operationalinsights.azure.com/v20250701
APIVersion
| Value | Description |
|---|---|
| “2025-07-01” |
Workspace
Generator information: - Generated from: /operationalinsights/resource-manager/Microsoft.OperationalInsights/OperationalInsights/stable/2025-07-01/Workspaces.json - ARM URI: /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
Used by: WorkspaceList.
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ObjectMeta | ||
| spec | Workspace_Spec Optional |
|
| status | Workspace_STATUS Optional |
Workspace_Spec
| Property | Description | Type |
|---|---|---|
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| defaultDataCollectionRuleResourceReference | The resource ID of the default Data Collection Rule to use for this workspace. Expected format is - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Insights/dataCollectionRules/{dcrName}. | genruntime.ResourceReference Optional |
| etag | The etag of the workspace. | string Optional |
| features | Workspace features. | WorkspaceFeatures Optional |
| forceCmkForQuery | Indicates whether customer managed storage is mandatory for query management. | bool Optional |
| identity | The identity of the resource. | Identity Optional |
| location | The geo-location where the resource lives | string Required |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | WorkspaceOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource | genruntime.KnownResourceReference Required |
| publicNetworkAccessForIngestion | The network access type for accessing Log Analytics ingestion. | PublicNetworkAccessType Optional |
| publicNetworkAccessForQuery | The network access type for accessing Log Analytics query. | PublicNetworkAccessType Optional |
| replication | workspace replication properties. | WorkspaceReplicationProperties Optional |
| retentionInDays | The workspace data retention in days. Allowed values are per pricing plan. See pricing tiers documentation for details. | int Optional |
| sku | The SKU of the workspace. | WorkspaceSku Optional |
| tags | Resource tags. | map[string]string Optional |
| workspaceCapping | The daily volume cap for ingestion. | WorkspaceCapping Optional |
Workspace_STATUS
| Property | Description | Type |
|---|---|---|
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| createdDate | Workspace creation date. | string Optional |
| customerId | This is a read-only property. Represents the ID associated with the workspace. | string Optional |
| defaultDataCollectionRuleResourceId | The resource ID of the default Data Collection Rule to use for this workspace. Expected format is - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Insights/dataCollectionRules/{dcrName}. | string Optional |
| etag | The etag of the workspace. | string Optional |
| failover | workspace failover properties. | WorkspaceFailoverProperties_STATUS Optional |
| features | Workspace features. | WorkspaceFeatures_STATUS Optional |
| forceCmkForQuery | Indicates whether customer managed storage is mandatory for query management. | bool Optional |
| id | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName} | string Optional |
| identity | The identity of the resource. | Identity_STATUS Optional |
| location | The geo-location where the resource lives | string Optional |
| modifiedDate | Workspace modification date. | string Optional |
| name | The name of the resource | string Optional |
| privateLinkScopedResources | List of linked private link scope resources. | PrivateLinkScopedResource_STATUS[] Optional |
| provisioningState | The provisioning state of the workspace. | WorkspaceProperties_ProvisioningState_STATUS Optional |
| publicNetworkAccessForIngestion | The network access type for accessing Log Analytics ingestion. | PublicNetworkAccessType_STATUS Optional |
| publicNetworkAccessForQuery | The network access type for accessing Log Analytics query. | PublicNetworkAccessType_STATUS Optional |
| replication | workspace replication properties. | WorkspaceReplicationProperties_STATUS Optional |
| retentionInDays | The workspace data retention in days. Allowed values are per pricing plan. See pricing tiers documentation for details. | int Optional |
| sku | The SKU of the workspace. | WorkspaceSku_STATUS Optional |
| systemData | Metadata pertaining to creation and last modification of the resource. | SystemData_STATUS Optional |
| tags | Resource tags. | map[string]string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
| workspaceCapping | The daily volume cap for ingestion. | WorkspaceCapping_STATUS Optional |
WorkspaceList
Generator information: - Generated from: /operationalinsights/resource-manager/Microsoft.OperationalInsights/OperationalInsights/stable/2025-07-01/Workspaces.json - ARM URI: /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ListMeta | ||
| items | Workspace[] Optional |
Workspace_Spec
Used by: Workspace.
| Property | Description | Type |
|---|---|---|
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| defaultDataCollectionRuleResourceReference | The resource ID of the default Data Collection Rule to use for this workspace. Expected format is - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Insights/dataCollectionRules/{dcrName}. | genruntime.ResourceReference Optional |
| etag | The etag of the workspace. | string Optional |
| features | Workspace features. | WorkspaceFeatures Optional |
| forceCmkForQuery | Indicates whether customer managed storage is mandatory for query management. | bool Optional |
| identity | The identity of the resource. | Identity Optional |
| location | The geo-location where the resource lives | string Required |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | WorkspaceOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource | genruntime.KnownResourceReference Required |
| publicNetworkAccessForIngestion | The network access type for accessing Log Analytics ingestion. | PublicNetworkAccessType Optional |
| publicNetworkAccessForQuery | The network access type for accessing Log Analytics query. | PublicNetworkAccessType Optional |
| replication | workspace replication properties. | WorkspaceReplicationProperties Optional |
| retentionInDays | The workspace data retention in days. Allowed values are per pricing plan. See pricing tiers documentation for details. | int Optional |
| sku | The SKU of the workspace. | WorkspaceSku Optional |
| tags | Resource tags. | map[string]string Optional |
| workspaceCapping | The daily volume cap for ingestion. | WorkspaceCapping Optional |
Workspace_STATUS
The top level Workspace resource container.
Used by: Workspace.
| Property | Description | Type |
|---|---|---|
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| createdDate | Workspace creation date. | string Optional |
| customerId | This is a read-only property. Represents the ID associated with the workspace. | string Optional |
| defaultDataCollectionRuleResourceId | The resource ID of the default Data Collection Rule to use for this workspace. Expected format is - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Insights/dataCollectionRules/{dcrName}. | string Optional |
| etag | The etag of the workspace. | string Optional |
| failover | workspace failover properties. | WorkspaceFailoverProperties_STATUS Optional |
| features | Workspace features. | WorkspaceFeatures_STATUS Optional |
| forceCmkForQuery | Indicates whether customer managed storage is mandatory for query management. | bool Optional |
| id | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName} | string Optional |
| identity | The identity of the resource. | Identity_STATUS Optional |
| location | The geo-location where the resource lives | string Optional |
| modifiedDate | Workspace modification date. | string Optional |
| name | The name of the resource | string Optional |
| privateLinkScopedResources | List of linked private link scope resources. | PrivateLinkScopedResource_STATUS[] Optional |
| provisioningState | The provisioning state of the workspace. | WorkspaceProperties_ProvisioningState_STATUS Optional |
| publicNetworkAccessForIngestion | The network access type for accessing Log Analytics ingestion. | PublicNetworkAccessType_STATUS Optional |
| publicNetworkAccessForQuery | The network access type for accessing Log Analytics query. | PublicNetworkAccessType_STATUS Optional |
| replication | workspace replication properties. | WorkspaceReplicationProperties_STATUS Optional |
| retentionInDays | The workspace data retention in days. Allowed values are per pricing plan. See pricing tiers documentation for details. | int Optional |
| sku | The SKU of the workspace. | WorkspaceSku_STATUS Optional |
| systemData | Metadata pertaining to creation and last modification of the resource. | SystemData_STATUS Optional |
| tags | Resource tags. | map[string]string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
| workspaceCapping | The daily volume cap for ingestion. | WorkspaceCapping_STATUS Optional |
Identity
Identity for the resource.
Used by: Workspace_Spec.
| Property | Description | Type |
|---|---|---|
| type | Type of managed service identity. | Identity_Type Required |
| userAssignedIdentities | The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource ids in the form: ‘/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}’. | UserAssignedIdentityDetails[] Optional |
Identity_STATUS
Identity for the resource.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| principalId | The principal ID of resource identity. | string Optional |
| tenantId | The tenant ID of resource. | string Optional |
| type | Type of managed service identity. | Identity_Type_STATUS Optional |
| userAssignedIdentities | The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource ids in the form: ‘/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}’. | map[string]UserIdentityProperties_STATUS Optional |
PrivateLinkScopedResource_STATUS
The private link scope resource reference.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| resourceId | The full resource Id of the private link scope resource. | string Optional |
| scopeId | The private link scope unique Identifier. | string Optional |
PublicNetworkAccessType
The network access type for operating on the Log Analytics Workspace. By default it is Enabled
Used by: Workspace_Spec, and Workspace_Spec.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” | |
| “SecuredByPerimeter” |
PublicNetworkAccessType_STATUS
The network access type for operating on the Log Analytics Workspace. By default it is Enabled
Used by: Workspace_STATUS, and Workspace_STATUS.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” | |
| “SecuredByPerimeter” |
SystemData_STATUS
Metadata pertaining to creation and last modification of the resource.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| createdAt | The timestamp of resource creation (UTC). | string Optional |
| createdBy | The identity that created the resource. | string Optional |
| createdByType | The type of identity that created the resource. | SystemData_CreatedByType_STATUS Optional |
| lastModifiedAt | The timestamp of resource last modification (UTC) | string Optional |
| lastModifiedBy | The identity that last modified the resource. | string Optional |
| lastModifiedByType | The type of identity that last modified the resource. | SystemData_LastModifiedByType_STATUS Optional |
WorkspaceCapping
The daily volume cap for ingestion.
Used by: Workspace_Spec.
| Property | Description | Type |
|---|---|---|
| dailyQuotaGb | The workspace daily quota for ingestion. | float64 Optional |
WorkspaceCapping_STATUS
The daily volume cap for ingestion.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| dailyQuotaGb | The workspace daily quota for ingestion. | float64 Optional |
| dataIngestionStatus | The status of data ingestion for this workspace. | WorkspaceCapping_DataIngestionStatus_STATUS Optional |
| quotaNextResetTime | The time when the quota will be rest. | string Optional |
WorkspaceFailoverProperties_STATUS
The failover state of the replication.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| lastModifiedDate | The last time when the failover state was updated. | string Optional |
| state | The failover state of the replication. | WorkspaceFailoverProperties_State_STATUS Optional |
WorkspaceFeatures
Workspace features.
Used by: Workspace_Spec.
| Property | Description | Type |
|---|---|---|
| clusterResourceReference | Dedicated LA cluster resourceId that is linked to the workspaces. | genruntime.ResourceReference Optional |
| disableLocalAuth | Disable Non-AAD based Auth. | bool Optional |
| enableDataExport | Flag that indicate if data should be exported. | bool Optional |
| enableLogAccessUsingOnlyResourcePermissions | Flag that indicate which permission to use - resource or workspace or both. | bool Optional |
| immediatePurgeDataOn30Days | Flag that describes if we want to remove the data after 30 days. | bool Optional |
WorkspaceFeatures_STATUS
Workspace features.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| associations | List of associations for the workspace. Indicates if the workspace is associated with any of the following experiences: MDC, Sentinel, SentinelGraph, etc. | string[] Optional |
| clusterResourceId | Dedicated LA cluster resourceId that is linked to the workspaces. | string Optional |
| disableLocalAuth | Disable Non-AAD based Auth. | bool Optional |
| enableDataExport | Flag that indicate if data should be exported. | bool Optional |
| enableLogAccessUsingOnlyResourcePermissions | Flag that indicate which permission to use - resource or workspace or both. | bool Optional |
| immediatePurgeDataOn30Days | Flag that describes if we want to remove the data after 30 days. | bool Optional |
| unifiedSentinelBillingOnly | An indication if the specify workspace is limited to sentinel’s unified billing model only. | bool Optional |
WorkspaceOperatorSpec
Details for configuring operator behavior. Fields in this struct are interpreted by the operator directly rather than being passed to Azure
Used by: Workspace_Spec.
| Property | Description | Type |
|---|---|---|
| configMapExpressions | configures where to place operator written dynamic ConfigMaps (created with CEL expressions). | core.DestinationExpression[] Optional |
| secretExpressions | configures where to place operator written dynamic secrets (created with CEL expressions). | core.DestinationExpression[] Optional |
| secrets | configures where to place Azure generated secrets. | WorkspaceOperatorSecrets Optional |
WorkspaceProperties_ProvisioningState_STATUS
Used by: Workspace_STATUS.
| Value | Description |
|---|---|
| “Canceled” | |
| “Creating” | |
| “Deleting” | |
| “Failed” | |
| “ProvisioningAccount” | |
| “Succeeded” | |
| “Updating” |
WorkspaceReplicationProperties
Workspace replication properties.
Used by: Workspace_Spec.
| Property | Description | Type |
|---|---|---|
| enabled | Specifies whether the replication is enabled or not. When true, workspace configuration and data is replicated to the specified location. If replication is been enabled, location must be provided. | bool Optional |
| location | The location of the replication. | string Optional |
WorkspaceReplicationProperties_STATUS
Workspace replication properties.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| createdDate | The last time when the replication was enabled. | string Optional |
| enabled | Specifies whether the replication is enabled or not. When true, workspace configuration and data is replicated to the specified location. If replication is been enabled, location must be provided. | bool Optional |
| lastModifiedDate | The last time when the replication was updated. | string Optional |
| location | The location of the replication. | string Optional |
| provisioningState | The provisioning state of the replication. | WorkspaceReplicationProperties_ProvisioningState_STATUS Optional |
WorkspaceSku
The SKU (tier) of a workspace.
Used by: Workspace_Spec.
| Property | Description | Type |
|---|---|---|
| capacityReservationLevel | The capacity reservation level in GB for this workspace, when CapacityReservation sku is selected. | int Optional |
| name | The name of the SKU. | WorkspaceSku_Name Required |
WorkspaceSku_STATUS
The SKU (tier) of a workspace.
Used by: Workspace_STATUS.
| Property | Description | Type |
|---|---|---|
| capacityReservationLevel | The capacity reservation level in GB for this workspace, when CapacityReservation sku is selected. | int Optional |
| lastSkuUpdate | The last time when the sku was updated. | string Optional |
| name | The name of the SKU. | WorkspaceSku_Name_STATUS Optional |
Identity_Type
Used by: Identity.
| Value | Description |
|---|---|
| “None” | |
| “SystemAssigned” | |
| “UserAssigned” |
Identity_Type_STATUS
Used by: Identity_STATUS.
| Value | Description |
|---|---|
| “None” | |
| “SystemAssigned” | |
| “UserAssigned” |
SystemData_CreatedByType_STATUS
Used by: SystemData_STATUS.
| Value | Description |
|---|---|
| “Application” | |
| “Key” | |
| “ManagedIdentity” | |
| “User” |
SystemData_LastModifiedByType_STATUS
Used by: SystemData_STATUS.
| Value | Description |
|---|---|
| “Application” | |
| “Key” | |
| “ManagedIdentity” | |
| “User” |
UserAssignedIdentityDetails
Information about the user assigned identity for the resource
Used by: Identity.
| Property | Description | Type |
|---|---|---|
| reference | genruntime.ResourceReference Optional |
UserIdentityProperties_STATUS
User assigned identity properties.
Used by: Identity_STATUS.
| Property | Description | Type |
|---|---|---|
| clientId | The client id of user assigned identity. | string Optional |
| principalId | The principal id of user assigned identity. | string Optional |
WorkspaceCapping_DataIngestionStatus_STATUS
Used by: WorkspaceCapping_STATUS.
| Value | Description |
|---|---|
| “ApproachingQuota” | |
| “ForceOff” | |
| “ForceOn” | |
| “OverQuota” | |
| “RespectQuota” | |
| “SubscriptionSuspended” |
WorkspaceFailoverProperties_State_STATUS
Used by: WorkspaceFailoverProperties_STATUS.
| Value | Description |
|---|---|
| “Activating” | |
| “Active” | |
| “Deactivating” | |
| “Failed” | |
| “Inactive” |
WorkspaceOperatorSecrets
Used by: WorkspaceOperatorSpec.
| Property | Description | Type |
|---|---|---|
| primarySharedKey | indicates where the PrimarySharedKey secret should be placed. If omitted, the secret will not be retrieved from Azure. | genruntime.SecretDestination Optional |
| secondarySharedKey | indicates where the SecondarySharedKey secret should be placed. If omitted, the secret will not be retrieved from Azure. | genruntime.SecretDestination Optional |
WorkspaceReplicationProperties_ProvisioningState_STATUS
Used by: WorkspaceReplicationProperties_STATUS.
| Value | Description |
|---|---|
| “Canceled” | |
| “DisableRequested” | |
| “Disabling” | |
| “EnableRequested” | |
| “Enabling” | |
| “Failed” | |
| “RollbackRequested” | |
| “RollingBack” | |
| “Succeeded” |
WorkspaceSku_Name
Used by: WorkspaceSku.
| Value | Description |
|---|---|
| “CapacityReservation” | |
| “Free” | |
| “LACluster” | |
| “PerGB2018” | |
| “PerNode” | |
| “Premium” | |
| “Standalone” | |
| “Standard” |
WorkspaceSku_Name_STATUS
Used by: WorkspaceSku_STATUS.
| Value | Description |
|---|---|
| “CapacityReservation” | |
| “Free” | |
| “LACluster” | |
| “PerGB2018” | |
| “PerNode” | |
| “Premium” | |
| “Standalone” | |
| “Standard” |