Forum Discussion
Usage stats for Log Analytics?
Is there a way to view usage statistics for Log Analytics? Specifically, is there a way to view "when/what/who" queries have been executed in Log Analytics? I'd like to be able to generate some usage reports so that we can make sure that the service is being properly utilized by our users.
1 Reply
Azure Monitor now supports query auditing for Log Analytics.
Create a diagnostic setting on the Log Analytics workspace and send the query audit logs to a workspace. The records are stored in the LAQueryLogs table and include information such as timestamp, Entra user/object, client/application and query text.
For example:
LAQueryLogs
| where TimeGenerated > ago(30d)
| summarize Queries=count() by AADEmail
| order by Queries desc
You can also summarize by day or client application to identify your most active users/tools. Keep in mind that storing the audit records creates additional log ingestion.