Using different Log Analytics Workspaces for different enviroments.

[rpetersson]

Hello!

We have a scenario where we want to use different Log Analytics Workspaces for different environments of the platform for logging. Is there a best practice for how to achieve this?

"parameters": { "logAnalyticsWorkspaceId": "" },

in ALZ-Root-Default.jsonc and ALZ-LandingZones-Default.jsonc

[bonardi]

Hello,

In my scenario we do that separation by region instead of environments and we have to have a region assignment file with that parameter.

[duddit2]

hi @bonardi
I know this thread is a little old but I'm facing the same issue as you described here (regional LAWS), could you provide a little info on how you edited the policy files and assignments files to allow per regional logic?

[bonardi]

Hello @duddit2,

In my scenario, I have a sublevel of managementGroup for different regions, where there is a specific policy in each region.
I have an EPAC-Assignment for each managementGroup to work with the specific policies at that level or sublevel.

Another solution that might work for you.
It is to use a tag in the subscription to indicate the region of the LAW of the resource that belongs to that subscription.
This would require you to create a policy for each region to match the value, but it would allow you to work with different ones.

      "if": {
        "allOf": [
          {
            "value": "[subscription().tags['TagName']]",
            "equals": "TagValue"
          },