Azure Log Analytics

Log Analytics is a service that helps you collect and analyze data generated by resources in your cloud and on-premises environments.

Analytics & SIEM · Azure Log Analytics

Configuration parameters

  • azure_cloud — Azure Cloud
  • server_url — Server URL
  • refresh_token — Token / Tenant ID
  • credentials_refresh_token —
  • creds_client_id —
  • credentials —
  • certificate_thumbprint — Certificate Thumbprint
  • credentials_certificate_thumbprint —
  • private_key — Private Key
  • self_deployed — Use a self-deployed Azure application - Authorization Code flow
  • client_credentials — Use a self-deployed Azure application - Client Credentials Flow
  • redirect_uri — Application redirect URI (for self-deployed mode)
  • auth_code — Authorization code
  • credentials_auth_code —
  • use_managed_identities — Use Azure Managed Identities
  • managed_identities_client_id —
  • subscriptionID — Default Subscription ID (required)
  • resourceGroupName — Default Resource Group Name (required)
  • workspaceName — Default Workspace Name (required)
  • workspaceID — Default Workspace ID (the UUID of the workspace, e.g. 123e4567-e89b-12d3-a456-426614174000) (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (14)

  • azure-log-analytics-auth-reset

    Run this command if for some reason you need to rerun the authentication process.

  • azure-log-analytics-create-or-update-saved-search

    Creates or updates a saved search from the Log Analytics workspace.

  • azure-log-analytics-delete-saved-search

    Deletes a specified saved search in the Log Analytics workspace.

  • azure-log-analytics-delete-search-job

    Delete a Log Analytics workspace table. We recommend you delete the search job when you're done querying the table. This reduces workspace clutter and extra charges for data retention.

  • azure-log-analytics-execute-query

    Executes an Analytics query for data.

  • azure-log-analytics-generate-login-url

    Generate the login url used for Authorization code flow.

  • azure-log-analytics-get-saved-search-by-id

    Gets a specified saved search from the Log Analytics workspace.

  • azure-log-analytics-get-search-job

    Gets a Log Analytics workspace table.

  • azure-log-analytics-list-saved-searches

    Gets the saved searches of the Log Analytics workspace.

  • azure-log-analytics-resource-group-list

    List all resource groups for a subscription.

  • azure-log-analytics-run-search-job

    Run a search job to fetch records from large datasets into a new search results table in your workspace. Tables use the retention value set for the workspace, but this value can be modified after the table is created.

  • azure-log-analytics-subscriptions-list

    List all subscriptions for a tenant.

  • azure-log-analytics-test

    Tests connectivity to Azure Log Analytics.

  • azure-log-analytics-workspace-list

    Gets workspaces in a resource group.