search
Get Started
search
Log Analytics - Azure Monitor
zoom_in Click to enlarge

Log Analytics

language

description Log Analytics Overview

Within Azure Monitor, Log Analytics provides an interface for querying collected log data. It uses Kusto Query Language, or KQL, to filter records and summarize patterns across the data available in a workspace. That data can come from Azure services and connected on-premises systems, giving investigators a central place to examine related events. Enterprise operations teams and developers can use queries to investigate faults, compare activity over time and understand application or system health.

Its strength is the ability to ask specific questions of the collected records instead of relying only on a preset chart. Log Analytics is the query tool, while a Log Analytics workspace stores the relevant Azure Monitor Logs data. Meaningful results depend on the sources being connected and on the query matching the question under investigation.

help Log Analytics FAQ

What is Log Analytics used for inside Azure Monitor?

Log Analytics stores and queries telemetry in Azure Monitor workspaces, including logs from Azure resources, virtual machines, applications, and security tools. Engineers use it to investigate incidents, build dashboards, and power alerts.

What language do Log Analytics queries use?

Log Analytics uses Kusto Query Language, usually called KQL. A typical query might filter tables such as AzureActivity, AppRequests, or Heartbeat by time, resource, severity, or operation name.

How is Log Analytics different from Application Insights?

Application Insights focuses on application performance monitoring, such as requests, dependencies, exceptions, and traces. Log Analytics is the broader workspace and query layer where many Azure Monitor logs can be analyzed together.

Can Log Analytics monitor on-premises servers?

Yes, with the right Azure Monitor agent setup, Log Analytics can collect telemetry from on-premises Windows or Linux machines as well as Azure VMs. That makes it useful for hybrid estates where not every workload is fully inside Azure.

Reviews & Comments

Write a Review

rate_review

Be the first to review

Share your thoughts with the community and help others make better decisions.

Save to your list

Save your favorites and follow how their scores change over time.

Save favorites
Track changes
Compare scores

Already have an account? Sign in

Compare Items

See how they stack up against each other

Comparing
VS
Select 1 more item to compare