swagger: "2.0"
schemes:
  - https
host: management.azure.com
info:
  description: Azure Log Analytics API reference
  title: Azure Log Analytics
  version: 2015-11-01-preview
  x-apisguru-categories:
    - cloud
  x-logo:
    url: https://api.apis.guru/v2/cache/logo/https_assets.onestore.ms_cdnfiles_onestorerolling-1606-01000_shell_v3_images_logo_microsoft.png
  x-origin:
    - format: swagger
      url: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/specification/operationalinsights/resource-manager/Microsoft.OperationalInsights/preview/2015-11-01-preview/OperationalInsights.json
      version: "2.0"
  x-preferred: true
  x-providerName: azure.com
  x-serviceName: operationalinsights-OperationalInsights
  x-tags:
    - Azure
    - Microsoft
consumes:
  - application/json
produces:
  - application/json
securityDefinitions:
  azure_auth:
    authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
    description: Azure Active Directory OAuth2 Flow
    flow: implicit
    scopes:
      user_impersonation: impersonate your user account
    type: oauth2
security:
  - azure_auth:
      - user_impersonation
parameters:
  ApiVersionParameter:
    description: Client Api Version.
    in: query
    name: api-version
    required: true
    type: string
  ResourceGroupNameParameter:
    description: The name of the resource group to get. The name is case insensitive.
    in: path
    maxLength: 90
    minLength: 1
    name: resourceGroupName
    pattern: ^[-\w\._\(\)]+$
    required: true
    type: string
    x-ms-parameter-location: method
  SubscriptionIdParameter:
    description: Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.
    in: path
    name: subscriptionId
    required: true
    type: string
paths:
  /providers/Microsoft.OperationalInsights/operations:
    get:
      description: Lists all of the available OperationalInsights Rest API operations.
      operationId: Operations_List
      parameters:
        - $ref: "#/parameters/ApiVersionParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/OperationListResult"
      tags:
        - Operations
      x-ms-pageable:
        nextLinkName: nextLink
  "/subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/workspaces":
    get:
      description: Gets the workspaces in a subscription.
      operationId: Workspaces_List
      parameters:
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/WorkspaceListResult"
      tags:
        - Workspaces
      x-ms-examples:
        WorkspacesSubscriptionList:
          parameters:
            api-version: 2015-11-01-preview
            subscriptionId: 00000000-0000-0000-0000-00000000000
          responses:
            "200":
              body:
                - id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170
                  location: australiasoutheast
                  name: AzTest2170
                  properties:
                    customerId: bc089d7b-485c-4aff-a71e-c00f362d8d2f
                    portalUrl: https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170
                    provisioningState: Succeeded
                    retentionInDays: 30
                    sku:
                      name: pernode
                    source: Azure
                  tags:
                    tag1: val1
                  type: Microsoft.OperationalInsights/workspaces
      x-ms-pageable:
        nextLinkName: null
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces":
    get:
      description: Gets workspaces in a resource group.
      operationId: Workspaces_ListByResourceGroup
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/WorkspaceListResult"
      tags:
        - Workspaces
      x-ms-examples:
        WorkspacesGet:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: oiautorest6685
            subscriptionId: 00000000-0000-0000-0000-00000000000
          responses:
            "200":
              body:
                - id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170
                  location: australiasoutheast
                  name: AzTest2170
                  properties:
                    customerId: bc089d7b-485c-4aff-a71e-c00f362d8d2f
                    portalUrl: https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170
                    provisioningState: Succeeded
                    retentionInDays: 30
                    sku:
                      name: pernode
                    source: Azure
                  tags:
                    tag1: val1
                  type: Microsoft.OperationalInsights/workspaces
      x-ms-pageable:
        nextLinkName: null
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}":
    delete:
      description: Deletes a workspace instance.
      operationId: Workspaces_Delete
      parameters:
        - description: The resource group name of the workspace.
          in: path
          name: resourceGroupName
          required: true
          type: string
        - description: Name of the Log Analytics Workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
        "204":
          description: NoContent response definition.
      tags:
        - Workspaces
      x-ms-examples:
        WorkspacesDelete:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: oiautorest6685
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: oiautorest6685
          responses:
            "200": {}
            "204": {}
    get:
      description: Gets a workspace instance.
      operationId: Workspaces_Get
      parameters:
        - description: The resource group name of the workspace.
          in: path
          name: resourceGroupName
          required: true
          type: string
        - description: Name of the Log Analytics Workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/Workspace"
      tags:
        - Workspaces
      x-ms-examples:
        WorkspaceGet:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: oiautorest6685
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: oiautorest6685
          responses:
            "200":
              body:
                - id: /subscriptions/594038b5-1093-476e-a366-482775671c11/resourcegroups/calbot-rg/providers/microsoft.operationalinsights/workspaces/testresourcelock
                  location: eastus
                  name: TestResourceLock
                  properties:
                    customerId: 5b02755b-5bf4-430c-9487-45502a2a7e62
                    portalUrl: https://eus.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f594038b5-1093-476e-a366-482775671c11%2fresourcegroups%2fcalbot-rg%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2ftestresourcelock
                    provisioningState: Succeeded
                    retentionInDays: 7
                    sku:
                      name: free
                    source: Azure
                  type: Microsoft.OperationalInsights/workspaces
                - id: /subscriptions/594038b5-1093-476e-a366-482775671c11/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/southukws
                  location: East US
                  name: SouthUKWS
                  properties:
                    customerId: 4884a2fd-b08f-4aa6-bf16-5757df1093fe
                    portalUrl: https://eus.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f594038b5-1093-476e-a366-482775671c11%2fresourcegroups%2fmms-eus%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2fsouthukws
                    provisioningState: Succeeded
                    retentionInDays: 7
                    sku:
                      name: free
                    source: External
                  type: Microsoft.OperationalInsights/workspaces
    patch:
      description: Updates a workspace.
      operationId: Workspaces_Update
      parameters:
        - description: The resource group name of the workspace.
          in: path
          name: resourceGroupName
          required: true
          type: string
        - description: The name of the workspace.
          in: path
          maxLength: 63
          minLength: 4
          name: workspaceName
          pattern: ^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$
          required: true
          type: string
        - description: The parameters required to patch a workspace.
          in: body
          name: parameters
          required: true
          schema:
            $ref: "#/definitions/Workspace"
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: The existing workspace was successfully updated. Check provisioningStatus to see detailed status.
          schema:
            $ref: "#/definitions/Workspace"
      tags:
        - Workspaces
      x-ms-examples:
        WorkspacesPatch:
          parameters:
            api-version: 2015-11-01-preview
            parameters:
              location: australiasoutheast
              properties:
                retentionInDays: 30
                sku:
                  name: PerNode
            resourceGroupName: oiautorest6685
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: oiautorest6685
          responses:
            "200":
              body:
                location: australiasoutheast
                properties:
                  retentionInDays: 30
                  sku:
                    name: PerNode
                tags:
                  tag1: val1
    put:
      description: Create or update a workspace.
      operationId: Workspaces_CreateOrUpdate
      parameters:
        - description: The resource group name of the workspace.
          in: path
          name: resourceGroupName
          required: true
          type: string
        - description: The name of the workspace.
          in: path
          maxLength: 63
          minLength: 4
          name: workspaceName
          pattern: ^[A-Za-z0-9][A-Za-z0-9-]+[A-Za-z0-9]$
          required: true
          type: string
        - description: The parameters required to create or update a workspace.
          in: body
          name: parameters
          required: true
          schema:
            $ref: "#/definitions/Workspace"
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/Workspace"
        "201":
          description: Created response definition.
          schema:
            $ref: "#/definitions/Workspace"
      tags:
        - Workspaces
      x-ms-examples:
        WorkspacesCreate:
          parameters:
            api-version: 2015-11-01-preview
            parameters:
              location: australiasoutheast
              properties:
                retentionInDays: 30
                sku:
                  name: PerNode
              tags:
                tag1: val1
            resourceGroupName: oiautorest6685
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: oiautorest6685
          responses:
            "200":
              body:
                id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170
                location: australiasoutheast
                name: AzTest2170
                properties:
                  customerId: bc089d7b-485c-4aff-a71e-c00f362d8d2f
                  portalUrl: https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170
                  provisioningState: Creating
                  retentionInDays: 30
                  sku:
                    name: PerNode
                  source: Azure
                tags:
                  tag1: val1
                type: Microsoft.OperationalInsights/workspaces
            "201":
              body:
                id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/oiautorest6685/providers/microsoft.operationalinsights/workspaces/aztest2170
                location: australiasoutheast
                name: AzTest2170
                properties:
                  customerId: bc089d7b-485c-4aff-a71e-c00f362d8d2f
                  portalUrl: https://seau.mms.microsoft.com/Account?tenant=72f988bf-86f1-41af-91ab-2d7cd011db47&resource=%2fsubscriptions%2f00000000-0000-0000-0000-000000000005%2fresourcegroups%2foiautorest6685%2fproviders%2fmicrosoft.operationalinsights%2fworkspaces%2faztest2170
                  provisioningState: Creating
                  retentionInDays: 30
                  sku:
                    name: PerNode
                  source: Azure
                tags:
                  tag1: val1
                type: Microsoft.OperationalInsights/workspaces
      x-ms-long-running-operation: true
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources":
    get:
      description: Gets the first page of data source instances in a workspace with the link to the next page.
      operationId: DataSources_ListByWorkspace
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: The workspace that contains the data sources.
          in: path
          name: workspaceName
          required: true
          type: string
        - description: The filter to apply on the operation.
          in: query
          name: $filter
          required: true
          type: string
        - description: Starting point of the collection of data source instances.
          in: query
          name: $skiptoken
          required: false
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/DataSourceListResult"
      tags:
        - DataSources
      x-ms-examples:
        DataSourcesListByWorkspace:
          parameters:
            $filter: kind='WindowsEvent'
            api-version: 2015-11-01-preview
            dataSourceName: AzTestDS774
            resourceGroupName: OIAutoRest5123
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: AzTest9724
          responses:
            "200":
              body:
                nextLink: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/dataSources?$filter=kind+eq+'WindowsEvent'&api-version=2015-11-01-preview&$skiptoken=AzTestDSWE7191
                value:
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A08.5629323Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1011
                    kind: WindowsEvent
                    name: AzTestDSWE1011
                    properties:
                      eventLogName: windowsEvent14
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A22.2533211Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1013
                    kind: WindowsEvent
                    name: AzTestDSWE1013
                    properties:
                      eventLogName: windowsEvent64
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A04.4645698Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1020
                    kind: WindowsEvent
                    name: AzTestDSWE1020
                    properties:
                      eventLogName: windowsEvent202
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A12.5871672Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1074
                    kind: WindowsEvent
                    name: AzTestDSWE1074
                    properties:
                      eventLogName: windowsEvent231
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A28.9325389Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1117
                    kind: WindowsEvent
                    name: AzTestDSWE1117
                    properties:
                      eventLogName: windowsEvent86
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A13.2185735Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1128
                    kind: WindowsEvent
                    name: AzTestDSWE1128
                    properties:
                      eventLogName: windowsEvent30
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A22.7779289Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1176
                    kind: WindowsEvent
                    name: AzTestDSWE1176
                    properties:
                      eventLogName: windowsEvent66
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A03.5114136Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1293
                    kind: WindowsEvent
                    name: AzTestDSWE1293
                    properties:
                      eventLogName: windowsEvent199
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A33.6788897Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE134
                    kind: WindowsEvent
                    name: AzTestDSWE134
                    properties:
                      eventLogName: windowsEvent102
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A36.2312139Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1352
                    kind: WindowsEvent
                    name: AzTestDSWE1352
                    properties:
                      eventLogName: windowsEvent111
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A13.4685716Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1360
                    kind: WindowsEvent
                    name: AzTestDSWE1360
                    properties:
                      eventLogName: windowsEvent31
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A19.2840543Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1382
                    kind: WindowsEvent
                    name: AzTestDSWE1382
                    properties:
                      eventLogName: windowsEvent53
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A42.7070374Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1410
                    kind: WindowsEvent
                    name: AzTestDSWE1410
                    properties:
                      eventLogName: windowsEvent132
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A06.8922838Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1417
                    kind: WindowsEvent
                    name: AzTestDSWE1417
                    properties:
                      eventLogName: windowsEvent211
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A26.6932412Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1560
                    kind: WindowsEvent
                    name: AzTestDSWE1560
                    properties:
                      eventLogName: windowsEvent274
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A07.1422661Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1618
                    kind: WindowsEvent
                    name: AzTestDSWE1618
                    properties:
                      eventLogName: windowsEvent212
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A09.5980265Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1662
                    kind: WindowsEvent
                    name: AzTestDSWE1662
                    properties:
                      eventLogName: windowsEvent221
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A39.6167744Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1675
                    kind: WindowsEvent
                    name: AzTestDSWE1675
                    properties:
                      eventLogName: windowsEvent121
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A50.1064668Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE169
                    kind: WindowsEvent
                    name: AzTestDSWE169
                    properties:
                      eventLogName: windowsEvent157
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A02.4954752Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1735
                    kind: WindowsEvent
                    name: AzTestDSWE1735
                    properties:
                      eventLogName: windowsEvent196
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A08.0452997Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1742
                    kind: WindowsEvent
                    name: AzTestDSWE1742
                    properties:
                      eventLogName: windowsEvent12
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A46.5966089Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1815
                    kind: WindowsEvent
                    name: AzTestDSWE1815
                    properties:
                      eventLogName: windowsEvent145
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A23.6529754Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1828
                    kind: WindowsEvent
                    name: AzTestDSWE1828
                    properties:
                      eventLogName: windowsEvent69
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A20.7216320Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE188
                    kind: WindowsEvent
                    name: AzTestDSWE188
                    properties:
                      eventLogName: windowsEvent58
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A17.9341560Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1962
                    kind: WindowsEvent
                    name: AzTestDSWE1962
                    properties:
                      eventLogName: windowsEvent48
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A17.3081821Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE1997
                    kind: WindowsEvent
                    name: AzTestDSWE1997
                    properties:
                      eventLogName: windowsEvent246
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A49.2918213Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2046
                    kind: WindowsEvent
                    name: AzTestDSWE2046
                    properties:
                      eventLogName: windowsEvent154
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A52.4111189Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2056
                    kind: WindowsEvent
                    name: AzTestDSWE2056
                    properties:
                      eventLogName: windowsEvent165
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A54.7598026Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2116
                    kind: WindowsEvent
                    name: AzTestDSWE2116
                    properties:
                      eventLogName: windowsEvent172
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A07.2711237Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2142
                    kind: WindowsEvent
                    name: AzTestDSWE2142
                    properties:
                      eventLogName: windowsEvent9
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A48.2064500Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE22
                    kind: WindowsEvent
                    name: AzTestDSWE22
                    properties:
                      eventLogName: windowsEvent150
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A08.7849248Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2208
                    kind: WindowsEvent
                    name: AzTestDSWE2208
                    properties:
                      eventLogName: windowsEvent218
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A51.3306230Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2221
                    kind: WindowsEvent
                    name: AzTestDSWE2221
                    properties:
                      eventLogName: windowsEvent161
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A25.5991266Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2226
                    kind: WindowsEvent
                    name: AzTestDSWE2226
                    properties:
                      eventLogName: windowsEvent75
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A15.3592513Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2231
                    kind: WindowsEvent
                    name: AzTestDSWE2231
                    properties:
                      eventLogName: windowsEvent38
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A06.0641077Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2242
                    kind: WindowsEvent
                    name: AzTestDSWE2242
                    properties:
                      eventLogName: windowsEvent208
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A11.7829226Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2263
                    kind: WindowsEvent
                    name: AzTestDSWE2263
                    properties:
                      eventLogName: windowsEvent228
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A21.5874093Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2369
                    kind: WindowsEvent
                    name: AzTestDSWE2369
                    properties:
                      eventLogName: windowsEvent259
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A06.6266574Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE240
                    kind: WindowsEvent
                    name: AzTestDSWE240
                    properties:
                      eventLogName: windowsEvent210
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A23.4752361Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2423
                    kind: WindowsEvent
                    name: AzTestDSWE2423
                    properties:
                      eventLogName: windowsEvent265
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A36.5611370Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2463
                    kind: WindowsEvent
                    name: AzTestDSWE2463
                    properties:
                      eventLogName: windowsEvent112
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A13.7187131Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2499
                    kind: WindowsEvent
                    name: AzTestDSWE2499
                    properties:
                      eventLogName: windowsEvent32
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A09.3324224Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2509
                    kind: WindowsEvent
                    name: AzTestDSWE2509
                    properties:
                      eventLogName: windowsEvent220
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A29.2312540Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2541
                    kind: WindowsEvent
                    name: AzTestDSWE2541
                    properties:
                      eventLogName: windowsEvent87
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A05.3117461Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2578
                    kind: WindowsEvent
                    name: AzTestDSWE2578
                    properties:
                      eventLogName: windowsEvent2
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A38.5379572Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2619
                    kind: WindowsEvent
                    name: AzTestDSWE2619
                    properties:
                      eventLogName: windowsEvent119
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A05.0735592Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE274
                    kind: WindowsEvent
                    name: AzTestDSWE274
                    properties:
                      eventLogName: windowsEvent1
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A30.6297451Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2754
                    kind: WindowsEvent
                    name: AzTestDSWE2754
                    properties:
                      eventLogName: windowsEvent92
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A05.2972963Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE281
                    kind: WindowsEvent
                    name: AzTestDSWE281
                    properties:
                      eventLogName: windowsEvent205
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A33.3820072Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2818
                    kind: WindowsEvent
                    name: AzTestDSWE2818
                    properties:
                      eventLogName: windowsEvent101
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A14.0876077Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2860
                    kind: WindowsEvent
                    name: AzTestDSWE2860
                    properties:
                      eventLogName: windowsEvent236
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A30.9266089Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2867
                    kind: WindowsEvent
                    name: AzTestDSWE2867
                    properties:
                      eventLogName: windowsEvent93
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A27.9342580Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2923
                    kind: WindowsEvent
                    name: AzTestDSWE2923
                    properties:
                      eventLogName: windowsEvent278
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A44.4311007Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE2979
                    kind: WindowsEvent
                    name: AzTestDSWE2979
                    properties:
                      eventLogName: windowsEvent138
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A08.5349323Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3009
                    kind: WindowsEvent
                    name: AzTestDSWE3009
                    properties:
                      eventLogName: windowsEvent217
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A24.9696296Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3033
                    kind: WindowsEvent
                    name: AzTestDSWE3033
                    properties:
                      eventLogName: windowsEvent269
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A18.2006423Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3095
                    kind: WindowsEvent
                    name: AzTestDSWE3095
                    properties:
                      eventLogName: windowsEvent49
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A38.2879169Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3114
                    kind: WindowsEvent
                    name: AzTestDSWE3114
                    properties:
                      eventLogName: windowsEvent118
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A37.6889867Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3132
                    kind: WindowsEvent
                    name: AzTestDSWE3132
                    properties:
                      eventLogName: windowsEvent116
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A58.9331954Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3147
                    kind: WindowsEvent
                    name: AzTestDSWE3147
                    properties:
                      eventLogName: windowsEvent185
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A35.6843083Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3159
                    kind: WindowsEvent
                    name: AzTestDSWE3159
                    properties:
                      eventLogName: windowsEvent109
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A17.4118415Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE317
                    kind: WindowsEvent
                    name: AzTestDSWE317
                    properties:
                      eventLogName: windowsEvent46
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A35.0592573Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3175
                    kind: WindowsEvent
                    name: AzTestDSWE3175
                    properties:
                      eventLogName: windowsEvent107
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A12.6247906Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3183
                    kind: WindowsEvent
                    name: AzTestDSWE3183
                    properties:
                      eventLogName: windowsEvent28
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A14.4938899Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3217
                    kind: WindowsEvent
                    name: AzTestDSWE3217
                    properties:
                      eventLogName: windowsEvent237
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A21.7373059Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3220
                    kind: WindowsEvent
                    name: AzTestDSWE3220
                    properties:
                      eventLogName: windowsEvent62
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A18.7785353Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3228
                    kind: WindowsEvent
                    name: AzTestDSWE3228
                    properties:
                      eventLogName: windowsEvent51
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A54.4936956Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3395
                    kind: WindowsEvent
                    name: AzTestDSWE3395
                    properties:
                      eventLogName: windowsEvent171
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A22.0032694Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3416
                    kind: WindowsEvent
                    name: AzTestDSWE3416
                    properties:
                      eventLogName: windowsEvent63
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A28.8251658Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3506
                    kind: WindowsEvent
                    name: AzTestDSWE3506
                    properties:
                      eventLogName: windowsEvent280
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A11.2153209Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3517
                    kind: WindowsEvent
                    name: AzTestDSWE3517
                    properties:
                      eventLogName: windowsEvent23
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A12.0402565Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3528
                    kind: WindowsEvent
                    name: AzTestDSWE3528
                    properties:
                      eventLogName: windowsEvent229
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A43.8027590Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3530
                    kind: WindowsEvent
                    name: AzTestDSWE3530
                    properties:
                      eventLogName: windowsEvent136
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A01.9173304Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3594
                    kind: WindowsEvent
                    name: AzTestDSWE3594
                    properties:
                      eventLogName: windowsEvent194
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A00.8990889Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3615
                    kind: WindowsEvent
                    name: AzTestDSWE3615
                    properties:
                      eventLogName: windowsEvent191
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A16.0877829Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3645
                    kind: WindowsEvent
                    name: AzTestDSWE3645
                    properties:
                      eventLogName: windowsEvent242
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A07.8068460Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3676
                    kind: WindowsEvent
                    name: AzTestDSWE3676
                    properties:
                      eventLogName: windowsEvent11
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A49.5439700Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3700
                    kind: WindowsEvent
                    name: AzTestDSWE3700
                    properties:
                      eventLogName: windowsEvent155
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A38.0363694Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3738
                    kind: WindowsEvent
                    name: AzTestDSWE3738
                    properties:
                      eventLogName: windowsEvent117
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A50.6390339Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3740
                    kind: WindowsEvent
                    name: AzTestDSWE3740
                    properties:
                      eventLogName: windowsEvent159
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A31.5203823Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3754
                    kind: WindowsEvent
                    name: AzTestDSWE3754
                    properties:
                      eventLogName: windowsEvent95
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A31.7860159Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3761
                    kind: WindowsEvent
                    name: AzTestDSWE3761
                    properties:
                      eventLogName: windowsEvent96
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A20.0966078Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3787
                    kind: WindowsEvent
                    name: AzTestDSWE3787
                    properties:
                      eventLogName: windowsEvent56
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A57.8394298Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3880
                    kind: WindowsEvent
                    name: AzTestDSWE3880
                    properties:
                      eventLogName: windowsEvent181
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A51.0806178Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3887
                    kind: WindowsEvent
                    name: AzTestDSWE3887
                    properties:
                      eventLogName: windowsEvent160
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A16.6987634Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3899
                    kind: WindowsEvent
                    name: AzTestDSWE3899
                    properties:
                      eventLogName: windowsEvent244
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A41.4223363Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE3928
                    kind: WindowsEvent
                    name: AzTestDSWE3928
                    properties:
                      eventLogName: windowsEvent127
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A59.1831854Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4005
                    kind: WindowsEvent
                    name: AzTestDSWE4005
                    properties:
                      eventLogName: windowsEvent186
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A31.5314824Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4021
                    kind: WindowsEvent
                    name: AzTestDSWE4021
                    properties:
                      eventLogName: windowsEvent288
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A01.6667691Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4054
                    kind: WindowsEvent
                    name: AzTestDSWE4054
                    properties:
                      eventLogName: windowsEvent193
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A42.9581303Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE406
                    kind: WindowsEvent
                    name: AzTestDSWE406
                    properties:
                      eventLogName: windowsEvent133
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A29.4890798Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4128
                    kind: WindowsEvent
                    name: AzTestDSWE4128
                    properties:
                      eventLogName: windowsEvent88
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A00.2051432Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4140
                    kind: WindowsEvent
                    name: AzTestDSWE4140
                    properties:
                      eventLogName: windowsEvent189
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A58.3706603Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4209
                    kind: WindowsEvent
                    name: AzTestDSWE4209
                    properties:
                      eventLogName: windowsEvent183
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A23.1240354Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4216
                    kind: WindowsEvent
                    name: AzTestDSWE4216
                    properties:
                      eventLogName: windowsEvent67
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A33.5368097Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4240
                    kind: WindowsEvent
                    name: AzTestDSWE4240
                    properties:
                      eventLogName: windowsEvent294
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A30.3641074Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4279
                    kind: WindowsEvent
                    name: AzTestDSWE4279
                    properties:
                      eventLogName: windowsEvent91
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A26.3963554Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4289
                    kind: WindowsEvent
                    name: AzTestDSWE4289
                    properties:
                      eventLogName: windowsEvent273
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A47.6751803Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4317
                    kind: WindowsEvent
                    name: AzTestDSWE4317
                    properties:
                      eventLogName: windowsEvent148
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A05.8120517Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4324
                    kind: WindowsEvent
                    name: AzTestDSWE4324
                    properties:
                      eventLogName: windowsEvent4
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A04.1208323Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4362
                    kind: WindowsEvent
                    name: AzTestDSWE4362
                    properties:
                      eventLogName: windowsEvent201
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A08.3109506Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4416
                    kind: WindowsEvent
                    name: AzTestDSWE4416
                    properties:
                      eventLogName: windowsEvent13
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A48.9744951Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4424
                    kind: WindowsEvent
                    name: AzTestDSWE4424
                    properties:
                      eventLogName: windowsEvent153
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A19.0457713Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4466
                    kind: WindowsEvent
                    name: AzTestDSWE4466
                    properties:
                      eventLogName: windowsEvent52
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A15.0936374Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4467
                    kind: WindowsEvent
                    name: AzTestDSWE4467
                    properties:
                      eventLogName: windowsEvent37
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A41.9399246Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4503
                    kind: WindowsEvent
                    name: AzTestDSWE4503
                    properties:
                      eventLogName: windowsEvent129
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A27.2714771Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4521
                    kind: WindowsEvent
                    name: AzTestDSWE4521
                    properties:
                      eventLogName: windowsEvent276
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A26.7419933Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4530
                    kind: WindowsEvent
                    name: AzTestDSWE4530
                    properties:
                      eventLogName: windowsEvent79
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A37.4227966Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4600
                    kind: WindowsEvent
                    name: AzTestDSWE4600
                    properties:
                      eventLogName: windowsEvent115
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A43.5519204Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4644
                    kind: WindowsEvent
                    name: AzTestDSWE4644
                    properties:
                      eventLogName: windowsEvent135
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A51.6431386Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4694
                    kind: WindowsEvent
                    name: AzTestDSWE4694
                    properties:
                      eventLogName: windowsEvent162
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A06.0530002Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4715
                    kind: WindowsEvent
                    name: AzTestDSWE4715
                    properties:
                      eventLogName: windowsEvent5
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A24.3989962Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE472
                    kind: WindowsEvent
                    name: AzTestDSWE472
                    properties:
                      eventLogName: windowsEvent267
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A16.3706498Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4721
                    kind: WindowsEvent
                    name: AzTestDSWE4721
                    properties:
                      eventLogName: windowsEvent243
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A33.8337155Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4734
                    kind: WindowsEvent
                    name: AzTestDSWE4734
                    properties:
                      eventLogName: windowsEvent295
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A25.2712759Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4755
                    kind: WindowsEvent
                    name: AzTestDSWE4755
                    properties:
                      eventLogName: windowsEvent270
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A27.5076680Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4779
                    kind: WindowsEvent
                    name: AzTestDSWE4779
                    properties:
                      eventLogName: windowsEvent81
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A04.6828938Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4791
                    kind: WindowsEvent
                    name: AzTestDSWE4791
                    properties:
                      eventLogName: windowsEvent0
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A54.0073520Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4798
                    kind: WindowsEvent
                    name: AzTestDSWE4798
                    properties:
                      eventLogName: windowsEvent170
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A22.9077505Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE480
                    kind: WindowsEvent
                    name: AzTestDSWE480
                    properties:
                      eventLogName: windowsEvent263
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A11.7028912Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4847
                    kind: WindowsEvent
                    name: AzTestDSWE4847
                    properties:
                      eventLogName: windowsEvent25
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A04.9847854Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4876
                    kind: WindowsEvent
                    name: AzTestDSWE4876
                    properties:
                      eventLogName: windowsEvent204
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A23.4029367Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4900
                    kind: WindowsEvent
                    name: AzTestDSWE4900
                    properties:
                      eventLogName: windowsEvent68
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A34.5280091Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4918
                    kind: WindowsEvent
                    name: AzTestDSWE4918
                    properties:
                      eventLogName: windowsEvent105
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A34.2882196Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4928
                    kind: WindowsEvent
                    name: AzTestDSWE4928
                    properties:
                      eventLogName: windowsEvent296
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A33.2381803Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4930
                    kind: WindowsEvent
                    name: AzTestDSWE4930
                    properties:
                      eventLogName: windowsEvent293
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A36.8423994Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4945
                    kind: WindowsEvent
                    name: AzTestDSWE4945
                    properties:
                      eventLogName: windowsEvent113
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A08.9379456Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4967
                    kind: WindowsEvent
                    name: AzTestDSWE4967
                    properties:
                      eventLogName: windowsEvent15
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A57.5893926Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4969
                    kind: WindowsEvent
                    name: AzTestDSWE4969
                    properties:
                      eventLogName: windowsEvent180
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A19.5497139Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE4983
                    kind: WindowsEvent
                    name: AzTestDSWE4983
                    properties:
                      eventLogName: windowsEvent54
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A48.4588661Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5011
                    kind: WindowsEvent
                    name: AzTestDSWE5011
                    properties:
                      eventLogName: windowsEvent151
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A32.2694295Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5082
                    kind: WindowsEvent
                    name: AzTestDSWE5082
                    properties:
                      eventLogName: windowsEvent290
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A17.8863220Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5136
                    kind: WindowsEvent
                    name: AzTestDSWE5136
                    properties:
                      eventLogName: windowsEvent248
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A05.5484906Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5141
                    kind: WindowsEvent
                    name: AzTestDSWE5141
                    properties:
                      eventLogName: windowsEvent206
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A23.9283342Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5166
                    kind: WindowsEvent
                    name: AzTestDSWE5166
                    properties:
                      eventLogName: windowsEvent266
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A29.4970655Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5207
                    kind: WindowsEvent
                    name: AzTestDSWE5207
                    properties:
                      eventLogName: windowsEvent282
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A04.7146038Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5223
                    kind: WindowsEvent
                    name: AzTestDSWE5223
                    properties:
                      eventLogName: windowsEvent203
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A10.3237629Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5233
                    kind: WindowsEvent
                    name: AzTestDSWE5233
                    properties:
                      eventLogName: windowsEvent20
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A18.1831872Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5253
                    kind: WindowsEvent
                    name: AzTestDSWE5253
                    properties:
                      eventLogName: windowsEvent249
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A30.9049829Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5255
                    kind: WindowsEvent
                    name: AzTestDSWE5255
                    properties:
                      eventLogName: windowsEvent286
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A12.8904269Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5263
                    kind: WindowsEvent
                    name: AzTestDSWE5263
                    properties:
                      eventLogName: windowsEvent29
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A20.4543884Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5351
                    kind: WindowsEvent
                    name: AzTestDSWE5351
                    properties:
                      eventLogName: windowsEvent255
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A19.7997319Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5385
                    kind: WindowsEvent
                    name: AzTestDSWE5385
                    properties:
                      eventLogName: windowsEvent55
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A29.7703365Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5394
                    kind: WindowsEvent
                    name: AzTestDSWE5394
                    properties:
                      eventLogName: windowsEvent89
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A09.4692151Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE541
                    kind: WindowsEvent
                    name: AzTestDSWE541
                    properties:
                      eventLogName: windowsEvent17
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A15.7994161Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5439
                    kind: WindowsEvent
                    name: AzTestDSWE5439
                    properties:
                      eventLogName: windowsEvent241
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A10.3032105Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5460
                    kind: WindowsEvent
                    name: AzTestDSWE5460
                    properties:
                      eventLogName: windowsEvent223
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A24.6802546Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5479
                    kind: WindowsEvent
                    name: AzTestDSWE5479
                    properties:
                      eventLogName: windowsEvent268
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A01.1670463Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5483
                    kind: WindowsEvent
                    name: AzTestDSWE5483
                    properties:
                      eventLogName: windowsEvent192
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A37.1393156Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5486
                    kind: WindowsEvent
                    name: AzTestDSWE5486
                    properties:
                      eventLogName: windowsEvent114
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A41.1205470Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5554
                    kind: WindowsEvent
                    name: AzTestDSWE5554
                    properties:
                      eventLogName: windowsEvent126
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A20.7200407Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5559
                    kind: WindowsEvent
                    name: AzTestDSWE5559
                    properties:
                      eventLogName: windowsEvent256
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A18.4534330Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5585
                    kind: WindowsEvent
                    name: AzTestDSWE5585
                    properties:
                      eventLogName: windowsEvent50
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A40.8861587Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE568
                    kind: WindowsEvent
                    name: AzTestDSWE568
                    properties:
                      eventLogName: windowsEvent125
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A12.3059271Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5741
                    kind: WindowsEvent
                    name: AzTestDSWE5741
                    properties:
                      eventLogName: windowsEvent230
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A39.0692471Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE58
                    kind: WindowsEvent
                    name: AzTestDSWE58
                    properties:
                      eventLogName: windowsEvent120
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A16.9117573Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5810
                    kind: WindowsEvent
                    name: AzTestDSWE5810
                    properties:
                      eventLogName: windowsEvent44
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A45.4055476Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5815
                    kind: WindowsEvent
                    name: AzTestDSWE5815
                    properties:
                      eventLogName: windowsEvent141
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A55.0097893Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5858
                    kind: WindowsEvent
                    name: AzTestDSWE5858
                    properties:
                      eventLogName: windowsEvent173
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A18.9931389Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5866
                    kind: WindowsEvent
                    name: AzTestDSWE5866
                    properties:
                      eventLogName: windowsEvent251
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A59.4332080Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5888
                    kind: WindowsEvent
                    name: AzTestDSWE5888
                    properties:
                      eventLogName: windowsEvent187
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A09.7599986Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE5905
                    kind: WindowsEvent
                    name: AzTestDSWE5905
                    properties:
                      eventLogName: windowsEvent18
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A10.6395291Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6027
                    kind: WindowsEvent
                    name: AzTestDSWE6027
                    properties:
                      eventLogName: windowsEvent224
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A13.7282386Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE607
                    kind: WindowsEvent
                    name: AzTestDSWE607
                    properties:
                      eventLogName: windowsEvent235
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A33.1319662Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6099
                    kind: WindowsEvent
                    name: AzTestDSWE6099
                    properties:
                      eventLogName: windowsEvent100
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A06.3186640Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6122
                    kind: WindowsEvent
                    name: AzTestDSWE6122
                    properties:
                      eventLogName: windowsEvent6
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A11.4528829Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6218
                    kind: WindowsEvent
                    name: AzTestDSWE6218
                    properties:
                      eventLogName: windowsEvent24
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A47.9407875Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE622
                    kind: WindowsEvent
                    name: AzTestDSWE622
                    properties:
                      eventLogName: windowsEvent149
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A06.3453921Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6222
                    kind: WindowsEvent
                    name: AzTestDSWE6222
                    properties:
                      eventLogName: windowsEvent209
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A21.2372832Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6240
                    kind: WindowsEvent
                    name: AzTestDSWE6240
                    properties:
                      eventLogName: windowsEvent60
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A08.2849036Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6251
                    kind: WindowsEvent
                    name: AzTestDSWE6251
                    properties:
                      eventLogName: windowsEvent216
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A02.1829375Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6274
                    kind: WindowsEvent
                    name: AzTestDSWE6274
                    properties:
                      eventLogName: windowsEvent195
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A32.3491070Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6296
                    kind: WindowsEvent
                    name: AzTestDSWE6296
                    properties:
                      eventLogName: windowsEvent98
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A22.1811938Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6301
                    kind: WindowsEvent
                    name: AzTestDSWE6301
                    properties:
                      eventLogName: windowsEvent261
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A06.7093003Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6404
                    kind: WindowsEvent
                    name: AzTestDSWE6404
                    properties:
                      eventLogName: windowsEvent7
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A05.5617435Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6406
                    kind: WindowsEvent
                    name: AzTestDSWE6406
                    properties:
                      eventLogName: windowsEvent3
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A40.2886854Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6432
                    kind: WindowsEvent
                    name: AzTestDSWE6432
                    properties:
                      eventLogName: windowsEvent123
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A35.9811949Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6439
                    kind: WindowsEvent
                    name: AzTestDSWE6439
                    properties:
                      eventLogName: windowsEvent110
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A13.1344490Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6451
                    kind: WindowsEvent
                    name: AzTestDSWE6451
                    properties:
                      eventLogName: windowsEvent233
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A10.9653354Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6486
                    kind: WindowsEvent
                    name: AzTestDSWE6486
                    properties:
                      eventLogName: windowsEvent22
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A10.0582011Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6505
                    kind: WindowsEvent
                    name: AzTestDSWE6505
                    properties:
                      eventLogName: windowsEvent19
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A52.8955201Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6514
                    kind: WindowsEvent
                    name: AzTestDSWE6514
                    properties:
                      eventLogName: windowsEvent166
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A10.9395226Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6518
                    kind: WindowsEvent
                    name: AzTestDSWE6518
                    properties:
                      eventLogName: windowsEvent225
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A24.0123335Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6537
                    kind: WindowsEvent
                    name: AzTestDSWE6537
                    properties:
                      eventLogName: windowsEvent70
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A57.3394082Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6547
                    kind: WindowsEvent
                    name: AzTestDSWE6547
                    properties:
                      eventLogName: windowsEvent179
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A33.9457044Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6556
                    kind: WindowsEvent
                    name: AzTestDSWE6556
                    properties:
                      eventLogName: windowsEvent103
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A13.4313542Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6718
                    kind: WindowsEvent
                    name: AzTestDSWE6718
                    properties:
                      eventLogName: windowsEvent234
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A35.4186784Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6724
                    kind: WindowsEvent
                    name: AzTestDSWE6724
                    properties:
                      eventLogName: windowsEvent108
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A12.3279180Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6741
                    kind: WindowsEvent
                    name: AzTestDSWE6741
                    properties:
                      eventLogName: windowsEvent27
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A24.5764501Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6796
                    kind: WindowsEvent
                    name: AzTestDSWE6796
                    properties:
                      eventLogName: windowsEvent72
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A35.2579899Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6826
                    kind: WindowsEvent
                    name: AzTestDSWE6826
                    properties:
                      eventLogName: windowsEvent299
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A34.6319483Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6829
                    kind: WindowsEvent
                    name: AzTestDSWE6829
                    properties:
                      eventLogName: windowsEvent297
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A28.5887776Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6893
                    kind: WindowsEvent
                    name: AzTestDSWE6893
                    properties:
                      eventLogName: windowsEvent85
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A16.1249736Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE6974
                    kind: WindowsEvent
                    name: AzTestDSWE6974
                    properties:
                      eventLogName: windowsEvent41
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A28.3876585Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7008
                    kind: WindowsEvent
                    name: AzTestDSWE7008
                    properties:
                      eventLogName: windowsEvent279
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A29.1220764Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7014
                    kind: WindowsEvent
                    name: AzTestDSWE7014
                    properties:
                      eventLogName: windowsEvent281
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A26.0213457Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7068
                    kind: WindowsEvent
                    name: AzTestDSWE7068
                    properties:
                      eventLogName: windowsEvent272
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A21%3A21.8686663Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7080
                    kind: WindowsEvent
                    name: AzTestDSWE7080
                    properties:
                      eventLogName: windowsEvent260
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A40.5423724Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7166
                    kind: WindowsEvent
                    name: AzTestDSWE7166
                    properties:
                      eventLogName: windowsEvent124
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
                  - eTag: W/"datetime'2017-10-02T23%3A20%3A16.3906307Z'"
                    id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest7887/providers/Microsoft.OperationalInsights/workspaces/AzTest218/datasources/AzTestDSWE7178
                    kind: WindowsEvent
                    name: AzTestDSWE7178
                    properties:
                      eventLogName: windowsEvent42
                      eventTypes:
                        - eventType: Error
                    type: Microsoft.OperationalInsights/workspaces/datasources
      x-ms-odata: "#/definitions/DataSourceFilter"
      x-ms-pageable:
        nextLinkName: nextLink
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}":
    delete:
      description: Deletes a data source instance.
      operationId: DataSources_Delete
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that contains the datasource.
          in: path
          name: workspaceName
          required: true
          type: string
        - description: Name of the datasource.
          in: path
          name: dataSourceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
        "204":
          description: NoContent response definition.
      tags:
        - DataSources
      x-ms-examples:
        DataSourcesDelete:
          parameters:
            api-version: 2015-11-01-preview
            dataSourceName: AzTestDS774
            resourceGroupName: OIAutoRest5123
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: AzTest9724
          responses:
            "200": {}
            "204": {}
    get:
      description: Gets a datasource instance.
      operationId: DataSources_Get
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that contains the datasource.
          in: path
          name: workspaceName
          required: true
          type: string
        - description: Name of the datasource
          in: path
          name: dataSourceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/DataSource"
      tags:
        - DataSources
      x-ms-examples:
        DataSourcesGet:
          parameters:
            api-version: 2015-11-01-preview
            dataSourceName: AzTestDS774
            resourceGroupName: OIAutoRest5123
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: AzTest9724
          responses:
            "200":
              body:
                eTag: W/"datetime'2017-10-01T08%3A01%3A21.2351243Z'"
                id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest5123/providers/Microsoft.OperationalInsights/workspaces/AzTest9724/datasources/AzTestDS774
                kind: AzureActivityLog
                name: AzTestDS774
                properties:
                  linkedResourceId: /subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management
                type: Microsoft.OperationalInsights/workspaces/datasources
    put:
      description: Create or update a data source.
      operationId: DataSources_CreateOrUpdate
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that will contain the datasource
          in: path
          name: workspaceName
          required: true
          type: string
        - description: The name of the datasource resource.
          in: path
          name: dataSourceName
          required: true
          type: string
        - description: The parameters required to create or update a datasource.
          in: body
          name: parameters
          required: true
          schema:
            $ref: "#/definitions/DataSource"
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/DataSource"
        "201":
          description: Created response definition.
          schema:
            $ref: "#/definitions/DataSource"
      tags:
        - DataSources
      x-ms-examples:
        DataSourcesCreate:
          parameters:
            api-version: 2015-11-01-preview
            dataSourceName: AzTestDS774
            parameters:
              kind: AzureActivityLog
              properties:
                LinkedResourceId: /subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management
            resourceGroupName: OIAutoRest5123
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: AzTest9724
          responses:
            "200":
              body:
                eTag: W/"datetime'2017-10-01T08%3A01%3A21.2351243Z'"
                id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest5123/providers/Microsoft.OperationalInsights/workspaces/AzTest9724/datasources/AzTestDS774
                kind: AzureActivityLog
                name: AzTestDS774
                properties:
                  linkedResourceId: /subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management
                type: Microsoft.OperationalInsights/workspaces/datasources
            "201":
              body:
                eTag: W/"datetime'2017-10-01T08%3A01%3A21.2351243Z'"
                id: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/OIAutoRest5123/providers/Microsoft.OperationalInsights/workspaces/AzTest9724/datasources/AzTestDS774
                kind: AzureActivityLog
                name: AzTestDS774
                properties:
                  linkedResourceId: /subscriptions/00000000-0000-0000-0000-00000000000/providers/microsoft.insights/eventtypes/management
                type: Microsoft.OperationalInsights/workspaces/datasources
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks":
    get:
      description: Lists all the intelligence packs possible and whether they are enabled or disabled for a given workspace.
      operationId: Workspaces_ListIntelligencePacks
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            items:
              $ref: "#/definitions/IntelligencePack"
            type: array
      tags:
        - Workspaces
      x-ms-examples:
        IntelligencePacksList:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                - displayName: Capacity and Performance
                  enabled: false
                  name: CapacityPerformance
                - displayName: Azure Web Apps Analytics (Preview)
                  enabled: false
                  name: AzureWebAppsAnalytics
                - displayName: Security and Audit
                  enabled: false
                  name: Security
                - displayName: Update Management
                  enabled: false
                  name: Updates
                - displayName: Antimalware Assessment
                  enabled: false
                  name: AntiMalware
                - displayName: Log Management
                  enabled: true
                  name: LogManagement
                - displayName: Change Tracking
                  enabled: true
                  name: ChangeTracking
                - displayName: SQL Assessment
                  enabled: false
                  name: SQLAssessment
                - displayName: System Center Operations Manager Assessment (Preview)
                  enabled: false
                  name: SCOMAssessment
                - displayName: IT Service Management Connector(Preview)
                  enabled: false
                  name: ServiceDesk
                - displayName: AD Assessment
                  enabled: false
                  name: ADAssessment
                - displayName: Alert Management
                  enabled: false
                  name: AlertManagement
                - displayName: Azure Automation
                  enabled: false
                  name: AzureAutomation
                - displayName: Wire Data
                  enabled: false
                  name: WireData
                - displayName: Azure Site Recovery
                  enabled: true
                  name: SiteRecovery
                - displayName: Backup
                  enabled: false
                  name: Backup
                - displayName: Surface Hub
                  enabled: false
                  name: SurfaceHub
                - displayName: Network Performance Monitor
                  enabled: false
                  name: NetworkMonitoring
                - displayName: Container Monitoring Solution
                  enabled: false
                  name: Containers
                - displayName: Service Map
                  enabled: false
                  name: ServiceMap
                - displayName: Azure Networking Analytics (Deprecated)
                  enabled: false
                  name: AzureNetworking
                - displayName: AD Replication Status
                  enabled: false
                  name: ADReplication
                - displayName: Office 365 (Preview)
                  enabled: false
                  name: Office365
                - displayName: Upgrade Readiness
                  enabled: false
                  name: CompatibilityAssessment
                - displayName: Key Vault (Deprecated)
                  enabled: false
                  name: KeyVault
                - displayName: Service Fabric
                  enabled: false
                  name: ServiceFabric
                - displayName: DNS Analytics (Preview)
                  enabled: false
                  name: DnsAnalytics
                - displayName: Application Insights (Preview)
                  enabled: false
                  name: ApplicationInsights
                - displayName: Wire Data 2.0
                  enabled: false
                  name: WireData2
                - displayName: Update Compliance (Preview)
                  enabled: false
                  name: WaaSUpdateInsights
                - displayName: "Agent Health "
                  enabled: false
                  name: AgentHealthAssessment
                - displayName: Activity Log Analytics
                  enabled: false
                  name: AzureActivity
                - displayName: HDInsight HBase Monitoring (Preview)
                  enabled: false
                  name: HDInsight
                - displayName: HDInsight Kafka Monitoring
                  enabled: false
                  name: HDInsightKafka
                - displayName: HDInsight Spark Monitoring
                  enabled: false
                  name: HDInsightSpark
                - displayName: VMware (Preview)
                  enabled: false
                  name: VMware
                - displayName: Security Center Free � for Azure Resources only
                  enabled: false
                  name: SecurityCenterFree
                - displayName: Logic Apps Management
                  enabled: false
                  name: LogicAppsManagement
                - displayName: Logic Apps B2B
                  enabled: false
                  name: LogicAppB2B
                - displayName: Azure SQL Analytics (Preview)
                  enabled: false
                  name: AzureSQLAnalytics
                - displayName: Key Vault Analytics
                  enabled: false
                  name: KeyVaultAnalytics
                - displayName: Azure Network Security Group Analytics
                  enabled: false
                  name: AzureNSGAnalytics
                - displayName: Azure Application Gateway Analytics
                  enabled: false
                  name: AzureAppGatewayAnalytics
                - displayName: Device Health (Preview)
                  enabled: false
                  name: DeviceHealthProd
                - displayName: Windows Defender ATP
                  enabled: false
                  name: WindowsDefenderATP
                - displayName: ProcessInvestigator
                  enabled: false
                  name: ProcessInvestigator
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Disable":
    post:
      description: Disables an intelligence pack for a given workspace.
      operationId: Workspaces_DisableIntelligencePack
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - description: The name of the intelligence pack to be disabled.
          in: path
          name: intelligencePackName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
      tags:
        - Workspaces
      x-ms-examples:
        IntelligencePacksDisable:
          parameters:
            api-version: 2015-11-01-preview
            intelligencePackName: ChangeTracking
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200": {}
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Enable":
    post:
      description: Enables an intelligence pack for a given workspace.
      operationId: Workspaces_EnableIntelligencePack
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - description: The name of the intelligence pack to be enabled.
          in: path
          name: intelligencePackName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
      tags:
        - Workspaces
      x-ms-examples:
        IntelligencePacksEnable:
          parameters:
            api-version: 2015-11-01-preview
            intelligencePackName: ChangeTracking
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200": {}
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/linkedServices":
    get:
      description: Gets the linked services instances in a workspace.
      operationId: LinkedServices_ListByWorkspace
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that contains the linked services.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/LinkedServiceListResult"
      tags:
        - LinkedServices
      x-ms-examples:
        LinkedServicesListByWorkspace:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: mms-eus
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                - id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation
                  name: TestLinkWS/Automation
                  properties:
                    resourceId: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount
                  type: Microsoft.OperationalInsights/workspaces/linkedServices
                - id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation
                  name: TestLinkWS/Automation
                  properties:
                    resourceId: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount2
                  type: Microsoft.OperationalInsights/workspaces/linkedServices
      x-ms-pageable:
        nextLinkName: null
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/linkedServices/{linkedServiceName}":
    delete:
      description: Deletes a linked service instance.
      operationId: LinkedServices_Delete
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that contains the linkedServices resource
          in: path
          name: workspaceName
          required: true
          type: string
        - description: Name of the linked service.
          in: path
          name: linkedServiceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
        "204":
          description: NoContent response definition.
      tags:
        - LinkedServices
      x-ms-examples:
        LinkedServicesDelete:
          parameters:
            api-version: 2015-11-01-preview
            linkedServiceName: TestLinkWS/Automation
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200": {}
            "204": {}
    get:
      description: Gets a linked service instance.
      operationId: LinkedServices_Get
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that contains the linkedServices resource
          in: path
          name: workspaceName
          required: true
          type: string
        - description: Name of the linked service.
          in: path
          name: linkedServiceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/LinkedService"
      tags:
        - LinkedServices
      x-ms-examples:
        LinkedServicesGet:
          parameters:
            api-version: 2015-11-01-preview
            linkedServiceName: TestLinkWS/Automation
            resourceGroupName: mms-eus
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                id: /subscriptions/00000000-0000-0000-0000-000000000005/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation
                name: TestLinkWS/Automation
                properties:
                  resourceId: /subscriptions/00000000-0000-0000-0000-000000000005/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount
                type: Microsoft.OperationalInsights/workspaces/linkedServices
    put:
      description: Create or update a linked service.
      operationId: LinkedServices_CreateOrUpdate
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace that will contain the linkedServices resource
          in: path
          name: workspaceName
          required: true
          type: string
        - description: Name of the linkedServices resource
          in: path
          name: linkedServiceName
          required: true
          type: string
        - description: The parameters required to create or update a linked service.
          in: body
          name: parameters
          required: true
          schema:
            $ref: "#/definitions/LinkedService"
        - $ref: "#/parameters/SubscriptionIdParameter"
        - $ref: "#/parameters/ApiVersionParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/LinkedService"
        "201":
          description: Created response definition.
          schema:
            $ref: "#/definitions/LinkedService"
      tags:
        - LinkedServices
      x-ms-examples:
        LinkedServicesCreate:
          parameters:
            api-version: 2015-11-01-preview
            linkedServiceName: TestLinkWS/Automation
            parameters:
              properties:
                resourceId: /subscriptions/00000000-0000-0000-0000-00000000000/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/testAccount
            resourceGroupName: mms-eus
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                id: /subscriptions/00000000-0000-0000-0000-00000000000/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation
                name: TestLinkWS/Automation
                properties:
                  resourceId: /subscriptions/00000000-0000-0000-0000-00000000000/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount
                type: Microsoft.OperationalInsights/workspaces/linkedServices
            "201":
              body:
                id: /subscriptions/00000000-0000-0000-0000-00000000000/resourcegroups/mms-eus/providers/microsoft.operationalinsights/workspaces/testlinkws/linkedservices/automation
                name: TestLinkWS/Automation
                properties:
                  resourceId: /subscriptions/00000000-0000-0000-0000-00000000000/resourceGroups/mms-eus/providers/Microsoft.Automation/automationAccounts/TestAccount
                type: Microsoft.OperationalInsights/workspaces/linkedServices
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/managementGroups":
    get:
      description: Gets a list of management groups connected to a workspace.
      operationId: Workspaces_ListManagementGroups
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: The name of the workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/WorkspaceListManagementGroupsResult"
      tags:
        - Workspaces
      x-ms-examples:
        WorkspacesListManagementGroups:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                value: []
      x-ms-pageable:
        nextLinkName: null
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/sharedKeys":
    post:
      description: Gets the shared keys for a workspace.
      operationId: Workspaces_GetSharedKeys
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: Name of the Log Analytics Workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/SharedKeys"
      tags:
        - Workspaces
      x-ms-examples:
        SharedKeysList:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                primarySharedKey: BozLY1JnZbxu0jWUQSY8iRPEM8ObmpP8rW+8bUl3+HpDJI+n689SxXgTgU7k1qdxo/WugRLxechxbolAfHM5uA==
                secondarySharedKey: 7tDt5W0JBrCQKtQA3igfFltLSzJeyr9LmuT+B/ibzd8cdC1neZ1ePOQLBx5NUzc0q2VUIK0cLhWNyFvo/hT8Ww==
  "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/usages":
    get:
      description: Gets a list of usage metrics for a workspace.
      operationId: Workspaces_ListUsages
      parameters:
        - $ref: "#/parameters/ResourceGroupNameParameter"
        - description: The name of the workspace.
          in: path
          name: workspaceName
          required: true
          type: string
        - $ref: "#/parameters/ApiVersionParameter"
        - $ref: "#/parameters/SubscriptionIdParameter"
      responses:
        "200":
          description: OK response definition.
          schema:
            $ref: "#/definitions/WorkspaceListUsagesResult"
      tags:
        - Workspaces
      x-ms-examples:
        UsagesList:
          parameters:
            api-version: 2015-11-01-preview
            resourceGroupName: rg1
            subscriptionId: 00000000-0000-0000-0000-00000000000
            workspaceName: TestLinkWS
          responses:
            "200":
              body:
                value:
                  - currentValue: 0
                    limit: 524288000
                    name:
                      localizedValue: Data Analyzed
                      value: DataAnalyzed
                    nextResetTime: 2017-10-03T00:00:00Z
                    quotaPeriod: P1D
                    unit: Bytes
      x-ms-pageable:
        nextLinkName: null
definitions:
  DataSource:
    allOf:
      - $ref: "#/definitions/ProxyResource"
    description: Datasources under OMS Workspace.
    properties:
      eTag:
        description: The ETag of the data source.
        type: string
      kind:
        $ref: "#/definitions/DataSourceKind"
      properties:
        $ref: "#/definitions/Object"
        description: The data source properties in raw json format, each kind of data source have it's own schema.
    required:
      - kind
      - properties
    x-ms-azure-resource: true
  DataSourceFilter:
    description: DataSource filter. Right now, only filter by kind is supported.
    properties:
      kind:
        $ref: "#/definitions/DataSourceKind"
  DataSourceKind:
    description: The kind of the DataSource.
    enum:
      - AzureActivityLog
      - ChangeTrackingPath
      - ChangeTrackingDefaultPath
      - ChangeTrackingDefaultRegistry
      - ChangeTrackingCustomRegistry
      - CustomLog
      - CustomLogCollection
      - GenericDataSource
      - IISLogs
      - LinuxPerformanceObject
      - LinuxPerformanceCollection
      - LinuxSyslog
      - LinuxSyslogCollection
      - WindowsEvent
      - WindowsPerformanceCounter
    type: string
    x-ms-enum:
      modelAsString: true
      name: DataSourceKind
  DataSourceListResult:
    description: The list data source by workspace operation response.
    properties:
      nextLink:
        description: The link (url) to the next page of datasources.
        type: string
      value:
        description: A list of datasources.
        items:
          $ref: "#/definitions/DataSource"
        type: array
  IntelligencePack:
    description: Intelligence Pack containing a string name and boolean indicating if it's enabled.
    properties:
      displayName:
        description: The display name of the intelligence pack.
        type: string
      enabled:
        description: The enabled boolean for the intelligence pack.
        type: boolean
      name:
        description: The name of the intelligence pack.
        type: string
  LinkedService:
    allOf:
      - $ref: "#/definitions/ProxyResource"
    description: The top level Linked service resource container.
    properties:
      properties:
        $ref: "#/definitions/LinkedServiceProperties"
        description: The properties of the linked service.
        x-ms-client-flatten: true
    required:
      - properties
    x-ms-azure-resource: true
  LinkedServiceListResult:
    description: The list linked service operation response.
    properties:
      value:
        description: Gets or sets a list of linked service instances.
        items:
          $ref: "#/definitions/LinkedService"
        type: array
  LinkedServiceProperties:
    description: Linked service properties.
    properties:
      resourceId:
        description: The resource id of the resource that will be linked to the workspace.
        type: string
    required:
      - resourceId
  ManagementGroup:
    description: A management group that is connected to a workspace
    properties:
      properties:
        $ref: "#/definitions/ManagementGroupProperties"
        description: The properties of the management group.
        x-ms-client-flatten: true
  ManagementGroupProperties:
    description: Management group properties.
    properties:
      created:
        description: The datetime that the management group was created.
        format: date-time
        type: string
      dataReceived:
        description: The last datetime that the management group received data.
        format: date-time
        type: string
      id:
        description: The unique ID of the management group.
        type: string
      isGateway:
        description: Gets or sets a value indicating whether the management group is a gateway.
        type: boolean
      name:
        description: The name of the management group.
        type: string
      serverCount:
        description: The number of servers connected to the management group.
        format: int32
        type: integer
      sku:
        description: The SKU of System Center that is managing the management group.
        type: string
      version:
        description: The version of System Center that is managing the management group.
        type: string
  MetricName:
    description: The name of a metric.
    properties:
      localizedValue:
        description: The localized name of the metric.
        type: string
      value:
        description: The system name of the metric.
        type: string
  Object:
    description: JSON object
    properties: {}
    type: object
  Operation:
    description: Supported operation of OperationalInsights resource provider.
    properties:
      display:
        description: Display metadata associated with the operation.
        properties:
          operation:
            description: "Type of operation: get, read, delete, etc."
            type: string
          provider:
            description: "Service provider: Microsoft OperationsManagement."
            type: string
          resource:
            description: Resource on which the operation is performed etc.
            type: string
      name:
        description: "Operation name: {provider}/{resource}/{operation}"
        type: string
  OperationListResult:
    description: Result of the request to list solution operations.
    properties:
      nextLink:
        description: URL to get the next set of operation list results if there are any.
        readOnly: true
        type: string
      value:
        description: List of solution operations supported by the OperationsManagement resource provider.
        items:
          $ref: "#/definitions/Operation"
        type: array
  ProxyResource:
    description: Common properties of proxy resource.
    properties:
      id:
        description: Resource ID.
        readOnly: true
        type: string
      name:
        description: Resource name.
        readOnly: true
        type: string
      tags:
        additionalProperties:
          type: string
        description: Resource tags
        type: object
      type:
        description: Resource type.
        readOnly: true
        type: string
  Resource:
    description: The resource definition.
    properties:
      id:
        description: Resource Id
        readOnly: true
        type: string
      location:
        description: Resource location
        type: string
      name:
        description: Resource name
        readOnly: true
        type: string
      tags:
        additionalProperties:
          type: string
        description: Resource tags
        type: object
      type:
        description: Resource type
        readOnly: true
        type: string
    x-ms-azure-resource: true
  SharedKeys:
    description: The shared keys for a workspace.
    properties:
      primarySharedKey:
        description: The primary shared key of a workspace.
        type: string
      secondarySharedKey:
        description: The secondary shared key of a workspace.
        type: string
  Sku:
    description: The SKU (tier) of a workspace.
    properties:
      name:
        description: The name of the SKU.
        enum:
          - Free
          - Standard
          - Premium
          - PerNode
          - PerGB2018
          - Standalone
        type: string
        x-ms-enum:
          modelAsString: true
          name: SkuNameEnum
    required:
      - name
  UsageMetric:
    description: A metric describing the usage of a resource.
    properties:
      currentValue:
        description: The current value of the metric.
        format: double
        type: number
      limit:
        description: The quota limit for the metric.
        format: double
        type: number
      name:
        $ref: "#/definitions/MetricName"
        description: The name of the metric.
      nextResetTime:
        description: The time that the metric's value will reset.
        format: date-time
        type: string
      quotaPeriod:
        description: The quota period that determines the length of time between value resets.
        type: string
      unit:
        description: The units used for the metric.
        type: string
  Workspace:
    allOf:
      - $ref: "#/definitions/Resource"
    description: The top level Workspace resource container.
    properties:
      eTag:
        description: The ETag of the workspace.
        type: string
      properties:
        $ref: "#/definitions/WorkspaceProperties"
        description: Workspace properties.
        x-ms-client-flatten: true
    x-ms-azure-resource: true
  WorkspaceListManagementGroupsResult:
    description: The list workspace management groups operation response.
    properties:
      value:
        description: Gets or sets a list of management groups attached to the workspace.
        items:
          $ref: "#/definitions/ManagementGroup"
        type: array
  WorkspaceListResult:
    description: The list workspaces operation response.
    properties:
      value:
        description: A list of workspaces.
        items:
          $ref: "#/definitions/Workspace"
        type: array
  WorkspaceListUsagesResult:
    description: The list workspace usages operation response.
    properties:
      value:
        description: Gets or sets a list of usage metrics for a workspace.
        items:
          $ref: "#/definitions/UsageMetric"
        type: array
  WorkspaceProperties:
    description: Workspace properties.
    properties:
      customerId:
        description: This is a read-only property. Represents the ID associated with the workspace.
        readOnly: true
        type: string
      portalUrl:
        description: This is a legacy property and is not used anymore. Kept here for backward compatibility.
        readOnly: true
        type: string
      provisioningState:
        description: The provisioning state of the workspace.
        enum:
          - Creating
          - Succeeded
          - Failed
          - Canceled
          - Deleting
          - ProvisioningAccount
        type: string
        x-ms-enum:
          modelAsString: true
          name: EntityStatus
      retentionInDays:
        description: "The workspace data retention in days. -1 means Unlimited retention for the Unlimited Sku. 730 days is the maximum allowed for all other Skus. "
        format: int32
        maximum: 730
        minimum: -1
        type: integer
      sku:
        $ref: "#/definitions/Sku"
        description: The SKU of the workspace.
      source:
        description: This is a read-only legacy property. It is always set to 'Azure' by the service. Kept here for backward compatibility.
        readOnly: true
        type: string
