The Subscription and Resource group will already be populated for the workspace. If you create transformations for other tables in the same workspace, they will be stored in this same DCR. Since this is the first transformation in the workspace, you need to create a workspace transformation DCR. Locate the LAQueryLogs table and select Create transformation. Now that the table's created, you can create the transformation for it.įrom the Log Analytics workspaces menu in the Azure portal, select Tables (preview). These queries don't need to return data to be added to the audit log. Select Logs and then run some queries to populate LAQueryLogs with some data. Select the Audit category and then click Save to save the diagnostic setting and close the diagnostic setting page. Provide a name for the diagnostic setting and select the workspace so that the auditing data is stored in the same workspace. It's just to generate the sample data that we'll be working with.įrom the Log Analytics workspaces menu in the Azure portal, select Diagnostic settings and then Add diagnostic setting. This is not required for all ingestion time transformations. You need to enable query auditing for your workspace to create the LAQueryLogs table that you'll be working with.
0 Comments
Leave a Reply. |