capability

Data Collection Rules at Scale

Data Collection Rules and Data Collection Endpoints control Azure Monitor data collection, transformation, routing, and association at scale for Sentinel-connected resources and custom logs.

capabilitiesCurrent

Relationships

Microsoft Sentinel
Source productproductMicrosoft Sentinel REST API
API accessapiAzure Monitor Logs Ingestion API
API accessapi

Configuration Methods

MethodSupportReference or Gap
PortalSupported Reference
PowerShellGapUse ARM, Azure CLI, REST, or Terraform for DCR/DCRA deployment in this reference; no PowerShell-first workflow is modeled here.
REST APISupported Reference
GraphGapData Collection Rules are Azure Monitor ARM resources, not Microsoft Graph resources.
ARMSupported Reference
BicepSupported Reference
TerraformSupportedazurermazurerm_monitor_data_collection_rule Reference

Pair with azurerm_monitor_data_collection_endpoint and azurerm_monitor_data_collection_rule_association for endpoint and resource association coverage.

GitHub ActionsSupported Reference
Azure DevOpsSupported Reference