Forum Discussion
Export VM reporting to Log Analytics
- Feb 04, 2020
When you say Accounts do you mean user accounts or a Log Analytic workspace?
This would list machines in a workspace - you'd need a cross workspace query for multiple ones, if that's the intent?
Heartbeat | distinct Computer, TenantId | summarize by Computer
When you say Accounts do you mean user accounts or a Log Analytic workspace?
This would list machines in a workspace - you'd need a cross workspace query for multiple ones, if that's the intent?
Heartbeat
| distinct Computer, TenantId
| summarize by Computer
Hello CliveWatson , tks for help me.
So, when I say Account, I'm referring to Log Analytics Workspace, actually I've lot of workspace, if can help me with multi workspace, I thank you very much.
- CliveWatsonFeb 04, 2020Former Employee
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query
Providing you have less than 10k servers, this will work
union isfuzzy=true withsource = Source (Heartbeat | distinct Computer, TenantId | summarize by Computer, TenantId, ws ="Local"), (workspace("test1").Heartbeat | distinct Computer, TenantId | summarize by Computer, TenantId, ws ="Test1"), (workspace("test2") .Heartbeat | distinct Computer, TenantId | summarize by Computer, TenantId, ws ="Test2") | summarize count() by Computer, ws //, TenantIdFormatting is a bit off, it should look like:
Just add each workspace into a new line