diff --git a/pipeline/outputs/azure_logs_ingestion.md b/pipeline/outputs/azure_logs_ingestion.md index 5dc01024a..d59dd4e06 100644 --- a/pipeline/outputs/azure_logs_ingestion.md +++ b/pipeline/outputs/azure_logs_ingestion.md @@ -25,15 +25,15 @@ To get more details about how to set up these components, refer to the following | Key | Description | Default | | :------------ | :------------------------- | :------ | -| `tenant_id` | The tenant ID of the Azure Active Directory (AAD) application. | _none_ | | `client_id` | The client ID of the AAD application. | _none_ | | `client_secret` | The client secret of the AAD application ([App Secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret)). | _none_ | -| `dce_url` | Data Collection Endpoint(DCE) URL. | _none_ | +| `compress` | Optional. Enable HTTP payload gzip compression. | `false` | +| `dce_url` | Data Collection Endpoint (DCE) URL. | _none_ | | `dcr_id` | Data Collection Rule (DCR) [immutable ID](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/tutorial-logs-ingestion-portal#collect-information-from-the-dcr). | _none_ | -| `table_name` | The name of the custom log table (include the `_CL` suffix as well if applicable) | _none_ | +| `table_name` | The name of the custom log table (include the `_CL` suffix as well if applicable). | _none_ | +| `tenant_id` | The tenant ID of the Azure Active Directory (AAD) application. | _none_ | +| `time_generated` | Optional. If enabled, will generate a timestamp and append it to JSON. The key name is set by the `time_key` parameter. | `false` | | `time_key` | Optional. Specify the key name where the timestamp will be stored. | `@timestamp` | -| `time_generated` | Optional. If enabled, will generate a timestamp and append it to JSON. The key name is set by the `time_key` parameter. | `true` | -| `compress` | Optional. Enable HTTP payload gzip compression. | `true` | | `workers` | The number of [workers](../../administration/multithreading.md#outputs) to perform flush operations for this output. | `0` | ## Get started @@ -119,14 +119,14 @@ pipeline: [OUTPUT] Name azure_logs_ingestion Match sample - client_id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz - client_secret some.secret.xxxzzz - tenant_id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz - dce_url https://log-analytics-dce-XXXX.region-code.ingest.monitor.azure.com - dcr_id dcr-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx - table_name ladcr_CL - time_generated true - time_key Time + Client_Id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz + Client_Secret some.secret.xxxzzz + Tenant_Id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz + Dce_Url https://log-analytics-dce-XXXX.region-code.ingest.monitor.azure.com + Dcr_Id dcr-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx + Table_Name ladcr_CL + Time_Generated true + Time_Key Time Compress true ```