Forum Discussion
Log Analytics Workspace with Multiple subscription
Hi,
A single Log Analytics workspace can monitor resources in all of your subscriptions as long as they are under the same Tenant. For example if you have Azure SQL database in Subscription A and Log Analytics Workspace in Subscription B you can send the logs and metrics from that Azure SQL database to the Log Analytics workspace.
Even if you opt in to having multiple workspaces Log Analytics supports querying multiple workspaces at the same time. Of course there is a limit. You can query maximum of 100 workspaces together.
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query
The queries that you create in Logs view can be pinned to Azure dashboards.
Hi,
A single Log Analytics workspace can monitor resources in all of your subscriptions as long as they are under the same Tenant. For example if you have Azure SQL database in Subscription A and Log Analytics Workspace in Subscription B you can send the logs and metrics from that Azure SQL database to the Log Analytics workspace.
Even if you opt in to having multiple workspaces Log Analytics supports querying multiple workspaces at the same time. Of course there is a limit. You can query maximum of 100 workspaces together.
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query
The queries that you create in Logs view can be pinned to Azure dashboards.
mattmackayMicrosoft
Stanislav_Zhelyazkov when you say that a single Log Analytics Workspace can monitor ALL of your subscriptions, is there a limit to the number of subscriptions? Lets say I need to monitor 10,000 subs in a single workspace. Whether or not I should do that aside, could it be done?
mattmackay Yes, there is no limit on the data you can send. You might have trouble creating that many subscriptions though.
Vino55What is the Log Analytics story for CSPs who have multiple tenants to monitor on and report data to multiple customers?
Thanks.
To my opinion there is no difference if you are one customer or you are partner that manages 100 customers. The structure is the same - resources are created per tenant within the tenant's subscriptions. You can use various tools and methods to manage them at scale like CI/CD, single ITSM tool, etc. I would suggest to open new thread for each question that you have. That will be easier for others to follow and search.
Hi Stan
I gone through the link you provided for single workspace with multiple subscription. But the article says how to cross query multiple workspace for data, but do not see how to created single workspace for multiple subscription. Could you please suggest.
Thanks in advance. :)
There is no special way to create a workspace for multiple subscriptions. The workspace is a workspace it is up to you to define the strategy how to use it. It is a matter of you configure data to be send to LA workspace:
- Diagnostic logs support sending data from any services in any subscriptions to LA workspace as long as it is in the same tenant
- Azure Activity logs from every subscriptions can be send to LA workspace as long as it is in the same tenant
- LA agent extension can be installed on any vm in any subscriptions to send data to LA workspace as long as it is in the same tenant.
Hi Stan
For example, i have 2 workspaces for my 2 subscriptions, i have enabled SQL Analytics solution on subscription A where i have my workspace A. and i am trying to get DTU percentage details from wokspace B which is in Subscription B by using Cross query but the LA does not give any result since it does not have the solution. Could you please help me to understand this behavior.
Thank you Stan. it was really helpful and will start exploring things accordingly.
Just Curious, there are so many solutions available at Log analytics what my doubt here is, all these solutions are free with Log analytics plan or it will cost separate. if it is a bundle with a Log analytics plan then which plan will have the most coverage.
Thanks in advance.
I will probably not able to cover everything around pricing here but I will try to give a little bit explanation. Log Analytics is part of Azure Monitor. With both Azure Monitor and Log Analytics you pay for what you use. Check the official pricing pages but for log analytics specifically you will get charged per ingested GB. Keep in mind that there are some other services in Azure like Azure Security Center that use Log Analytics as platform for storing logs. When those services use it as platform you may have different pricing. For example ASC pricing is per node and for each node you get certain amount of data you can store for free (basically you pay for it via the ASC node price) but if you exceed that daily limit you will have to pay for the amount you have exceeded via the standard Log Analytics pricing. Azure Automation also have a few services where you get some data for free but for other you have to pay per GB. All this information is available on Azure Pricing page.
I hope this helps.
