Run a Saved Search
A 2-step recipe with Azure Log Analytics. We can help you get access.
Recipe · 2 steps
Run a Saved Search
with Azure Log Analytics
Read a saved search and execute its stored KQL against the workspace.
- Read the saved search to obtain its stored KQL query text and display name before executing it.
- Execute the saved search's stored KQL query against the workspace and return the tabular results.
What you'll need to have ready
- subscriptionId: The ID of the target Azure subscription.
- resourceGroupName: The resource group that contains the workspace.
- workspaceName: The management name of the Log Analytics workspace.
- savedSearchId: The ID of the saved search to run.
- workspaceId: The customer (workspace) GUID used by the query endpoint.
- timespan: Optional ISO 8601 duration limiting the query window (e.g. P1D).
- managementApiVersion: The management API version to use.
For your developer
Arazzo workflow azure-log-analytics:saved-search-to-query, 2 operations: getSavedSearch → postQuery. Specs on APIs.io.