Microsoft.OperationalInsights (preview:2021-12-01)

2025/10/23 • 15 new, 15 deleted methods

Operations_List (new)
Description Lists all of the available OperationalInsights Rest API operations.
Reference Link ¶

⚼ Request

GET:  /providers/Microsoft.OperationalInsights/operations
{
api-version: string ,
}

⚐ Response (200)

{
value:
[
{
name: string ,
display:
{
provider: string ,
resource: string ,
operation: string ,
description: string ,
}
,
}
,
]
,
nextLink: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_ListByWorkspace (new)
Description Gets all the tables for the specified Log Analytics workspace.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_CreateOrUpdate (new)
Description Update or Create a Log Analytics workspace table.
Reference Link ¶

⚼ Request

PUT:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
parameters:
{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}
,
}

⚐ Response (200)

{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Update (new)
Description Update a Log Analytics workspace table.
Reference Link ¶

⚼ Request

PATCH:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
parameters:
{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}
,
}

⚐ Response (200)

{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Get (new)
Description Gets a Log Analytics workspace table.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
}

⚐ Response (200)

{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Delete (new)
Description Delete a Log Analytics workspace table.
Reference Link ¶

⚼ Request

DELETE:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
}

⚐ Response (200)

{}

⚐ Response (204)

{}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Migrate (new)
Description Migrate a Log Analytics table from support of the Data Collector API and Custom Fields features to support of Data Collection Rule-based Custom Logs.
Reference Link ¶

⚼ Request

POST:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}/migrate
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
}

⚐ Response (200)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_List (new)
Description Gets the workspaces in a subscription.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/workspaces
{
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_ListByResourceGroup (new)
Description Gets workspaces in a resource group.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces
{
resourceGroupName: string ,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_CreateOrUpdate (new)
Description Create or update a workspace.
Reference Link ¶

⚼ Request

PUT:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
parameters:
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (201)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_Delete (new)
Description Deletes a workspace resource. To recover the workspace, create it again with the same name, in the same subscription, resource group and location. The name is kept for 14 days and cannot be used for another workspace. To remove the workspace completely and release the name, use the force flag.
Reference Link ¶

⚼ Request

DELETE:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
subscriptionId: string ,
force: boolean ,
}

⚐ Response (200)

{}

⚐ Response (202)

{}

⚐ Response (204)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_Get (new)
Description Gets a workspace instance.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_Update (new)
Description Updates a workspace.
Reference Link ¶

⚼ Request

PATCH:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
parameters:
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
tags: object ,
}
,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
DeletedWorkspaces_List (new)
Description Gets recently deleted workspaces in a subscription, available for recovery.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/deletedWorkspaces
{
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
DeletedWorkspaces_ListByResourceGroup (new)
Description Gets recently deleted workspaces in a resource group, available for recovery.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/deletedWorkspaces
{
resourceGroupName: string ,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Operations_List (removed)
Description Lists all of the available OperationalInsights Rest API operations.
Reference Link ¶

⚼ Request

GET:  /providers/Microsoft.OperationalInsights/operations
{
api-version: string ,
}

⚐ Response (200)

{
value:
[
{
name: string ,
display:
{
provider: string ,
resource: string ,
operation: string ,
description: string ,
}
,
}
,
]
,
nextLink: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_ListByWorkspace (removed)
Description Gets all the tables for the specified Log Analytics workspace.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_CreateOrUpdate (removed)
Description Update or Create a Log Analytics workspace table.
Reference Link ¶

⚼ Request

PUT:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
parameters:
{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}
,
}

⚐ Response (200)

{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Update (removed)
Description Update a Log Analytics workspace table.
Reference Link ¶

⚼ Request

PATCH:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
parameters:
{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}
,
}

⚐ Response (200)

{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Get (removed)
Description Gets a Log Analytics workspace table.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
}

⚐ Response (200)

{
properties:
{
retentionInDays: integer ,
totalRetentionInDays: integer ,
archiveRetentionInDays: integer ,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
resultStatistics:
{
progress: number ,
ingestedRecords: integer ,
}
,
plan: enum ,
lastPlanModifiedDate: string ,
schema:
{
name: string ,
displayName: string ,
description: string ,
columns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
standardColumns:
[
{
name: string ,
type: enum ,
dataTypeHint: enum ,
displayName: string ,
description: string ,
isDefaultDisplay: boolean ,
isHidden: boolean ,
}
,
]
,
categories:
[
string ,
]
,
labels:
[
string ,
]
,
source: enum ,
tableType: enum ,
tableSubType: enum ,
solutions:
[
string ,
]
,
searchResults:
{
query: string ,
description: string ,
limit: integer ,
startSearchTime: string ,
endSearchTime: string ,
sourceTable: string ,
}
,
restoredLogs:
{
startRestoreTime: string ,
endRestoreTime: string ,
sourceTable: string ,
}
,
}
,
provisioningState: enum ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Delete (removed)
Description Delete a Log Analytics workspace table.
Reference Link ¶

⚼ Request

DELETE:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
}

⚐ Response (200)

{}

⚐ Response (204)

{}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Tables_Migrate (removed)
Description Migrate a Log Analytics table from support of the Data Collector API and Custom Fields features to support of Data Collection Rule-based Custom Logs.
Reference Link ¶

⚼ Request

POST:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/tables/{tableName}/migrate
{
subscriptionId: string ,
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
tableName: string ,
}

⚐ Response (200)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_List (removed)
Description Gets the workspaces in a subscription.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/workspaces
{
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_ListByResourceGroup (removed)
Description Gets workspaces in a resource group.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces
{
resourceGroupName: string ,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_CreateOrUpdate (removed)
Description Create or update a workspace.
Reference Link ¶

⚼ Request

PUT:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
parameters:
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (201)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (202)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_Delete (removed)
Description Deletes a workspace resource. To recover the workspace, create it again with the same name, in the same subscription, resource group and location. The name is kept for 14 days and cannot be used for another workspace. To remove the workspace completely and release the name, use the force flag.
Reference Link ¶

⚼ Request

DELETE:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
subscriptionId: string ,
force: boolean ,
}

⚐ Response (200)

{}

⚐ Response (202)

{}

⚐ Response (204)

{}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_Get (removed)
Description Gets a workspace instance.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
Workspaces_Update (removed)
Description Updates a workspace.
Reference Link ¶

⚼ Request

PATCH:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
{
resourceGroupName: string ,
workspaceName: string ,
parameters:
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
tags: object ,
}
,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
DeletedWorkspaces_List (removed)
Description Gets recently deleted workspaces in a subscription, available for recovery.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/deletedWorkspaces
{
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}
DeletedWorkspaces_ListByResourceGroup (removed)
Description Gets recently deleted workspaces in a resource group, available for recovery.
Reference Link ¶

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/deletedWorkspaces
{
resourceGroupName: string ,
api-version: string ,
subscriptionId: string ,
}

⚐ Response (200)

{
value:
[
{
properties:
{
provisioningState: enum ,
customerId: string ,
sku:
{
name: enum ,
capacityReservationLevel: integer ,
lastSkuUpdate: string ,
}
,
retentionInDays: integer ,
workspaceCapping:
{
dailyQuotaGb: number ,
quotaNextResetTime: string ,
dataIngestionStatus: enum ,
}
,
createdDate: string ,
modifiedDate: string ,
publicNetworkAccessForIngestion: enum ,
publicNetworkAccessForQuery: enum ,
forceCmkForQuery: boolean ,
privateLinkScopedResources:
[
{
resourceId: string ,
scopeId: string ,
}
,
]
,
features:
{
enableDataExport: boolean ,
immediatePurgeDataOn30Days: boolean ,
enableLogAccessUsingOnlyResourcePermissions: boolean ,
clusterResourceId: string ,
disableLocalAuth: boolean ,
}
,
defaultDataCollectionRuleResourceId: string ,
}
,
systemData:
{
createdBy: string ,
createdByType: enum ,
createdAt: string ,
lastModifiedBy: string ,
lastModifiedByType: enum ,
lastModifiedAt: string ,
}
,
eTag: string ,
}
,
]
,
}

⚐ Response (default)

{
error:
{
code: string ,
message: string ,
target: string ,
details:
[
{
code: string ,
message: string ,
target: string ,
details:
[
string ,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
]
,
additionalInfo:
[
{
type: string ,
info: object ,
}
,
]
,
}
,
}