New-AzureRmOperationalInsightsAzureActivityLogDataSource

Collect Azure Activity log from given subscription.

Important

You've reached a webpage for an outdated version of Azure PowerShell. All versions of the AzureRM PowerShell module are outdated, but not out of support. The Az PowerShell module is now the recommended PowerShell module for interacting with Azure. To get started with the Az PowerShell module, see Install Azure PowerShell. To learn how to migrate to the Az PowerShell module, see Migrate Azure PowerShell from AzureRM to Az.

Syntax

New-AzureRmOperationalInsightsAzureActivityLogDataSource
   [-ResourceGroupName] <String>
   [-WorkspaceName] <String>
   [-Name] <String>
   [-SubscriptionId] <String>
   [-BackfillStartTime <DateTimeOffset>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]
New-AzureRmOperationalInsightsAzureActivityLogDataSource
   [-Workspace] <PSWorkspace>
   [-Name] <String>
   [-SubscriptionId] <String>
   [-BackfillStartTime <DateTimeOffset>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The New-AzureRmOperationalInsightsAzureActivityLogDataSource enable Log Analytics to collect Azure activity log from given subscription.

Examples

Example 1

PS C:\> {{ Add example code here }}

{{ Add example description here }}

Parameters

-BackfillStartTime

You can choose to backfill logs from a week ago.

Type:DateTimeOffset
Position:Named
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DefaultProfile

The credentials, account, tenant, and subscription used for communication with azure

Type:Microsoft.Azure.Commands.Common.Authentication.Abstractions.IAzureContextContainer
Aliases:AzureRmContext, AzureCredential
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Force
Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Name
Type:String
Position:3
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-ResourceGroupName
Type:String
Position:1
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-SubscriptionId
Type:String
Position:4
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-WhatIf
Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Workspace
Type:PSWorkspace
Position:0
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-WorkspaceName
Type:String
Position:2
Default value:None
Accept pipeline input:True
Accept wildcard characters:False

Inputs

PSWorkspace

Parameters: Workspace (ByValue)

String

DateTimeOffset

Outputs

PSDataSource