{"id":2055,"date":"2018-10-25T00:00:00","date_gmt":"2018-10-25T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics"},"modified":"2018-10-25T00:00:00","modified_gmt":"2018-10-25T00:00:00","slug":"query-azure-storage-analytics-logs-in-azure-log-analytics","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/","title":{"rendered":"Query Azure Storage analytics logs in Azure Log Analytics"},"content":{"rendered":"<p>Log Analytics is a service that collects telemetry and other data from a variety of sources and provide a query language for advanced analytics. After you post logging data to Log Analytics workspace with <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/log-analytics\/log-analytics-data-collector-api\" target=\"_blank\" rel=\"noopener\">HTTP Data Collector API<\/a>, you are able to query logs for troubleshooting, visualize the data for monitoring, or even create alerts based on log search. For more details, see <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/log-analytics\/log-analytics-queries\" target=\"_blank\" rel=\"noopener\">Log Analytics<\/a>.<\/p>\n<p>Tighter integration with Log Analytics makes troubleshooting storage operations much easier. In this blog, we share how to convert Azure Storage analytics logs and post to Azure Log Analytics workspace. Then, you can use analysis features in Log Analytics for Azure Storage (Blob, Table, and Queue). The major steps include:<\/p>\n<ul>\n<li>Create workspace in Log Analytics<\/li>\n<li>Convert Storage Analytics logs to JSON<\/li>\n<li>Post logs to Log Analytics workspace<\/li>\n<li>Query logs in Log Analytics workspace<\/li>\n<li>Visualize log query in Log Analytics workspace<\/li>\n<\/ul>\n<h2>Create workspace in Log Analytics<\/h2>\n<p>First, you will need to create a workspace in Log Analytics. The following screenshot shows how to create it in Azure Portal.<\/p>\n<p><img decoding=\"async\" alt=\"create-log-analytics-workspace.png\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp\"><\/p>\n<h2>Convert Storage Analytics logs to JSON<\/h2>\n<p>Azure Storage provides analytics logs for Blob, Table, and Queue. The analytics logs are stored as blobs in &#8220;$logs&#8221; container within the same storage account. The blob name pattern looks like &#8220;blob\/2018\/10\/07\/0000\/000000.log.&#8221; You can use <a href=\"https:\/\/azure.microsoft.com\/en-us\/features\/storage-explorer\/\" target=\"_blank\" rel=\"noopener\">Azure Storage Explorer<\/a> to browse the structures and log files. The following screenshot shows the structure in Azure Storage Explorer:<\/p>\n<p><img decoding=\"async\" alt=\"browse-logs-in-storage-explorer.png\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/browse-logs-in-storage-explorer.webp\"><\/p>\n<p>In each log file, each line is one log record for one request divided by semicolon. You can find schema definition in <a href=\"https:\/\/docs.microsoft.com\/en-us\/rest\/api\/storageservices\/storage-analytics-log-format\" target=\"_blank\" rel=\"noopener\">Storage Analytics Log Format<\/a>. The following log record shows as a sample:<\/p>\n<pre>\r\n1.0;2014-06-19T22:59:23.1967767Z;GetBlob;AnonymousSuccess;200;17;16;anonymous;;storagesample;blob;\"https:\/\/storagesample.blob.core.windows.net\/sample-container1\/00001.txt\";\"\/storagesample\/sample-container1\/00001.txt\";61d2e3f6-bcb7-4cd1-a81e-4f8f497f0da2;0;192.100.0.102:4362;2014-02-14;283;0;354;23;0;;;\"\"0x8D15A2913C934DE\"\";Thursday, 19-Jun-14 22:58:10 GMT;;\"WA-Storage\/4.0.1 (.NET CLR 4.0.30319.34014; Win32NT 6.3.9600.0)\";;\"44dfd78e-7288-4898-8f70-c3478983d3b6\"<\/pre>\n<p>Before the next step, we need to convert log records to JSON. You can use any script to convert but the following cases are required to handle during conversion:<\/p>\n<ul>\n<li>Semicolon mark in the columns: Some columns like request-url or user-agent-header may contain semicolon mark. It should be encoded before split with semicolon. After split, it should be decoded back.<\/li>\n<li>Quote mark in the columns: Some columns like client-request-id or etag-identifier may contain quote mark. While adding quote mark for other key values, it should be ignored for these columns.<\/li>\n<li>Use the column definition as key name from <a href=\"https:\/\/docs.microsoft.com\/en-us\/rest\/api\/storageservices\/storage-analytics-log-format\" target=\"_blank\" rel=\"noopener\">Storage Analytics Log Format<\/a>, so you easily query with them in Log Analytics. Examples: version-number, or request-start-time.<\/li>\n<\/ul>\n<p>The following sample shows what a prepared JSON looks like for one log record:<\/p>\n<pre>\r\n[{\"version-number\":\"1.0\",\"request-start-time\":\"2018-10-07T20:00:52.4036565Z\",\"operation-type\":\"CreateContainer\",\"request-status\":\"ContainerAlreadyExists\",\"http-status-code\":\"409\",\"end-to-end-latency-in-ms\":\"6\",\"server-latency-in-ms\":\"6\",\"authentication-type\":\"authenticated\",\"requester-account-name\":\"testaccount\",\"owner-account-name\":\"testaccount\",\"service-type\":\"blob\",\"request-url\":\"https:\/\/testaccount.blob.core.windows.net\/insights-metrics-pt1m?restype=container\",\"requested-object-key\":\"\/testaccount\/insights-metrics-pt1m\",\"request-id-header\":\"99999999-c01e-0085-4a78-000000000000\",\"operation-count\":\"0\",\"requester-ip-address\":\"100.101.102.103:12345\",\"request-version-header\":\"2017-04-17\",\"request-header-size\":\"432\",\"request-packet-size\":\"0\",\"response-header-size\":\"145\",\"response-packet-size\":\"230\",\"request-content-length\":\"0\",\"request-md5\":\"\",\"server-md5\":\"\",\"etag-identifier\":\"\",\"last-modified-time\":\"\",\"conditions-used\":\"\",\"user-agent-header\":\"Azure-Storage\/8.4.0 (.NET CLR 4.0.30319.42000; Win32NT 6.2.9200.0)\",\"referrer-header\":\"\",\"client-request-id\":\"88888888-ed38-4a90-bb3f-000000000000\"}]<\/pre>\n<h2>Post logs to Log Analytics workspace<\/h2>\n<p>Azure Log Analytics provides <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/log-analytics\/log-analytics-data-collector-api\" target=\"_blank\" rel=\"noopener\">HTTP Data Collector API<\/a> to post custom log data Log Analytics workspace. You can follow the sample code in the article to send the log json payload prepared in the last step.<\/p>\n<pre>\r\nPost-LogAnalyticsData -customerId $customerId -sharedKey $sharedKey -body ([System.Text.Encoding]::UTF8.GetBytes($json)) -logType $logType<\/pre>\n<h2>Query logs in Log Analytics workspace<\/h2>\n<p>If you create record type like MyStorageLogs1 in posting logs, you will use MyStorageLogs1_CL as stream name to query. The following screenshot shows how to query imported Storage analytics logs in Log Analytics.<\/p>\n<p><img decoding=\"async\" alt=\"query-logs-in-loganalytics.png\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/query-logs-in-loganalytics-1.webp\"><\/p>\n<h2>Visualize log query in Log Analytics<\/h2>\n<p>If you want to aggregate the query result and look for the pattern or trend, it can be achieved with query and visualization easily in Log Analytics. The following screenshot shows how to visualize query result:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"visualize-in-loganalytics\" height=\"707\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/87c5468d-6936-4a4e-ba87-44859c7f1ee3.webp\" title=\"visualize-in-loganalytics\" width=\"1370\"><\/p>\n<h2>Sample code<\/h2>\n<p><a href=\"https:\/\/github.com\/Azure\/azure-docs-powershell-samples\/blob\/master\/storage\/post-storage-logs-to-log-analytics\/PostStorageLogs2LogAnalytics.ps1\" target=\"_blank\" rel=\"noopener\">A sample Powershell script<\/a> is provided to show how to convert Storage Analytics log data to JSON format and post the JSON data to a Log Analytics workspace.<\/p>\n<h2>Next steps<\/h2>\n<p>Read more to continue learning about <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/storage\/common\/storage-analytics\" target=\"_blank\" rel=\"noopener\">Storage Analytics<\/a> and <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/log-analytics\/log-analytics-queries\" target=\"_blank\" rel=\"noopener\">Log Analytics<\/a>, and sign up for an Azure <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/storage\/common\/storage-quickstart-create-account?tabs=portal\" target=\"_blank\" rel=\"noopener\">create a Storage account<\/a>.<\/p>\n<p>When you read log data from Storage account, there is a cost from read operations. For detailed pricing, visit <a href=\"https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/storage\/blobs\/\" target=\"_blank\" rel=\"noopener\">Blobs pricing<\/a>. Also note, Log Analytics charges you based on <a href=\"https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/monitor\/\" target=\"_blank\" rel=\"noopener\">Azure Monitor pricing<\/a>.<\/p>\n<p>Azure Storage is working with the Azure Monitor team in unifying the logging pipeline. We hope to have built-in integration with Log Analytics for Azure Storage logs soon, and we will keep you posted when the plan is determined. If you have any feedback or suggestions, you can email <a target=\"_blank\" rel=\"noopener\">Azure Storage Analytics Feedback<\/a>.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","footnotes":"","msx_community_cta_settings":[]},"categories":[1491],"tags":[],"audience":[3057,3053,3056],"content-type":[],"product":[1525],"tech-community":[],"topic":[],"coauthors":[97],"class_list":["post-2055","post","type-post","status-publish","format-standard","hentry","category-storage","audience-data-professionals","audience-it-decision-makers","audience-it-implementors","product-azure-blob-storage"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Query Azure Storage analytics logs in Azure Log Analytics | Microsoft Azure Blog<\/title>\n<meta name=\"description\" content=\"In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Query Azure Storage analytics logs in Azure Log Analytics | Microsoft Azure Blog\" \/>\n<meta property=\"og:description\" content=\"In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Azure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/microsoftazure\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-25T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp\" \/>\n<meta name=\"author\" content=\"Microsoft Azure\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azure\" \/>\n<meta name=\"twitter:site\" content=\"@azure\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Microsoft Azure\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\"},\"author\":[{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/microsoft-azure\/\",\"@type\":\"Person\",\"@name\":\"Microsoft Azure\"}],\"headline\":\"Query Azure Storage analytics logs in Azure Log Analytics\",\"datePublished\":\"2018-10-25T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\"},\"wordCount\":667,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp\",\"articleSection\":[\"Storage\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\",\"name\":\"Query Azure Storage analytics logs in Azure Log Analytics | Microsoft Azure Blog\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp\",\"datePublished\":\"2018-10-25T00:00:00+00:00\",\"description\":\"In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.\",\"breadcrumb\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog home\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Storage\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/storage\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Query Azure Storage analytics logs in Azure Log Analytics\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"name\":\"Microsoft Azure Blog\",\"description\":\"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.\",\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\",\"name\":\"Microsoft Azure Blog\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Azure Blog\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/microsoftazure\",\"https:\/\/x.com\/azure\",\"https:\/\/www.instagram.com\/microsoftdeveloper\/\",\"https:\/\/www.linkedin.com\/company\/16188386\",\"https:\/\/www.youtube.com\/user\/windowsazure\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117\",\"name\":\"shakir\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"caption\":\"shakir\"},\"sameAs\":[\"https:\/\/azure.microsoft.com\"],\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Query Azure Storage analytics logs in Azure Log Analytics | Microsoft Azure Blog","description":"In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/","og_locale":"en_US","og_type":"article","og_title":"Query Azure Storage analytics logs in Azure Log Analytics | Microsoft Azure Blog","og_description":"In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.","og_url":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/","og_site_name":"Microsoft Azure Blog","article_publisher":"https:\/\/www.facebook.com\/microsoftazure","article_published_time":"2018-10-25T00:00:00+00:00","og_image":[{"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp","type":"","width":"","height":""}],"author":"Microsoft Azure","twitter_card":"summary_large_image","twitter_creator":"@azure","twitter_site":"@azure","twitter_misc":{"Written by":"Microsoft Azure","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#article","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/"},"author":[{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/microsoft-azure\/","@type":"Person","@name":"Microsoft Azure"}],"headline":"Query Azure Storage analytics logs in Azure Log Analytics","datePublished":"2018-10-25T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/"},"wordCount":667,"commentCount":0,"publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp","articleSection":["Storage"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/","name":"Query Azure Storage analytics logs in Azure Log Analytics | Microsoft Azure Blog","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp","datePublished":"2018-10-25T00:00:00+00:00","description":"In this blog, we introduce how to post Azure Storage analytics logs to Azure Log Analytics workspace, thus you can use these great features to operate Azure Storage resources better.","breadcrumb":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#primaryimage","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2018\/10\/create-log-analytics-workspace.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/query-azure-storage-analytics-logs-in-azure-log-analytics\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog home","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/"},{"@type":"ListItem","position":2,"name":"Storage","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/storage\/"},{"@type":"ListItem","position":3,"name":"Query Azure Storage analytics logs in Azure Log Analytics"}]},{"@type":"WebSite","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","name":"Microsoft Azure Blog","description":"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.","publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization","name":"Microsoft Azure Blog","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft Azure Blog"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/microsoftazure","https:\/\/x.com\/azure","https:\/\/www.instagram.com\/microsoftdeveloper\/","https:\/\/www.linkedin.com\/company\/16188386","https:\/\/www.youtube.com\/user\/windowsazure"]},{"@type":"Person","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117","name":"shakir","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4","url":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","caption":"shakir"},"sameAs":["https:\/\/azure.microsoft.com"],"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/"}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Azure Blog","distributor_original_site_url":"https:\/\/azure.microsoft.com\/en-us\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/2055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/comments?post=2055"}],"version-history":[{"count":0,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/2055\/revisions"}],"wp:attachment":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/media?parent=2055"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/categories?post=2055"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tags?post=2055"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/audience?post=2055"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/content-type?post=2055"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/product?post=2055"},{"taxonomy":"tech-community","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tech-community?post=2055"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/topic?post=2055"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/coauthors?post=2055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}