Log Analytics Workspace Logs Automation

%3CLINGO-SUB%20id%3D%22lingo-sub-2066201%22%20slang%3D%22en-US%22%3ELog%20Analytics%20Workspace%20Logs%20Automation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2066201%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20set%20of%20log%20query%20which%20I%20have%20saved%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSTRONG%3E%3CEM%3EAzureDiagnostics%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FDIV%3E%3CDIV%3E%3CSTRONG%3E%3CEM%3E%7C%26nbsp%3Bwhere%26nbsp%3BResourceProvider%26nbsp%3B%3D%3D%26nbsp%3B%22MICROSOFT.NETWORK%22%26nbsp%3Band%26nbsp%3BCategory%26nbsp%3B%3D%3D%26nbsp%3B%22ApplicationGatewayFirewallLog%22%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FDIV%3E%3CDIV%3E%3CSTRONG%3E%3CEM%3E%7C%26nbsp%3Bsummarize%26nbsp%3Bcount()%26nbsp%3Bby%26nbsp%3BrequestUri_s%2C%26nbsp%3BclientIp_s%2C%26nbsp%3Baction_s%2C%26nbsp%3Bbin(TimeGenerated%2C%26nbsp%3B1m)%2C%26nbsp%3Bdetails_message_s%2C%26nbsp%3BruleId_s%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EThe%20question%20is%2C%20is%20the%20a%20way%20for%20me%20to%20auto%20generate%20this%20query%20every%2024%20hours%20and%20email%20it%20to%20me%3F%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2066845%22%20slang%3D%22en-US%22%3ERe%3A%20Log%20Analytics%20Workspace%20Logs%20Automation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2066845%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F931189%22%20target%3D%22_blank%22%3E%40Fabian_Bong%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20create%20a%20workbook%20or%20a%20dashboard.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETry%20Dashboard%20first%20(simple%20option)%20and%20later%20try%20the%20workbook.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2067275%22%20slang%3D%22en-US%22%3ERe%3A%20Log%20Analytics%20Workspace%20Logs%20Automation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2067275%22%20slang%3D%22en-US%22%3EHi%20you%20can%20use%20Azure%20Logic%20Apps%20like%20this%20%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fthomasthornton.cloud%2F2019%2F08%2F30%2Fcreating-automated-reports-using-logic-apps-for-log-analytics-queries%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fthomasthornton.cloud%2F2019%2F08%2F30%2Fcreating-automated-reports-using-logic-apps-for-log-analytics-queries%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2068018%22%20slang%3D%22en-US%22%3ERe%3A%20Log%20Analytics%20Workspace%20Logs%20Automation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2068018%22%20slang%3D%22en-US%22%3E%3CP%3EThanks!%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F504311%22%20target%3D%22_blank%22%3E%40atulram%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi,

 

I have a set of log query which I have saved

AzureDiagnostics
| where ResourceProvider == "MICROSOFT.NETWORK" and Category == "ApplicationGatewayFirewallLog"
| summarize count() by requestUri_s, clientIp_s, action_s, bin(TimeGenerated, 1m), details_message_s, ruleId_s
 
The question is, is the a way for me to auto generate this query every 24 hours and email it to me?
4 Replies

Hi @Fabian_Bong 

 

You can create a workbook or a dashboard.

 

Try Dashboard first (simple option) and later try the workbook.

 

@ibrahimambodji  My current role is operator. Am I able to use the Logic Apps?