Viewing alerts in Log Analytics

Azure Log Analytics is a service that collects telemetry data from various Azure resources and on-premises resources. All of that data is stored inside a Log Analytics workspace, which is based on the Azure Data Explorer. It uses the Kusto Query Language, which is also used by Azure Data Explorer to retrieve and analyze the data. 

Analyzing this data can be done from Azure Monitor. All the analysis functionalities are integrated in there. The term Log Analytics now primarily applies to the blade in the Azure portal where you can analyze metric data.

Before we are able to display, monitor, and query the logs from Azure Monitor, we need to create a Log Analytics workspace. For that, we have to perform the following steps:

1. Navigate to the Azure portal by opening https://portal.azure.com.
2. Click on Create a new resource.
3. Type Log Analytics in the search box and create a new workspace.
4. Add the following values:
   • Log Analytics workspace: PacktWorkspace
   • Subscription: Select a subscription
   • Resource group: Create a new one and call it PacktWorkspace
   • Location: West US
   • Pricing tier: Keep the default one, which is per GB
5. Click on the OK button to create the workspace.

Now that we have created a Log Analytics workspace, we can use it inside Azure Monitor to create some queries to retrieve data. We will do this in the next section.