Provision Custom Table then Ingest and Verify
A 3-step recipe with Azure Log Analytics. We can help you get access.
Recipe · 3 steps
Provision Custom Table then Ingest and Verify
with Azure Log Analytics
Create a custom table, ingest logs via a DCR, then query to verify ingestion.
- Create or update the custom table on the workspace with the supplied column schema so it is ready to receive ingested data.
- Send the batch of log entries through the data collection rule stream to the ingestion endpoint. A 204 indicates the data was accepted.
- Run the verification KQL query against the new table to confirm the ingested rows are queryable.
What you'll need to have ready
- subscriptionId: The ID of the target Azure subscription.
- resourceGroupName: The resource group that contains the workspace.
- workspaceName: The management name of the Log Analytics workspace.
- tableName: The name of the custom table to create (e.g. MyTable_CL).
- tableColumns: The column definitions for the custom table schema.
- dcrImmutableId: The immutable ID of the data collection rule used for ingestion.
- streamName: The DCR stream name that handles the data (e.g. Custom-MyTable).
- logEntries: The batch of log entry objects to upload.
- workspaceId: The customer (workspace) GUID used by the query endpoint.
- verifyQuery: The KQL query used to verify the ingested rows are present.
- timespan: Optional ISO 8601 duration limiting the verification query (e.g. PT1H).
- managementApiVersion: The management API version to use.
For your developer
Arazzo workflow azure-log-analytics:provision-table-and-ingest, 3 operations: createOrUpdateTable → uploadLogs → postQuery. Specs on APIs.io.