New-AzureRmOperationalInsightsAzureActivityLogDataSource

Collect Azure Activity log from given subscription.

Important

Because Az PowerShell modules now have all the capabilities of AzureRM PowerShell modules and more, we'll retire AzureRM PowerShell modules on 29 February 2024.

To avoid service interruptions, update your scripts that use AzureRM PowerShell modules to use Az PowerShell modules by 29 February 2024. To automatically update your scripts, follow the quickstart guide.

Syntax

New-AzureRmOperationalInsightsAzureActivityLogDataSource
   [-ResourceGroupName] <String>
   [-WorkspaceName] <String>
   [-Name] <String>
   [-SubscriptionId] <String>
   [-BackfillStartTime <DateTimeOffset>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]
New-AzureRmOperationalInsightsAzureActivityLogDataSource
   [-Workspace] <PSWorkspace>
   [-Name] <String>
   [-SubscriptionId] <String>
   [-BackfillStartTime <DateTimeOffset>]
   [-Force]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The New-AzureRmOperationalInsightsAzureActivityLogDataSource enable Log Analytics to collect Azure activity log from given subscription.

Examples

Example 1

PS C:\> {{ Add example code here }}

{{ Add example description here }}

Parameters

-BackfillStartTime

You can choose to backfill logs from a week ago.

Type:DateTimeOffset
Position:Named
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-DefaultProfile

The credentials, account, tenant, and subscription used for communication with azure

Type:Microsoft.Azure.Commands.Common.Authentication.Abstractions.IAzureContextContainer
Aliases:AzureRmContext, AzureCredential
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Force
Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Name
Type:String
Position:3
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-ResourceGroupName
Type:String
Position:1
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-SubscriptionId
Type:String
Position:4
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-WhatIf
Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Workspace
Type:PSWorkspace
Position:0
Default value:None
Accept pipeline input:True
Accept wildcard characters:False
-WorkspaceName
Type:String
Position:2
Default value:None
Accept pipeline input:True
Accept wildcard characters:False

Inputs

PSWorkspace

Parameters: Workspace (ByValue)

String

DateTimeOffset

Outputs

PSDataSource