Скачать или смотреть What is Azure Log Analytics ? |What is KQL mode Kosto Query Language| How to use Azure Moniter Logs

Tutorial: Use Log Analytics
Open Log Analytics

Open the Log Analytics demo environment, or select Logs from the Azure Monitor menu in your subscription. This step sets the initial scope to a Log Analytics workspace so that your query selects from all data in that workspace. If you select Logs from an Azure resource's menu, the scope is set to only record from that resource. For more infornmation, see Log query scope.

You can view the scope in the upper-left corner of the Logs experience, below the name of your active query tab. If you're using your own environment, you see an option to select a different scope. This option isn't available in the demo environment.

Azure Log Analytics is a service within Azure Monitor that enables you to collect, analyze, and act on data generated by your cloud and on-premises resources. It provides a centralized repository (Log Analytics workspace) for log data and offers tools for querying, visualizing, and creating alerts based on that data. 

Here's a more detailed breakdown:

Key Concepts:

Log Analytics Workspace:

A dedicated environment for storing and managing log data from various sources. 

Data Collection:

Log Analytics collects data from Azure resources, on-premises machines, and other services like Microsoft Sentinel and Microsoft Defender for Cloud. 

Kusto Query Language (KQL):

A powerful query language used to analyze and filter log data. 

Insights and Dashboards:

Log Analytics provides built-in dashboards and insights, and you can create your own using KQL and tools like Azure Workbooks. 

Alerts:

You can create alerts based on specific conditions in your log data to notify you of potential issues. 

Integration:

Log Analytics integrates with other Azure services and external tools for a comprehensive monitoring and management experience. 

What it does:

Troubleshooting:

Helps identify and resolve issues by analyzing logs and finding patterns. 

Performance Monitoring:

Monitors the performance of your resources and applications by analyzing metrics and logs. 

Security Monitoring:

Detects security threats and suspicious activities by analyzing security logs. 

Compliance:

Helps meet compliance requirements by storing and analyzing log data for auditing purposes. 

In essence, Azure Log Analytics is a powerful tool for gaining insights from your logs, enabling you to proactively manage and optimize your cloud and on-premises environments. 

Log Analytics in the Azure portal lets you explore and analyze data collected by Azure Monitor Logs. With it, you can edit and run log queries to filter records, uncover trends, analyze patterns, and gain meaningful insights into your environment
What is the purpose of Log Analytics?

Log analytics takes log monitoring one step further, allowing observability teams to discover patterns and anomalies across an organization. This can help them resolve application and system issues quickly and provide operational insights to get ahead of future problems.

What is Azure analytics used for?
Microsoft Azure Stream Analytics is a serverless scalable complex event processing engine by Microsoft that enables users to develop and run real-time analytics on multiple streams of data from sources such as devices, sensors, web sites, social media, and other applications.
Overview of Log Analytics in Azure Monitor

05/03/2025

In this article

Introduction video

Open Log Analytics

Log Analytics interface

Relationship to Azure Data Explorer

Next steps

The Log Analytics tool in the Azure portal lets you run and edit log queries against data in the Azure Monitor Logs store. It offers two modes that make log data simpler to explore and analyze for both basic and advanced users:

Simple mode provides the most commonly used Azure Monitor Logs functionality in an intuitive, spreadsheet-like experience. Just point and click to filter, sort, and aggregate data to get to the insights you need most of the time.

KQL mode gives advanced users the full power of Kusto Query Language (KQL) to derive deeper insights from their logs using the Log Analytics query editor.

Whether you work with the results of your queries interactively or use them with other Azure Monitor features, such as log search alerts or workbooks. Log Analytics

This article describes the Log Analytics user interface and its features. If you want to jump right into a tutorial, see Log Analytics tutorial

Open Log Analytics
To open Log Analytics in the Azure portal, select Logs either in Azure Monitor, in a Log Analytics workspace, or from a specific resource. The tool is always the same, but where you start determines the data that's available.

When you open Logs from Azure Monitor or a Log Analytics workspaces, you have access to all of the records in a workspace. When you select Logs from another type of resource, your data is limited to log data for that resource. For more information, see Log query scope and time range in Azure Monitor Log Analytics.