Forum Discussion
Usage stats for Log Analytics?
Is there a way to view usage statistics for Log Analytics? Specifically, is there a way to view "when/what/who" queries have been executed in Log Analytics? I'd like to be able to generate some usage...
Azure Monitor now supports query auditing for Log Analytics.
Create a diagnostic setting on the Log Analytics workspace and send the query audit logs to a workspace. The records are stored in the LAQueryLogs table and include information such as timestamp, Entra user/object, client/application and query text.
For example:
LAQueryLogs
| where TimeGenerated > ago(30d)
| summarize Queries=count() by AADEmail
| order by Queries desc
You can also summarize by day or client application to identify your most active users/tools. Keep in mind that storing the audit records creates additional log ingestion.