This template creates a data collection rule defining the data source (Syslog) and the destination workspace.
{"type": "microsoft.insights/components", "apiversion": "2020-02-02", "name": "[variables('appinsightname')]", "location": "[parameters('location')]", "kind": "string", "tags": {"displayname": "appinsight", "projectname": "[parameters('appname')]"}, "properties": {"application_type": "web", "workspaceresourceid": "[resourceid('microsoft.operationalinsights/workspaces", variables('loganalyticsname'))]"}, "dependson": ["[resourceid('microsoft.operationalinsights/workspaces", variables('loganalyticsname'))]"]} 