Forum Discussion

Jeff Walzer's avatar
Jeff Walzer
Iron Contributor
Feb 27, 2020

Limit to one log analytics workspace?

I created a log analytics workspace and then configured all resources in the subscription to forward metrics/events to that workspace. I just noticed that someone created a new log analytics workspace and had some resources reporting to the workspace.

 

Should I look to prevent the creation of other log analytics workspaces to ensure that the log analytics workspace I created receives all metrics/events?

 

Being part of security I want to ensure I aggregate all metrics/events into one workspace as we are leveraging Sentinel as well. Is there ever a case for more than one log analytics workspace?

 

Thx

Resources