Can I filter what logs need to be sent to my Azure Log Analystic Workspace?

[mvp314048]

Hello,

Is it possible to filter what logs need to be sent to my Azure Log Analystic Workspace? In my case, I am sending all the AuditLogs from Microsoft Entra ID to my Azure Log Analystic Workspace, but my organization is large, I just need a very small group of people's activities to be logged and sent to the workspace.

Thank you!

[#2]

If your Table is supported you can look at using https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-transformations#wor...