Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 13 additions & 13 deletions pipeline/outputs/azure_logs_ingestion.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,15 +25,15 @@ To get more details about how to set up these components, refer to the following

| Key | Description | Default |
| :------------ | :------------------------- | :------ |
| `tenant_id` | The tenant ID of the Azure Active Directory (AAD) application. | _none_ |
| `client_id` | The client ID of the AAD application. | _none_ |
| `client_secret` | The client secret of the AAD application ([App Secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret)). | _none_ |
| `dce_url` | Data Collection Endpoint(DCE) URL. | _none_ |
| `compress` | Optional. Enable HTTP payload gzip compression. | `false` |
| `dce_url` | Data Collection Endpoint (DCE) URL. | _none_ |
| `dcr_id` | Data Collection Rule (DCR) [immutable ID](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/tutorial-logs-ingestion-portal#collect-information-from-the-dcr). | _none_ |
| `table_name` | The name of the custom log table (include the `_CL` suffix as well if applicable) | _none_ |
| `table_name` | The name of the custom log table (include the `_CL` suffix as well if applicable). | _none_ |
| `tenant_id` | The tenant ID of the Azure Active Directory (AAD) application. | _none_ |
| `time_generated` | Optional. If enabled, will generate a timestamp and append it to JSON. The key name is set by the `time_key` parameter. | `false` |
| `time_key` | Optional. Specify the key name where the timestamp will be stored. | `@timestamp` |
| `time_generated` | Optional. If enabled, will generate a timestamp and append it to JSON. The key name is set by the `time_key` parameter. | `true` |
| `compress` | Optional. Enable HTTP payload gzip compression. | `true` |
| `workers` | The number of [workers](../../administration/multithreading.md#outputs) to perform flush operations for this output. | `0` |

## Get started
Expand Down Expand Up @@ -119,14 +119,14 @@ pipeline:
[OUTPUT]
Name azure_logs_ingestion
Match sample
client_id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz
client_secret some.secret.xxxzzz
tenant_id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz
dce_url https://log-analytics-dce-XXXX.region-code.ingest.monitor.azure.com
dcr_id dcr-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
table_name ladcr_CL
time_generated true
time_key Time
Client_Id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz
Client_Secret some.secret.xxxzzz
Tenant_Id XXXXXXXX-xxxx-yyyy-zzzz-xxxxyyyyzzzzxyzz
Dce_Url https://log-analytics-dce-XXXX.region-code.ingest.monitor.azure.com
Dcr_Id dcr-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Table_Name ladcr_CL
Time_Generated true
Time_Key Time
Compress true
```

Expand Down
Loading