Forum Discussion
Lucas Chies
Feb 04, 2020Copper Contributor
Export VM reporting to Log Analytics
Hello Guys, I need to export a list of machines that are reporting to Log Analytics. I currently have multiple Log Analytics accounts and would like to have a list of which machines are respondi...
- Feb 04, 2020
When you say Accounts do you mean user accounts or a Log Analytic workspace?
This would list machines in a workspace - you'd need a cross workspace query for multiple ones, if that's the intent?
Heartbeat | distinct Computer, TenantId | summarize by Computer
Lucas Chies
Feb 04, 2020Copper Contributor
Hello CliveWatson , tks for help me.
So, when I say Account, I'm referring to Log Analytics Workspace, actually I've lot of workspace, if can help me with multi workspace, I thank you very much.
CliveWatson
Feb 04, 2020Former Employee
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query
Providing you have less than 10k servers, this will work
union isfuzzy=true withsource = Source
(Heartbeat | distinct Computer, TenantId | summarize by Computer, TenantId, ws ="Local"),
(workspace("test1").Heartbeat | distinct Computer, TenantId | summarize by Computer, TenantId, ws ="Test1"),
(workspace("test2") .Heartbeat | distinct Computer, TenantId | summarize by Computer, TenantId, ws ="Test2")
| summarize count() by Computer, ws //, TenantId
Formatting is a bit off, it should look like:
Just add each workspace into a new line