Event Analytics

Events in Event Hub can be filtered by rules in Event Analytics. These rules are grouped into sessions. A session can either be delivered as a standard, or be created by the customer. All sessions are managed in theEvent Analytics Rules administration tool.

Event Analytics configuration and content are not connected to an organization (company or division) but are configured on a tenant level.

Resource Category Description
Sessions Configuration In Sessions, you can start and stop a session.

This configuration is used for both standard sessions and custom sessions.

A custom session must either already exist for the target tenant or be included as content in the same local package.

Custom Sessions Content You cannot export a custom session that contains an invalid rule, even if the rule is not active.

Hard-coded companies and divisions in custom rules are not updated to the organization for the target tenant.

A new custom session in the target tenant is stopped after import by default. An updated custom session in the target tenant maintains its current start-or-stop state by default. Use the session configuration resource in the same local package to set the start-or-stop state for the custom session.

A new custom rule in a new or updated custom session in the target tenant is inactive after import and you must activate it manually. An existing rule in an updated custom session in the target tenant maintains its current active-or-inactive state after import.