There is a command group 'az_monitor_data collection_rule_syslog'. This group of commands could 'manage syslog data source'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_monitor_data collection_rule_syslog_update'.The syntax is: az monitor data-collection rule syslog update --name
                                              --resource-group
                                              --rule-name
                                              [--facility-names {*, auth, authpriv, cron, daemon, kern, local0, local1, local2, local3, local4, local5, local6, local7, lpr, mail, mark, news, syslog, user, uucp}]
                                              [--log-levels {*, alert, critical, debug, emergency, error, info, notice, warning}]
                                              [--streams {microsoft-syslog}]. The 1th example of the child command would be to use it to 'update a syslog data source', the syntax is: az monitor data-collection rule syslog update --rule-name "myCollectionRule" --resource-group "myResourceGroup" --name "syslogBase" --facility-names "syslog" --log-levels "Emergency" "Critical". The parameter '--name -n' is required. It is used to a friendly name for the data source. this name should be unique across all data sources (regardless of type) within the data collection rule.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--rule-name' is required. It is used to the name of the data collection rule. the name is case insensitive.. The parameter '--facility-names' is optional. the list of facility names.. The parameter '--log-levels' is optional. the log levels to collect.. The parameter '--streams' is optional. list of streams that this data source will be sent to. a stream indicates what schema will be used for this data and usually what table in log analytics the data will be sent to.. 