Querying Log Analytics

It can be useful to explore your logs in Log Analytics. Being able to query Log Analytics requires an understanding of KQL. You will learn some basic queries in this exercise to understand how the system works. To get started, you will need a Log Analytics workspace, which you will create next.

Creating a Log Analytics Workspace

Before you can display, monitor, and query logs from Azure Monitor, you need to create a Log Analytics workspace for storing your logging data. To create a workspace, perform the following steps:

1. Navigate to the Azure portal by clicking on https://portal.azure.com.
2. Navigate to your AZ104-Monitor resource group.
3. Click + Create to create a new resource.
4. Type log analytics in the search box and click the Log Analytics Workspace card when it shows.
5. Click Create.

Figure 21.43: Log Analytics Workspace

6. Enter the following values on the Basics tab:
   • Subscription: Select your Azure...