAuditEvents'
597-
streams: [
598-
'Microsoft-WindowsEvent'
599-
]
600-
xPathQueries: [
601-
'Security!*[System[(EventID=4624 or EventID=4625)]]'
602-
]
603-
}
604-
{
605-
name: 'AppAndSystemEvents'
606-
streams: [
607-
'Microsoft-WindowsEvent'
608-
]
609-
xPathQueries: [
610-
'Application!*[System[(Level=1 or Level=2 or Level=3)]]'
611-
'System!*[System[(Level=1 or Level=2 or Level=3)]]'
612-
]
613-
}
614-
]
615594
}
616595
destinations: {
617596
logAnalytics: [
@@ -629,18 +608,6 @@ module windowsVmDataCollectionRules 'br/public:avm/res/insights/data-collection-
629608
destinations: [
630609
'la-${dataCollectionRulesResourceName}'
631610
]
632-
transformKql: 'source'
633-
outputStream: 'Microsoft-Perf'
634-
}
635-
{
636-
streams: [
637-
'Microsoft-WindowsEvent'
638-
]
639-
destinations: [
640-
'la-${dataCollectionRulesResourceName}'
641-
]
642-
transformKql: 'source'
643-
outputStream: 'Microsoft-WindowsEvent'
644611
}
645612
]
646613
}

0 commit comments

Comments
 (0)