What you can do with Azure Log Analytics
Every task in plain language. Pick one, and we can help you get access.
14 things you can do
Azure Log Analytics
Azure Log Analytics is a service that helps you collect and analyze data generated by resources in your cloud and on-premises environments, providing query, management, and data collection APIs for monitoring and analytics.
14 multi-step recipesRecipes: multi-step jobs
Audit and Clean Up a Saved SearchList and inspect a saved search, then conditionally delete it.Browse Saved Searches and Run One
Enumerate saved searches, fetch one's stored KQL, and execute it.Create Workspace and Baseline Custom Table
Provision a workspace, add a baseline custom table, then confirm the table.Cross-Workspace Query
List subscription workspaces, then run a KQL query spanning multiple of them.Discover and Query Workspace
List subscription workspaces, resolve one, and run a KQL query against it.Ingest Logs and Verify
Read the target table, upload logs through a DCR, then query to verify.Inspect Table Schema then Query
Enumerate workspace tables, read one table's schema, then query it.Provision Custom Table then Ingest and Verify
Create a custom table, ingest logs via a DCR, then query to verify ingestion.Query Workspace by Name (GET)
Resolve a workspace by name, then run a KQL query with the GET endpoint.Resolve Workspace by Resource Group and Run KQL
List resource-group workspaces, resolve one, and execute a KQL query.Run a Saved Search
Read a saved search and execute its stored KQL against the workspace.Update Workspace Retention and Verify
Capture current retention, patch the workspace, then verify the new value.Validate then Save a KQL Query
Validate a KQL query by running it, then persist it as a saved search.Workspace Inventory Report
Resolve a workspace and collect its tables and saved searches into a report.