zoom_in Click to enlarge

Azure Log Analytics Workspace

▲ ▼

description Azure Log Analytics Workspace Overview

This is the core data repository for nearly all Azure monitoring data. It provides the powerful Kusto Query Language (KQL), allowing users to query, filter, and analyze massive volumes of structured and unstructured logs from virtually any Azure service. Its strength is its unparalleled query flexibility, enabling security teams and operations staff to build highly specific detection rules and historical trend analyses.

help Azure Log Analytics Workspace FAQ

What is an Azure Log Analytics Workspace used for?

It is the central place where many Azure Monitor logs are stored and queried. Users run Kusto Query Language, or KQL, against data from resources such as virtual machines, App Service, Azure Kubernetes Service, and Microsoft Defender.

How is a Log Analytics Workspace different from Application Insights?

Application Insights focuses on application telemetry such as requests, dependencies, and exceptions. A Log Analytics Workspace is the broader log store and query surface that can also hold Application Insights workspace-based data.

What language do you use to query Azure Log Analytics?

Azure Log Analytics uses Kusto Query Language. A simple query might start with a table such as AzureActivity or Heartbeat, then filter by TimeGenerated and summarize results.

swap_horiz

Looking for Azure Log Analytics Workspace alternatives? Compare top competitors ranked & scored

arrow_forward