Export VM reporting to Log Analytics

[Lucas Chies]

Hello Guys,

I need to export a list of machines that are reporting to Log Analytics.
I currently have multiple Log Analytics accounts and would like to have a list of which machines are responding to each account.

Has anyone ever done this or can you help me how to do it?

[#2 · Accepted solution]

@Lucas Chies

When you say Accounts do you mean user accounts or a Log Analytic workspace?   

This would list machines in a workspace - you'd need a cross workspace query for multiple ones, if that's the intent?

Heartbeat
| distinct Computer, TenantId
| summarize by Computer

[#3]

Hello @CliveWatson , tks for help me.

So, when I say Account, I'm referring to Log Analytics Workspace, actually I've lot of workspace, if can help me with multi workspace, I thank you very much.

[#4]

@Lucas Chies 

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/cross-workspace-query

Providing you have less than 10k servers, this will work 

union isfuzzy=true withsource = Source
(Heartbeat                              |  distinct Computer, TenantId |  summarize by Computer, TenantId, ws ="Local"), 
(workspace("test1").Heartbeat |  distinct Computer, TenantId |  summarize by Computer, TenantId, ws ="Test1"),
(workspace("test2")       .Heartbeat |  distinct Computer, TenantId |  summarize by Computer, TenantId, ws ="Test2")
| summarize count() by Computer, ws //, TenantId

Formatting is a bit off, it should look like:

Just add each workspace into a new line