Zeema
New design
Catalogue / monitoring

Data collection endpoint

azureMonitoringazure-monitor-data-collection-endpoint

Regional Azure Monitor endpoint carrying the logs ingestion, metrics ingestion and configuration access URLs that agents and the Logs Ingestion API call.

Provider
azure
Kind
Monitoring
Category
Operations
Official docs
https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-endpoint-overview
Also known as
DCE
Properties · 3 set by this component
propertytypevaluesrequiredkind defaultthis component
alertGroupingboolean—nofalseinherited
collectorModeenumpull | pushnopull▸ push
configurationAccess · component propertyboolean—notrueinherited
independentOfMonitoredboolean—nofalseinherited
managedboolean—nofalse▸ true
minimumTlsVersion · component propertystring—no1.2inherited
privateLink · component propertyboolean—nofalseinherited
publicNetworkAccess · component propertyenumenabled | disabled | secured-by-perimeterno—inherited
retentionDaysinteger—no—inherited
signalenummetrics | logs | traces | alerts | allnometrics▸ all
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "monitor-data-collection-endpoint", component: "azure-monitor-data-collection-endpoint" }
Other Monitoring products · 174
ActionTrailalibaba-actiontrailalibabacloudmonitoringApplication Real-Time Monitoring Servicealibaba-armsalibabacloudmonitoringCloudMonitoralibaba-cloud-monitoralibabacloudmonitoringDatabase Autonomy Servicealibaba-dasalibabacloudmonitoringSimple Log Servicealibaba-log-servicealibabacloudmonitoringSecurity Centeralibaba-security-centeralibabacloudmonitoringAmazon CloudWatch investigationsaws-aiopsawsmonitoringAWS Audit Manageraws-audit-managerawsmonitoringAWS CloudTrailaws-cloudtrailawsmonitoringAWS CloudTrail Lakeaws-cloudtrail-lakeawsmonitoringAmazon CloudWatch Application Insightsaws-cloudwatch-application-insightsawsmonitoringAmazon CloudWatch Application Signalsaws-cloudwatch-application-signalsawsmonitoringAmazon CloudWatch Internet Monitoraws-cloudwatch-internet-monitorawsmonitoringAmazon CloudWatch Logsaws-cloudwatch-logsawsmonitoringAmazon CloudWatch Network Flow Monitoraws-cloudwatch-network-flow-monitorawsmonitoringAmazon CloudWatch Network Monitoraws-cloudwatch-network-monitorawsmonitoringAmazon CloudWatch RUMaws-cloudwatch-rumawsmonitoringAmazon CloudWatch Syntheticsaws-cloudwatch-syntheticsawsmonitoringAmazon CodeGuru Profileraws-codeguru-profilerawsmonitoringAWS Compute Optimizeraws-compute-optimizerawsmonitoringAmazon Detectiveaws-detectiveawsmonitoringAmazon DevOps Guruaws-devops-guruawsmonitoringAmazon GuardDutyaws-guarddutyawsmonitoringAmazon Inspectoraws-inspectorawsmonitoringAWS IoT Device Defenderaws-iot-device-defenderawsmonitoringAmazon Macieaws-macieawsmonitoringAmazon Managed Grafanaaws-managed-grafanaawsmonitoringAmazon Managed Service for Prometheusaws-managed-prometheusawsmonitoringAWS Migration Hubaws-migration-hubawsmonitoringAWS Resilience Hubaws-resilience-hubawsmonitoringAWS Security Hub CSPMaws-security-hubawsmonitoringAWS Security Incident Responseaws-security-incident-responseawsmonitoringAWS Trusted Advisoraws-trusted-advisorawsmonitoringAWS X-Rayaws-xrayawsmonitoringAmazon CloudWatchcloudwatchawsmonitoringAzure Advisorazure-advisorazuremonitoringApplication Insightsazure-application-insightsazuremonitoringMicrosoft Defender External Attack Surface Managementazure-defender-easmazuremonitoringMicrosoft Defender for Cloudazure-defender-for-cloudazuremonitoringMicrosoft Defender for IoTazure-defender-for-iotazuremonitoring
and 134 more → Monitoring page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Data collection endpoint: the regional Azure resource that carries the logs ingestion, metrics
# ingestion and configuration access URLs Azure Monitor Agent and the Logs Ingestion API call
# ("Data collection endpoints in Azure Monitor"). That page states the configuration access endpoint
# is where the agent retrieves its data collection rules, that a DCE is required for Private Link and
# for the Windows firewall log and Container Insights Prometheus sources, and that Log Analytics and
# Azure Monitor workspaces are its only destinations. The resource provider documents three values for
# networkAcls.publicNetworkAccess and no default ("Microsoft.Insights/dataCollectionEndpoints"), so
# the property carries none here. "Logs Ingestion API in Azure Monitor": TLS 1.2 or higher is enforced
# from 1 March 2026.
schemaVersion: "1"
type: "component"
id: "azure-monitor-data-collection-endpoint"
kind: "monitoring"
provider: "azure"
docs: "https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-endpoint-overview"
aliases: ["DCE"]
defaults:
  managed: true
  signal: "all"
  collectorMode: "push"
properties:
  publicNetworkAccess:
    type: "enum"
    values: ["enabled", "disabled", "secured-by-perimeter"]
  privateLink:
    type: "boolean"
    default: false
  configurationAccess:
    type: "boolean"
    default: true
  minimumTlsVersion:
    type: "string"
    default: "1.2"

The same page as markdown, for an agent: /catalogue/components/azure-monitor-data-collection-endpoint.md