Streams Defender for Cloud recommendations and alerts out to Event Hubs or to a Log Analytics workspace, either as they happen or in weekly snapshots; Azure Policy can apply the setting at scale.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Continuous export in context, with comparison tables and the common traps.
Terms in this definition
- Azure Event Hubs
Azure service for ingesting telemetry at high volume over HTTPS or AMQP; diagnostic settings can send data to it.
- Log Analytics workspace
Where Azure Monitor keeps log data for querying with KQL. Microsoft Sentinel, VM insights and workspace-based Application Insights all depend on one.
- Azure Policy
Azure service that audits and enforces how resources are configured, for example their location, SKU or tags, using definitions and assignments. It neither deploys resources nor controls access.
- APPLY
Evaluates a table-valued expression for every row on its left, inside
FROM. Think ofOUTER APPLYas a left outer join andCROSS APPLYas an inner join.