Microsoft.OperationalInsights clusters 2025-07-01

Bicep resource definition

The clusters resource type can be deployed with operations that target:

• Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.OperationalInsights/clusters resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.OperationalInsights/clusters@2025-07-01' = {
  identity: {
    type: 'string'
    userAssignedIdentities: {
      {customized property}: {}
    }
  }
  location: 'string'
  name: 'string'
  properties: {
    associatedWorkspaces: [
      {}
    ]
    billingType: 'string'
    capacityReservationProperties: {}
    isAvailabilityZonesEnabled: bool
    isDoubleEncryptionEnabled: bool
    keyVaultProperties: {
      keyName: 'string'
      keyRsaSize: int
      keyVaultUri: 'string'
      keyVersion: 'string'
    }
    replication: {
      enabled: bool
      isAvailabilityZonesEnabled: bool
      location: 'string'
    }
  }
  sku: {
    capacity: int
    name: 'string'
  }
  tags: {
    {customized property}: 'string'
  }
}

Property Values

Microsoft.OperationalInsights/clusters

AssociatedWorkspace

CapacityReservationProperties

ClusterProperties

ClusterReplicationProperties

ClusterSku

KeyVaultProperties

ManagedServiceIdentity

TrackedResourceTags

UserAssignedIdentities

UserAssignedIdentity

Usage Examples

Bicep Samples

A basic example of deploying Log Analytics Cluster.

param resourceName string = 'acctest0001'
param location string = 'westeurope'

resource cluster 'Microsoft.OperationalInsights/clusters@2020-08-01' = {
  name: resourceName
  location: location
  sku: {
    capacity: 1000
    name: 'CapacityReservation'
  }
}

Azure Verified Modules

The following Azure Verified Modules can be used to deploy this resource type.

ARM template resource definition

The clusters resource type can be deployed with operations that target:

• Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.OperationalInsights/clusters resource, add the following JSON to your template.

{
  "type": "Microsoft.OperationalInsights/clusters",
  "apiVersion": "2025-07-01",
  "name": "string",
  "identity": {
    "type": "string",
    "userAssignedIdentities": {
      "{customized property}": {
      }
    }
  },
  "location": "string",
  "properties": {
    "associatedWorkspaces": [
      {
      }
    ],
    "billingType": "string",
    "capacityReservationProperties": {
    },
    "isAvailabilityZonesEnabled": "bool",
    "isDoubleEncryptionEnabled": "bool",
    "keyVaultProperties": {
      "keyName": "string",
      "keyRsaSize": "int",
      "keyVaultUri": "string",
      "keyVersion": "string"
    },
    "replication": {
      "enabled": "bool",
      "isAvailabilityZonesEnabled": "bool",
      "location": "string"
    }
  },
  "sku": {
    "capacity": "int",
    "name": "string"
  },
  "tags": {
    "{customized property}": "string"
  }
}

Property Values

Microsoft.OperationalInsights/clusters

AssociatedWorkspace

CapacityReservationProperties

ClusterProperties

ClusterReplicationProperties

ClusterSku

KeyVaultProperties

ManagedServiceIdentity

TrackedResourceTags

UserAssignedIdentities

UserAssignedIdentity

Usage Examples

Terraform (AzAPI provider) resource definition

The clusters resource type can be deployed with operations that target:

• Resource groups

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.OperationalInsights/clusters resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.OperationalInsights/clusters@2025-07-01"
  name = "string"
  parent_id = "string"
  identity {
    type = "string"
    identity_ids = [
      "string"
    ]
  }
  location = "string"
  tags = {
    {customized property} = "string"
  }
  body = {
    properties = {
      associatedWorkspaces = [
        {
        }
      ]
      billingType = "string"
      capacityReservationProperties = {
      }
      isAvailabilityZonesEnabled = bool
      isDoubleEncryptionEnabled = bool
      keyVaultProperties = {
        keyName = "string"
        keyRsaSize = int
        keyVaultUri = "string"
        keyVersion = "string"
      }
      replication = {
        enabled = bool
        isAvailabilityZonesEnabled = bool
        location = "string"
      }
    }
    sku = {
      capacity = int
      name = "string"
    }
  }
}

Property Values

Microsoft.OperationalInsights/clusters

AssociatedWorkspace

CapacityReservationProperties

ClusterProperties

ClusterReplicationProperties

ClusterSku

KeyVaultProperties

ManagedServiceIdentity

TrackedResourceTags

UserAssignedIdentities

UserAssignedIdentity

Usage Examples

Terraform Samples

A basic example of deploying Log Analytics Cluster.

terraform {
  required_providers {
    azapi = {
      source = "Azure/azapi"
    }
  }
}

provider "azapi" {
  skip_provider_registration = false
}

variable "resource_name" {
  type    = string
  default = "acctest0001"
}

variable "location" {
  type    = string
  default = "westeurope"
}

resource "azapi_resource" "resourceGroup" {
  type     = "Microsoft.Resources/resourceGroups@2020-06-01"
  name     = var.resource_name
  location = var.location
}

resource "azapi_resource" "cluster" {
  type      = "Microsoft.OperationalInsights/clusters@2020-08-01"
  parent_id = azapi_resource.resourceGroup.id
  name      = var.resource_name
  location  = var.location
  identity {
    type         = "SystemAssigned"
    identity_ids = []
  }
  body = {
    sku = {
      capacity = 1000
      name     = "CapacityReservation"
    }
  }
  schema_validation_enabled = false
  response_export_values    = ["*"]
}