Articles → MICROSOFT AZURE → Query The Log Analytics Workspace In Azure

Query The Log Analytics Workspace In Azure

This article describes how to query the log analytics workspace in Azure.

Different Components To Query Log Analytics Workspace

Component	Purpose
Azure Monitor Agent (AMA)	The worker who collects data on your Virtual Machine.
Data Collection Rule (DCR)	The instructions given to the agent (what to collect, where to send).
Log Analytics Workspace	The destination where the agent sends the data.
Log Analytics (KQL)	Used to analyse collected telemetry and log data.

Search the Monitor service in the search box.

On the Monitor screen, go to the VM Insights section. Click the View button.

Another screen will appear. Go to the Enable VM Insights section. Click the Configure Insights section.

The following screen will appear. Click the Enable button.

The following screen will appear.

Click the Enable button. A screen will appear for Monitoring Configuration.

Click the Configure button to complete the configuration. The data collection rules and log analytics workspace is created.

Go to the log analytics workspace and write the following query.

Heartbeat
| where TimeGenerated > ago(1m)
| where Computer == "vm1"
| summarize LatestHeartbeat=max(TimeGenerated) by Computer

Query/Feedback