Jun 25 2020
04:08 PM
- last edited on
Apr 08 2022
10:29 AM
by
TechCommunityAP
Jun 25 2020
04:08 PM
- last edited on
Apr 08 2022
10:29 AM
by
TechCommunityAP
We have a diagnostic export of audit and sign-in logs to both a Log Storage and Event hub instance with retention of 365 days on the storage account. I need to see the historical data therein. What are my options? Log Analytics only goes back 30 days currently.
Jun 30 2020 10:00 AM
@shockotechcom not really sure but i think you need to ingest them into a log analytics to check the contents, (importing them manually) or accessing the storage account by using Microsoft azure Storage Explorer...
Hope this helps:
Best Regards.
Jul 01 2020 03:00 AM
You may be able to query them with the externaldata operator, which reads them into a query rather than re-ingesting them?
See "Query the data" section.