Forum Discussion
Send logs from one workspace to another workspace in different subscriptions
Hi team , We are looking for solution to send logs from one sentinel workspace to another workspace which is in different subscriptions under one directory. How can we do that, I think one option...
Hello Prashali_Shinde,
Probably you can export data from "Log Analytics 1" into "Storage Account" under "Subscription 1" using "Logic App1" and then using "Logic App 2" pull that data from the "Storage Account" into "Log Analytics 2" in "Subscription 2". You will need to allow access from "Logic App 2" to "Storage Account" via a Private endpoint or Service endpoint.
Consider also security questions.
This can be the "Logic App1":
Azure-Sentinel/Playbooks/Move-LogAnalytics-to-Storage at master · Azure/Azure-Sentinel (github.com)
Thanks for the detailed reply mikhailf will try this.