Azure Log Analytics
Log Analytics is a service that helps you collect and analyze data generated by resources in your cloud and on-premises environments.
- Category
- Analytics & SIEM
- Pack
- AzureLogAnalytics
Configuration parameters
- azure_cloud — Azure Cloud
- server_url — Server URL
- refresh_token — Token / Tenant ID
- credentials_refresh_token —
- creds_client_id —
- credentials —
- certificate_thumbprint — Certificate Thumbprint
- credentials_certificate_thumbprint —
- private_key — Private Key
- self_deployed — Use a self-deployed Azure application - Authorization Code flow
- client_credentials — Use a self-deployed Azure application - Client Credentials Flow
- redirect_uri — Application redirect URI (for self-deployed mode)
- auth_code — Authorization code
- credentials_auth_code —
- use_managed_identities — Use Azure Managed Identities
- managed_identities_client_id —
- subscriptionID — Default Subscription ID (required)
- resourceGroupName — Default Resource Group Name (required)
- workspaceName — Default Workspace Name (required)
- workspaceID — Default Workspace ID (the UUID of the workspace, e.g. 123e4567-e89b-12d3-a456-426614174000) (required)
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
Commands (14)
- azure-log-analytics-auth-reset — Run this command if for some reason you need to rerun the authentication process.
- azure-log-analytics-create-or-update-saved-search — Creates or updates a saved search from the Log Analytics workspace.
- azure-log-analytics-delete-saved-search — Deletes a specified saved search in the Log Analytics workspace.
- azure-log-analytics-delete-search-job — Delete a Log Analytics workspace table. We recommend you delete the search job when you're done querying the table. This reduces workspace clutter and extra charges for data retention.
- azure-log-analytics-execute-query — Executes an Analytics query for data.
- azure-log-analytics-generate-login-url — Generate the login url used for Authorization code flow.
- azure-log-analytics-get-saved-search-by-id — Gets a specified saved search from the Log Analytics workspace.
- azure-log-analytics-get-search-job — Gets a Log Analytics workspace table.
- azure-log-analytics-list-saved-searches — Gets the saved searches of the Log Analytics workspace.
- azure-log-analytics-resource-group-list — List all resource groups for a subscription.
- azure-log-analytics-run-search-job — Run a search job to fetch records from large datasets into a new search results table in your workspace. Tables use the retention value set for the workspace, but this value can be modified after the table is created.
- azure-log-analytics-subscriptions-list — List all subscriptions for a tenant.
- azure-log-analytics-test — Tests connectivity to Azure Log Analytics.
- azure-log-analytics-workspace-list — Gets workspaces in a resource group.