diff --git a/tools/config/ala-azure-activitylogs.yml b/tools/config/ala-azure-activitylogs.yml new file mode 100644 index 000000000..d02013f40 --- /dev/null +++ b/tools/config/ala-azure-activitylogs.yml @@ -0,0 +1,10 @@ +title: Azure Activity Logs mapping for Azure Log Analytics +order: 20 +backends: + - ala + - ala-rule +fieldmappings: + claims.name: Caller + properties.message: OperationNameValue + properties.eventCategory: CategoryValue + resourceProviderName.value: ResourceProviderValue