Microsoft.OperationalInsights workspaces/savedSearches 2020-08-01

The workspaces/savedSearches resource type can be deployed to: Resource groups.

To learn about resource group deployments, see Bicep or ARM template.

Template format

To create a Microsoft.OperationalInsights/workspaces/savedSearches resource, add the following Bicep or JSON to your template.

resource symbolicname 'Microsoft.OperationalInsights/workspaces/savedSearches@2020-08-01' = {
  name: 'string'
  parent: parentSymbolicName
  etag: 'string'
  properties: {
    category: 'string'
    displayName: 'string'
    functionAlias: 'string'
    functionParameters: 'string'
    query: 'string'
    tags: [
      {
        tagName1: 'tagValue1'
        tagName2: 'tagValue2'
      }
        name: 'string'
        value: 'string'
      version: int
  }
}

Property values

workspaces/savedSearches

Name Description Value
type The resource type

For Bicep, set this value in the resource declaration.
'Microsoft.OperationalInsights/workspaces/savedSearches'
apiVersion The resource api version

For Bicep, set this value in the resource declaration.
'2020-08-01'
name The resource name

See how to set names and types for child resources in Bicep or JSON ARM templates.
string (required)
parent In Bicep, you can specify the parent resource for a child resource. You only need to add this property when the child resource is declared outside of the parent resource.

For more information, see Child resource outside parent resource.
parentSymbolicName
etag The ETag of the saved search. To override an existing saved search, use "*" or specify the current Etag string
properties Value object for saved search results. SavedSearchProperties (required)

SavedSearchProperties

Name Description Value
category The category of the saved search. This helps the user to find a saved search faster. string (required)
displayName Saved search display name. string (required)
functionAlias The function alias if query serves as a function. string
functionParameters The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to /azure/kusto/query/functions/user-defined-functions. string
query The query expression for the saved search. string (required)
tags The tags attached to the saved search. Dictionary of tag names and values. See Tags in templates
version The version number of the query language. The current version is 2 and is the default. int

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
OMS - Azure VM Inventory Solution

Deploy to Azure
Enables Azure VM Inventory Solution in OMS. Solution collects Azure VM inventory along with disks, networking components, NSG rules and extensions into OMS workspace.
OMS Kemp Application Delivery

Deploy to Azure
Kemp Application Delivery solution for OMS
OMS SCOM ACS Solution

Deploy to Azure
Adds the SCOM ACS custom Solution into an OMS Workspace