Forum Discussion
Log Analytics Workspace with Multiple subscription
Hi,
A single Log Analytics workspace can monitor resources in all of your subscriptions as long as they are under the same Tenant. For example if you have Azure SQL database in Subscription A and Log Analytics Workspace in Subscription B you can send the logs and metrics from that Azure SQL database to the Log Analytics workspace.
Even if you opt in to having multiple workspaces Log Analytics supports querying multiple workspaces at the same time. Of course there is a limit. You can query maximum of 100 workspaces together.
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query
The queries that you create in Logs view can be pinned to Azure dashboards.
Hi Stan
I gone through the link you provided for single workspace with multiple subscription. But the article says how to cross query multiple workspace for data, but do not see how to created single workspace for multiple subscription. Could you please suggest.
Thanks in advance. :)
There is no special way to create a workspace for multiple subscriptions. The workspace is a workspace it is up to you to define the strategy how to use it. It is a matter of you configure data to be send to LA workspace:
- Diagnostic logs support sending data from any services in any subscriptions to LA workspace as long as it is in the same tenant
- Azure Activity logs from every subscriptions can be send to LA workspace as long as it is in the same tenant
- LA agent extension can be installed on any vm in any subscriptions to send data to LA workspace as long as it is in the same tenant.
Hi Stan
For example, i have 2 workspaces for my 2 subscriptions, i have enabled SQL Analytics solution on subscription A where i have my workspace A. and i am trying to get DTU percentage details from wokspace B which is in Subscription B by using Cross query but the LA does not give any result since it does not have the solution. Could you please help me to understand this behavior.
As I have said it is better to address each of these issues in separate threads as these questions are different from the original. When people search for answers will be impossible to find answers for threads that are for different thing. I will still answer though. You can run queries in Logs blade across multiple workspaces. There is no problem in that. The views that come from SQL Analytics solution though will only show data from the workspace where the solution was deployed. The solutions built-in dashboards itself does not support providing multiple workspaces. You have a couple of options:
- Use a single workspace to send all your data and deploy the solutions you use to that workspace only
- If you want to visualize data across multiple workspaces you will not be able to do it with the built-in views for solutions but you can create your own dashboards via pinned queries to Azure Dashboards or Log Analytics Designer views.