onelinecommand

Resources

| where type == “microsoft.insights/datacollectionrules”

| join kind=inner (

    resourcecontainers

    | where type == “microsoft.resources/subscriptions”

    | project subscriptionId, SubscriptionName = name

) on subscriptionId

| extend laDestinations = properties.destinations.logAnalytics

| mv-expand laDestinations

| extend WorkspaceResourceId = tostring(laDestinations.workspaceResourceId)

| extend WorkspaceName = split(WorkspaceResourceId, “/”)[-1]

| extend TargetResourcesRaw = properties.targetResources

| mv-expand TargetResourcesRaw to typeof(string)

| extend ConnectedResourceName = split(TargetResourcesRaw, “/”)[-1]

| project 

    DCRName = name,

    SubscriptionName,

    WorkspaceName,

    SubscriptionId,

    ResourceGroup = resourceGroup,

    Location = location,

    DataSources = properties.dataSources,

    ConnectedResourceName