Data Collection Rules

Azure Monitor Agent DCRs: Collect Windows Events, Counters and Syslog

Use Azure Monitor Agent and data collection rules to send Windows event logs, performance counters and Linux Syslog to Log Analytics, with XPath filters, JSON DCRs and Azure Policy.