File tree Expand file tree Collapse file tree 1 file changed +0
-33
lines changed
Expand file tree Collapse file tree 1 file changed +0
-33
lines changed Original file line number Diff line number Diff line change @@ -591,27 +591,6 @@ module windowsVmDataCollectionRules 'br/public:avm/res/insights/data-collection-
591591 name : 'perfCounterDataSource60'
592592 }
593593 ]
594- windowsEventLogs : [
595- {
596- name : 'SecurityAuditEvents'
597- streams : [
598- 'Microsoft-WindowsEvent'
599- ]
600- xPathQueries : [
601- 'Security!*[System[(EventID=4624 or EventID=4625)]]'
602- ]
603- }
604- {
605- name : 'AppAndSystemEvents'
606- streams : [
607- 'Microsoft-WindowsEvent'
608- ]
609- xPathQueries : [
610- 'Application!*[System[(Level=1 or Level=2 or Level=3)]]'
611- 'System!*[System[(Level=1 or Level=2 or Level=3)]]'
612- ]
613- }
614- ]
615594 }
616595 destinations : {
617596 logAnalytics : [
@@ -629,18 +608,6 @@ module windowsVmDataCollectionRules 'br/public:avm/res/insights/data-collection-
629608 destinations : [
630609 'la-${dataCollectionRulesResourceName }'
631610 ]
632- transformKql : 'source'
633- outputStream : 'Microsoft-Perf'
634- }
635- {
636- streams : [
637- 'Microsoft-WindowsEvent'
638- ]
639- destinations : [
640- 'la-${dataCollectionRulesResourceName }'
641- ]
642- transformKql : 'source'
643- outputStream : 'Microsoft-WindowsEvent'
644611 }
645612 ]
646613 }
You can’t perform that action at this time.
0 commit comments