{"files":{"SKILL.md":"---\nname: azure-log-analytics\ndescription: \"Azure Log Analytics API skill. Use when working with Azure Log Analytics for subscriptions, providers. Covers 18 endpoints.\"\nversion: 1.0.0\ngenerator: lapsh\n---\n\n# Azure Log Analytics\nAPI version: 2015-11-01-preview\n\n## Auth\nOAuth2\n\n## Base URL\nhttps://management.azure.com\n\n## Setup\n1. Configure auth: OAuth2\n2. GET /providers/Microsoft.OperationalInsights/operations -- lists all of the available operationalinsights rest api operations.\n3. POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Disable -- create first Disable\n\n## Endpoints\n18 endpoints across 2 groups. See references/api-spec.lap for full details.\n\n### Subscriptions\n| Method | Path | Description |\n|--------|------|-------------|\n| PUT | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName} | Create or update a data source. |\n| DELETE | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName} | Deletes a data source instance. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName} | Gets a datasource instance. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources | Gets the first page of data source instances in a workspace with the link to the next page. |\n| POST | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Disable | Disables an intelligence pack for a given workspace. |\n| POST | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Enable | Enables an intelligence pack for a given workspace. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks | Lists all the intelligence packs possible and whether they are enabled or disabled for a given workspace. |\n| POST | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/sharedKeys | Gets the shared keys for a workspace. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/usages | Gets a list of usage metrics for a workspace. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/managementGroups | Gets a list of management groups connected to a workspace. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces | Gets workspaces in a resource group. |\n| GET | /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/workspaces | Gets the workspaces in a subscription. |\n| PUT | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName} | Create or update a workspace. |\n| DELETE | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName} | Deletes a workspace instance. |\n| GET | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName} | Gets a workspace instance. |\n| PATCH | /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName} | Updates a workspace. |\n| GET | /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/locations/{location}/operationStatuses/{asyncOperationId} | Get the status of an azure asynchronous operation. |\n\n### Providers\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /providers/Microsoft.OperationalInsights/operations | Lists all of the available OperationalInsights Rest API operations. |\n\n## Common Questions\nMatch user requests to endpoints in references/api-spec.lap. Key patterns:\n- \"Update a dataSource?\" -> PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}\n- \"Delete a dataSource?\" -> DELETE /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}\n- \"Get dataSource details?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}\n- \"List all dataSources?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources\n- \"Create a Disable?\" -> POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Disable\n- \"Create a Enable?\" -> POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Enable\n- \"List all intelligencePacks?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks\n- \"Create a sharedKey?\" -> POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/sharedKeys\n- \"List all usages?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/usages\n- \"List all managementGroups?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/managementGroups\n- \"List all workspaces?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces\n- \"Update a workspace?\" -> PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n- \"Delete a workspace?\" -> DELETE /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n- \"Get workspace details?\" -> GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n- \"Partially update a workspace?\" -> PATCH /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n- \"List all operations?\" -> GET /providers/Microsoft.OperationalInsights/operations\n- \"Get operationStatuse details?\" -> GET /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/locations/{location}/operationStatuses/{asyncOperationId}\n- \"How to authenticate?\" -> See Auth section above\n\n## Response Tips\n- Check response schemas in references/api-spec.lap for field details\n- Create/update endpoints return the modified resource on success\n\n## References\n- Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas\n\n> Generated from the official API spec by [LAP](https://lap.sh)\n","references/api-spec.lap":"@lap v0.3\n# Machine-readable API spec. Each @endpoint block is one API call.\n@api Azure Log Analytics\n@base https://management.azure.com\n@version 2015-11-01-preview\n@auth OAuth2\n@common_fields {api-version: any # Client Api Version.}\n@endpoints 18\n@toc subscriptions(17), providers(1)\n\n@group subscriptions\n@endpoint PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}\n@desc Create or update a data source.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace that will contain the datasource, dataSourceName: any # The name of the datasource resource., parameters: any # The parameters required to create or update a datasource., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n@returns(201) Created response definition.\n\n@endpoint DELETE /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}\n@desc Deletes a data source instance.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace that contains the datasource., dataSourceName: any # Name of the datasource., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n@returns(204) NoContent response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources/{dataSourceName}\n@desc Gets a datasource instance.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace that contains the datasource., dataSourceName: any # Name of the datasource, subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/dataSources\n@desc Gets the first page of data source instances in a workspace with the link to the next page.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # The workspace that contains the data sources., $filter: any # The filter to apply on the operation., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@optional {$skiptoken: any # Starting point of the collection of data source instances.}\n@returns(200) OK response definition.\n\n@endpoint POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Disable\n@desc Disables an intelligence pack for a given workspace.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace., intelligencePackName: any # The name of the intelligence pack to be disabled., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks/{intelligencePackName}/Enable\n@desc Enables an intelligence pack for a given workspace.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace., intelligencePackName: any # The name of the intelligence pack to be enabled., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/intelligencePacks\n@desc Lists all the intelligence packs possible and whether they are enabled or disabled for a given workspace.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint POST /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/sharedKeys\n@desc Gets the shared keys for a workspace.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # Name of the Log Analytics Workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/usages\n@desc Gets a list of usage metrics for a workspace.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # The name of the workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/managementGroups\n@desc Gets a list of management groups connected to a workspace.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., workspaceName: any # The name of the workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces\n@desc Gets workspaces in a resource group.\n@required {resourceGroupName: any # The name of the resource group to get. The name is case insensitive., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/workspaces\n@desc Gets the workspaces in a subscription.\n@required {subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n@desc Create or update a workspace.\n@required {resourceGroupName: any # The resource group name of the workspace., workspaceName: any # The name of the workspace., parameters: any # The parameters required to create or update a workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n@returns(201) Created response definition.\n\n@endpoint DELETE /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n@desc Deletes a workspace instance.\n@required {resourceGroupName: any # The resource group name of the workspace., workspaceName: any # Name of the Log Analytics Workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n@returns(204) NoContent response definition.\n\n@endpoint GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n@desc Gets a workspace instance.\n@required {resourceGroupName: any # The resource group name of the workspace., workspaceName: any # Name of the Log Analytics Workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK response definition.\n\n@endpoint PATCH /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}\n@desc Updates a workspace.\n@required {resourceGroupName: any # The resource group name of the workspace., workspaceName: any # The name of the workspace., parameters: any # The parameters required to patch a workspace., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) The existing workspace was successfully updated. Check provisioningStatus to see detailed status.\n\n@endgroup\n\n@group providers\n@endpoint GET /providers/Microsoft.OperationalInsights/operations\n@desc Lists all of the available OperationalInsights Rest API operations.\n@returns(200) OK response definition.\n\n@endgroup\n\n@group subscriptions\n@endpoint GET /subscriptions/{subscriptionId}/providers/Microsoft.OperationalInsights/locations/{location}/operationStatuses/{asyncOperationId}\n@desc Get the status of an azure asynchronous operation.\n@required {location: any # The region name of operation., asyncOperationId: any # The operation Id., subscriptionId: any # Gets subscription credentials which uniquely identify Microsoft Azure subscription. The subscription ID forms part of the URI for every service call.}\n@returns(200) OK. Operation status.\n\n@endgroup\n\n@end\n"}}