Forum Discussion

Kalaimani's avatar
Kalaimani
Brass Contributor
Jul 09, 2020

Azure Backup Report

Hi Team,  Can anyone help me to generate the report using Log Analytics workspace in azure backup

  • Kalaimani 

     

    I think you need to add the filter later:

     

    let Events = AzureDiagnostics | where Category == "AzureBackupReport"; 
    Events
    | where OperationName == "Job"
    | where TimeGenerated > ago(30d)
    | project BackupItemUniqueId_s , JobStatus_s , JobStartDateTime_s
    | join kind=inner 
    (
        Events
        | where OperationName == "BackupItem"
        | distinct BackupItemUniqueId_s, BackupItemFriendlyName_s
        | project BackupItemUniqueId_s, BackupItemFriendlyName_s 
    ) on BackupItemUniqueId_s
    | where BackupItemFriendlyName_s in ("CH-DCVM10","FAKEVM0001","FAKE1111")
    | summarize count() by  BackupItemFriendlyName_s, JobStatus_s, JobStartDateTime_s
    


     Go to Log Analytics and run query

    • Kalaimani's avatar
      Kalaimani
      Brass Contributor
      sorry it not working... but below one its working

      let Events = AzureDiagnostics | where Category == "AzureBackupReport"; Events
      | where OperationName == "Job"
      | where TimeGenerated > ago(30d)
      | where * has "VT-PRD-CA02"
      | project BackupItemUniqueId_s , JobStatus_s , JobStartDateTime_s
      | join kind=inner (Events | where OperationName == "BackupItem"
      | distinct BackupItemUniqueId_s, BackupItemFriendlyName_s
      | project BackupItemUniqueId_s, BackupItemFriendlyName_s ) on BackupItemUniqueId_s
      | project BackupItemFriendlyName_s , JobStatus_s, JobStartDateTime_s

      a) Need it for multiple servers
      where * has "VT-PRD-CA02" provides me the result for one.
      I tried various combinations eg | where BackupItemFriendlyName_s in ("Client1","Client2") etc but that is not giving me any result.



      b) need failed and completed status for single report for one server
      • CliveWatson's avatar
        CliveWatson
        Icon for Microsoft rankMicrosoft

        Kalaimani 

         

        I think you need to add the filter later:

         

        let Events = AzureDiagnostics | where Category == "AzureBackupReport"; 
        Events
        | where OperationName == "Job"
        | where TimeGenerated > ago(30d)
        | project BackupItemUniqueId_s , JobStatus_s , JobStartDateTime_s
        | join kind=inner 
        (
            Events
            | where OperationName == "BackupItem"
            | distinct BackupItemUniqueId_s, BackupItemFriendlyName_s
            | project BackupItemUniqueId_s, BackupItemFriendlyName_s 
        ) on BackupItemUniqueId_s
        | where BackupItemFriendlyName_s in ("CH-DCVM10","FAKEVM0001","FAKE1111")
        | summarize count() by  BackupItemFriendlyName_s, JobStatus_s, JobStartDateTime_s
        


         Go to Log Analytics and run query

Resources