The workspaces/savedSearches resource type can be deployed to:
For a list of changed properties in each API version, see change log.
To create a Microsoft.OperationalInsights/workspaces/savedSearches resource, add the following JSON to your template.
{
"type": "Microsoft.OperationalInsights/workspaces/savedSearches",
"apiVersion": "2020-08-01",
"name": "string",
"etag": "string",
"properties": {
"category": "string",
"displayName": "string",
"functionAlias": "string",
"functionParameters": "string",
"query": "string",
"tags": [
{
"name": "string",
"value": "string"
}
],
"version": "int"
}
}
Name | Description | Value |
---|---|---|
type | The resource type | 'Microsoft.OperationalInsights/workspaces/savedSearches' |
apiVersion | The resource api version | '2020-08-01' |
name | The resource name See how to set names and types for child resources in JSON ARM templates. |
string (required) |
etag | The ETag of the saved search. To override an existing saved search, use "*" or specify the current Etag | string |
properties | The properties of the saved search. | SavedSearchProperties (required) |
Name | Description | Value |
---|---|---|
category | The category of the saved search. This helps the user to find a saved search faster. | string (required) |
displayName | Saved search display name. | string (required) |
functionAlias | The function alias if query serves as a function. | string |
functionParameters | The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to /azure/kusto/query/functions/user-defined-functions. | string |
query | The query expression for the saved search. | string (required) |
tags | The tags attached to the saved search. | object |
version | The version number of the query language. The current version is 2 and is the default. | int |
The following quickstart templates deploy this resource type.
Template | Description |
---|---|
OMS - Azure VM Inventory Solution |
Enables Azure VM Inventory Solution in OMS. Solution collects Azure VM inventory along with disks, networking components, NSG rules and extensions into OMS workspace. |
OMS Kemp Application Delivery |
Kemp Application Delivery solution for OMS |
OMS SCOM ACS Solution |
Adds the SCOM ACS custom Solution into an OMS Workspace |