Referencing Key Vault to access external data from Log Analytics

[Scott Allison]

Hi everyone!

I've built a nifty solution that allows me to use the EXTERNALDATA operator to query some static data from blob storage via Log Analytics. This works great, but now I want to save this as a Function in Log Analytics and the token is easily read. So my questions are:

1. Is there a way to "mask" the token in the KQL query so that it isn't visible? or....

2. Is there a way to reference Key Vault to get the secret token ?

Any help is appreciated!

[#2]

I am highly interested in the same thing, please leave a comment if you manage to secure the token.