Forum Discussion
Log Analytics Workspace with Multiple subscription
Hi,
A single Log Analytics workspace can monitor resources in all of your subscriptions as long as they are under the same Tenant. For example if you have Azure SQL database in Subscription A and Log Analytics Workspace in Subscription B you can send the logs and metrics from that Azure SQL database to the Log Analytics workspace.
Even if you opt in to having multiple workspaces Log Analytics supports querying multiple workspaces at the same time. Of course there is a limit. You can query maximum of 100 workspaces together.
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query
The queries that you create in Logs view can be pinned to Azure dashboards.
Hi S_I_Kaleel,
I have done this for my 5 subscriptions.
Now let me share my experience. First Select the subscription under that you want to create you Centralized Workspace.
But before doing this make sure you have all subscriptions created under same tenant.
If not, then there is no way to monitor Azure Resources.
- Create Azure Log Analytics
- Connect All the VMs through portal, SCCM, PowerShell, Ansible or any other preferable way, up to you.
- Now Connect all the Azure resources to workspace by going to Azure Resources page.
- Create Action group in same RG in which you have created Azure Workspace.
- Write KQL queries for alerts.
All Done!
Now there is one demerit here you cannot monitor cross subscription storage account. No matter it is under same AD tenant or not.
Coming to pricing, New cost version of ALA generally charge on Data insertion.
So the lesser you insert the lesser you have to pay.
Solution is maximum free but if you are using any solution then check if it charge for each device/resource. If so then create a free ALA and use this to leverage the same, since we can collect free data but here you have to make sure data is not more than 5 GiBs.
Hope this helps 🙂
- abhilearning9876 Please see my answer in your other thread
