Can I filter what logs need to be sent to my Azure Log Analystic Workspace?

Question

Hello,&nbsp;Is it possible to filter what logs need to be sent to my Azure Log Analystic Workspace? In my case, I am sending all the&nbsp;AuditLogs from Microsoft Entra ID to my Azure Log Analystic Workspace, but my organization is large, I just need a very small group of people's activities to be logged and sent to the workspace.&nbsp;Thank you!&nbsp;

clive_watson · Answer

If your Table is supported you can look at using https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-transformations#workspace-transformation-dcr

Forum Discussion

Can I filter what logs need to be sent to my Azure Log Analystic Workspace?

1 Reply

Resources