Microsoft.OperationalInsights workspaces/savedSearches 2020-03-01-preview

Template format

To create a Microsoft.OperationalInsights/workspaces/savedSearches resource, add the following JSON to the resources section of your template.

{
  "name": "string",
  "type": "Microsoft.OperationalInsights/workspaces/savedSearches",
  "apiVersion": "2020-03-01-preview",
  "properties": {
    "category": "string",
    "displayName": "string",
    "query": "string",
    "functionAlias": "string",
    "functionParameters": "string",
    "version": "integer",
    "tags": [
      {
        "name": "string",
        "value": "string"
      }
    ]
  }
}

Property values

The following tables describe the values you need to set in the schema.

Microsoft.OperationalInsights/workspaces/savedSearches object

Name Type Required Value
name string Yes The id of the saved search.
type enum Yes savedSearches
-or-
Microsoft.OperationalInsights/workspaces/savedSearches

See Set name and type for child resources.
apiVersion enum Yes 2020-03-01-preview
properties object Yes The properties of the saved search. - SavedSearchProperties object

SavedSearchProperties object

Name Type Required Value
category string Yes The category of the saved search. This helps the user to find a saved search faster.
displayName string Yes Saved search display name.
query string Yes The query expression for the saved search.
functionAlias string No The function alias if query serves as a function.
functionParameters string No The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to https://docs.microsoft.com/azure/kusto/query/functions/user-defined-functions.
version integer No The version number of the query language. The current version is 2 and is the default.
tags array No The tags attached to the saved search. - Tag object

Tag object

Name Type Required Value
name string Yes The tag name.
value string Yes The tag value.

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
OMS - Azure VM Inventory Solution

Deploy to Azure
Enables Azure VM Inventory Solution in OMS. Solution collects Azure VM inventory along with disks, networking components, NSG rules and extensions into OMS workspace.
OMS Kemp Application Delivery

Deploy to Azure
Kemp Application Delivery solution for OMS
OMS SCOM ACS Solution

Deploy to Azure
Adds the SCOM ACS custom Solution into an OMS Workspace