Data collection rule
Declares what Azure Monitor collects, the KQL transformation applied on ingestion, and the destination workspace, metric store or event hub.
- Provider
- azure
- Kind
- Monitoring
- Category
- Operations
- Official docs
- https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-rule-overview
- Also known as
- DCR
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| alertGrouping | boolean | — | no | false | inherited |
| collectorMode | enum | pull | push | no | pull | ▸ push |
| dataCollectionEndpoint | boolean | — | no | false | inherited |
| destination | enum | log-analytics | azure-monitor-metrics | azure-data-explorer | event-hubs | storage | microsoft-fabric | no | — | inherited |
| independentOfMonitored | boolean | — | no | false | inherited |
| managed | boolean | — | no | false | ▸ true |
| maxAssociationsPerResource | integer | — | no | 30 | inherited |
| retentionDays | integer | — | no | — | inherited |
| signal | enum | metrics | logs | traces | alerts | all | no | metrics | ▸ all |
| transform | boolean | — | no | false | inherited |
| zoneRedundant | boolean | — | no | true | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "monitor-data-collection-rule", component: "azure-monitor-data-collection-rule" }ActionTrailalibaba-actiontrailApplication Real-Time Monitoring Servicealibaba-armsCloudMonitoralibaba-cloud-monitorDatabase Autonomy Servicealibaba-dasSimple Log Servicealibaba-log-serviceSecurity Centeralibaba-security-centerAmazon CloudWatch investigationsaws-aiopsAWS Audit Manageraws-audit-managerAWS CloudTrailaws-cloudtrailAWS CloudTrail Lakeaws-cloudtrail-lakeAmazon CloudWatch Application Insightsaws-cloudwatch-application-insightsAmazon CloudWatch Application Signalsaws-cloudwatch-application-signalsAmazon CloudWatch Internet Monitoraws-cloudwatch-internet-monitorAmazon CloudWatch Logsaws-cloudwatch-logsAmazon CloudWatch Network Flow Monitoraws-cloudwatch-network-flow-monitorAmazon CloudWatch Network Monitoraws-cloudwatch-network-monitorAmazon CloudWatch RUMaws-cloudwatch-rumAmazon CloudWatch Syntheticsaws-cloudwatch-syntheticsAmazon CodeGuru Profileraws-codeguru-profilerAWS Compute Optimizeraws-compute-optimizerAmazon Detectiveaws-detectiveAmazon DevOps Guruaws-devops-guruAmazon GuardDutyaws-guarddutyAmazon Inspectoraws-inspectorAWS IoT Device Defenderaws-iot-device-defenderAmazon Macieaws-macieAmazon Managed Grafanaaws-managed-grafanaAmazon Managed Service for Prometheusaws-managed-prometheusAWS Migration Hubaws-migration-hubAWS Resilience Hubaws-resilience-hubAWS Security Hub CSPMaws-security-hubAWS Security Incident Responseaws-security-incident-responseAWS Trusted Advisoraws-trusted-advisorAWS X-Rayaws-xrayAmazon CloudWatchcloudwatchAzure Advisorazure-advisorApplication Insightsazure-application-insightsMicrosoft Defender External Attack Surface Managementazure-defender-easmMicrosoft Defender for Cloudazure-defender-for-cloudMicrosoft Defender for IoTazure-defender-for-iot
and 134 more → Monitoring page# yaml-language-server: $schema=../../schema/component.schema.json # Data collection rule: the Azure Monitor resource that declares what to collect, the KQL # transformation to apply on ingestion and where the data goes ("Data Collection Rules in Azure # Monitor"). That page states a DCR is stored in one region and backed up to its paired region and # deployed to all three availability zones, "for this reason, it's a zone-redundant service", and that # up to 30 DCRs can be associated with a single resource. A transformation is optional, so transform # defaults to false; the destination is chosen per data flow and therefore carries no default. The # destination list is the set the resource provider exposes under properties.destinations # ("Microsoft.Insights/dataCollectionRules"). schemaVersion: "1" type: "component" id: "azure-monitor-data-collection-rule" kind: "monitoring" provider: "azure" docs: "https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-rule-overview" aliases: ["DCR"] defaults: managed: true signal: "all" collectorMode: "push" properties: transform: type: "boolean" default: false destination: type: "enum" values: ["log-analytics", "azure-monitor-metrics", "azure-data-explorer", "event-hubs", "storage", "microsoft-fabric"] dataCollectionEndpoint: type: "boolean" default: false zoneRedundant: type: "boolean" default: true maxAssociationsPerResource: type: "integer" default: 30