added missing column from syslog

[AlexBevan]

Added missing column from syslog table from LAW, this is impacting requirement I have to ensure all log formats are documented.

az monitor log-analytics workspace table show --resource-group xxxxxxx--workspace-name xxxxxxxx --name Syslog

{
  "archiveRetentionInDays": 275,
  "id": "/subscriptions/xxxxxxxxxxxxx/resourceGroups/xxxxxxxxxxx/providers/Microsoft.OperationalInsights/workspaces/core-xxxxxxxxxx/tables/Syslog",
  "name": "Syslog",
  "plan": "Analytics",
  "provisioningState": "Succeeded",
  "resourceGroup": "xxxxxxxxxxxxx",
  "retentionInDays": 90,
  "retentionInDaysAsDefault": false,
  "schema": {
    "columns": [],
    "name": "Syslog",
    "solutions": [
      "LogManagement"
    ],
    "standardColumns": [
      {
        "description": "ID of the workspace that stores this record",
        "isDefaultDisplay": true,
        "isHidden": true,
        "name": "TenantId",
        "type": "guid"
      },
      {
        "description": "Type of agent the data was collected from. For syslog the value is typically Linux.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "SourceSystem",
        "type": "string"
      },
      {
        "description": "Date and time the record was created.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "TimeGenerated",
        "type": "datetime"
      },
      {
        "description": "ID of the management group for System Center Operations Manager agents.",
        "isDefaultDisplay": true,
        "isHidden": true,
        "name": "MG",
        "type": "guid"
      },
      {
        "isDefaultDisplay": true,
        "isHidden": true,
        "name": "TimeCollected",
        "type": "datetime"
      },
      {
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "ManagementGroupName",
        "type": "string"
      },
      {
        "description": "Computer that the event was collected from.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "Computer",
        "type": "string"
      },
      {
        "description": "Date and time that the event was generated.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "EventTime",
        "type": "datetime"
      },
      {
        "description": "The part of the system that generated the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "Facility",
        "type": "string"
      },
      {
        "description": "Name of the system sending the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "HostName",
        "type": "string"
      },
      {
        "description": "Severity level of the event.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "SeverityLevel",
        "type": "string"
      },
      {
        "description": "Text of the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "SyslogMessage",
        "type": "string"
      },
      {
        "description": "ID of the process that generated the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "ProcessID",
        "type": "int"
      },
      {
        "description": "IP address of the system sending the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "HostIP",
        "type": "string"
      },
      {
        "description": "Name of the process that generated the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "ProcessName",
        "type": "string"
      },
      {
        "description": "Name of the remote device that generated the message.",
        "isDefaultDisplay": true,
        "isHidden": false,
        "name": "CollectorHostName",
        "type": "string"
      }
    ],
    "tableSubType": "DataCollectionRuleBased",
    "tableType": "Microsoft"
  },
  "totalRetentionInDays": 365,
  "totalRetentionInDaysAsDefault": false
}

[prmerger-automator]

@AlexBevan : Thanks for your contribution! The author(s) have been notified to review your proposed change.

[learn-build-service-prod]

Learn Build status updates of commit f91f425:

✅ Validation status: passed

File	Status	Preview URL	Details
azure-monitor-ref/tables/includes/syslog-include.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[ShannonLeavitt]

@osalzberg

Can you review the proposed changes?

IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team