You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/log-analytics/log-analytics-cross-workspace-search.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,7 +21,7 @@ ms.component: na
21
21
22
22
Previously with Azure Log Analytics, you could only analyze data from within the current workspace, and it limited your ability to query across multiple workspaces defined in your subscription. Additionally, you could only search telemetry items collected from your web-based application with Application Insights directly in Application Insights or from Visual Studio. This also made it a challenge to natively analyze operational and application data together.
23
23
24
-
Now you can query not only across multiple Log Analytics workspaces, but also data from a specific Application Insights app in the same resource group, another resource group, or another subscription. This provides you with a system-wide view of your data. You can only perform these types of queries in the [Advanced portal](log-analytics-log-search-portals.md#advanced-analytics-portal), not in the Azure portal. The number of resources (Log Analytics workspaces and Application Insights app) that you can include in a single query is limited to 100.
24
+
Now you can query not only across multiple Log Analytics workspaces, but also data from a specific Application Insights app in the same resource group, another resource group, or another subscription. This provides you with a system-wide view of your data. You can only perform these types of queries in the [Log Analytics page (preview)](log-analytics-log-search-portals.md#log-analytics-page-preview), not in the Azure portal. The number of resources (Log Analytics workspaces and Application Insights app) that you can include in a single query is limited to 100.
25
25
26
26
## Querying across Log Analytics workspaces and from Application Insights
27
27
To reference another workspace in your query, use the [*workspace*](https://docs.loganalytics.io/docs/Language-Reference/Scope-functions/workspace()) identifier, and for an app from Application Insights, use the [*app*](https://docs.loganalytics.io/docs/Language-Reference/Scope-functions/app()) identifier.
Copy file name to clipboardExpand all lines: articles/log-analytics/log-analytics-log-search-log-search-portal.md
+2-7Lines changed: 2 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,17 +12,12 @@ ms.workload: na
12
12
ms.tgt_pltfrm: na
13
13
ms.devlang: na
14
14
ms.topic: conceptual
15
-
ms.date: 01/19/2018
15
+
ms.date: 08/15/2018
16
16
ms.author: bwren
17
17
ms.component: na
18
18
---
19
19
20
-
# Create log searches in Azure Log Analytics using the Log Search portal
21
-
22
-
> [!NOTE]
23
-
> This article describes the Log Search portal in Azure Log Analytics using the new query language. You can learn more about the new language and get the procedure to upgrade your workspace at [Upgrade your Azure Log Analytics workspace to new log search](log-analytics-log-search-upgrade.md).
24
-
>
25
-
> If your workspace hasn't been upgraded to the new query language, you should refer to [Find data using log searches in Log Analytics](log-analytics-log-searches.md) for information on the current version of the Log Search portal.
20
+
# Create log searches in Azure Log Analytics using the Log search portal
26
21
27
22
This article includes a tutorial that describes how to create log searches and analyze data stored in your Log Analytics workspace using the Log Search portal. The tutorial includes running some simple queries to return different types of data and analyzing results. It focuses on features in the Log Search portal for modifying the query rather than modifying it directly. For details on directly editing the query, see the [Query Language reference](https://go.microsoft.com/fwlink/?linkid=856079).
title: Portals for creating and editing log queries in Azure Log Analytics | Microsoft Docs
2
+
title: Viewing and analyzing data in Azure Log Analytics | Microsoft Docs
3
3
description: This article describes the portals that you can use in Azure Log Analytics to create and edit log searches.
4
4
services: log-analytics
5
5
documentationcenter: ''
@@ -12,33 +12,38 @@ ms.workload: na
12
12
ms.tgt_pltfrm: na
13
13
ms.devlang: na
14
14
ms.topic: conceptual
15
-
ms.date: 06/11/2018
15
+
ms.date: 08/20/2018
16
16
ms.author: magoedte; bwren
17
17
ms.component: na
18
18
---
19
19
20
-
# Portals for creating and editing log queries in Azure Log Analytics
20
+
# Viewing and analyzing data in Log Analytics
21
+
There are two options available in the Azure portal for analyzing data stored in Log analytics and for creating queries for ad hoc analysis. The queries that you create using these portals can be used for other features such as alerts and dashboards.
21
22
22
-
You use log searches in a variety of places throughout Log Analytics to retrieve data from the workspace. For actually creating and editing queries in addition to working interactively with returned data though, you have two options that are described below.
23
+
## Log Analytics page (preview)
24
+
Open the Log Analytics page from **Logs (preview)** in the Log Analytics menu. This is a new experience for working with log data and creating queries. You can get an introduction to this portal and inspect its features at [Get started with the Analytics Portal in Log Analytics](query-language/get-started-analytics-portal.md).
23
25
24
-
## Log search
25
-
The Log Search page is accessible from the Azure portal. It's suitable for creating basic queries that can be created on a single line. Log Search can be used without launching an external portal, and you can use it to perform a variety of functions with log searches including creating alert rules, creating computer groups, and exporting the results of the query.
26
+
> [!NOTE]
27
+
> The Log Analytics page has the same functionality as the Advanced Analytics portal which is an external tool outside of the Azure portal. The Advanced Analytics portal is still available, but links and other references to it in the Azure portal are being replaced with this new page.
26
28
27
-
Log Search provides multiple features for editing the query without having a full knowledge of the query language. You can get a summary of these features in [Create log searches in Azure Log Analytics using Log Search](log-analytics-log-search-log-search-portal.md).
29
+
The Log Analytics page provides the following improvements over the [Log search](#log-search) experience.
28
30
31
+
* Multiple tabs – create separate tabs to work with multiple queries.
32
+
* Rich visualizations – variety of charting options.
33
+
* Improved Intellisense and language auto-completion.
34
+
* Syntax highlighting – improves readability of queries.
35
+
* Query explorer – access saved queries and functions.
36
+
* Schema view – review the structure of your data to assist in writing queries.
37
+
* Share – create links to queries, or pin queries to any shared Azure dashboard.
38
+
* Smart Analytics - identifies spikes in your charts and a quick analysis of the cause.
39
+
* Column selection – sort and group columns in the query results.
The Advanced Analytics portal is a dedicated portal that provides advanced functionality not available in Log Search from the Azure portal. Features include the ability to edit a query on multiple lines, selectively execute code, context sensitive Intellisense, and Smart Analytics. The Advanced Analytics portal is most suitable for designing complex queries that are either saved as a log search or copied and pasted into other Log Analytics elements. You launch the Advanced Analytics portal from a link on the Log Search page.
Because of its advanced features, you'll usually use the Advanced Analytics portal as your primary tool for creating and editing queries. Once you've determined that the query works as expected, then you'll copy and paste it elsewhere such as Log Search page or View Designer.
39
-
40
45
### Firewall requirements
41
-
Your browser requires access to the following addresses to access the Advanced Analytics portal. If your browser is accessing the Azure portal through a firewall, you must enable access to these addresses.
46
+
Your browser requires access to the following addresses to access the Log Analytics page and the Advanced Analytics portal. If your browser is accessing the Azure portal through a firewall, you must enable access to these addresses.
42
47
43
48
| Uri | IP | Ports |
44
49
|:---|:---|:---|
@@ -47,8 +52,15 @@ Your browser requires access to the following addresses to access the Advanced A
47
52
| docs.loganalytics.io | Dynamic | 80,443 |
48
53
49
54
55
+
## Log search
56
+
Open the Log search page from **Logs** in the Log Analytics menu or from **Log Analytics** in the Azure Monitor menu. This is suitable for analyzing log data using basic queries. It provides multiple features for editing queries without having a full knowledge of the query language. You can get a summary of these features in [Create log searches in Azure Log Analytics using Log Search](log-analytics-log-search-log-search-portal.md).
- Walk through a tutorial on using [Log Search](log-analytics-tutorial-viewdata.md) to learn how to create queries using the query language
53
-
-Check out the [Advanced Analytics portal](https://go.microsoft.com/fwlink/?linkid=856587) to create sophisticated queries and use as a development environment for your log searches.
64
+
- Walk through a [tutorial using Log Search](log-analytics-tutorial-viewdata.md) to learn how to create queries using the query language
65
+
-Walk through a [lesson using the Advanced Analytics portal](query-language/get-started-analytics-portal.md) which provides the same experience as the Log Analytics page.
Copy file name to clipboardExpand all lines: articles/log-analytics/log-analytics-view-designer-parts.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -320,7 +320,7 @@ The name and value separator is the single-character delimiter to use to parse t
320
320
For example, consider a property called *Location* that included values such as *Redmond-Building 41* and *Bellevue-Building 12*. You can specify a dash (-) for the name and value separator and *City-Building* for the name. This approach parses each value into two properties called *City* and *Building*.
Click-through navigation defines what action will be taken when you click on a header or list item in a view. This will either open a query in the [Log Search portal](log-analytics-log-search-portals.md#log-search) or launch another view.
323
+
Click-through navigation defines what action will be taken when you click on a header or list item in a view. This will either open a query in the [Log Search portal](log-analytics-log-search-portals.md) or launch another view.
324
324
325
325
The following table describes the settings for click-through navigation.
Copy file name to clipboardExpand all lines: articles/log-analytics/log-analytics-view-designer.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -51,7 +51,7 @@ The options are described in the following table:
51
51
| Option | Description |
52
52
|:--|:--|
53
53
| Refresh | Refreshes the view with the latest data. |
54
-
| Analytics | Opens the [Advanced Analytics portal](log-analytics-log-search-portals.md#advanced-analytics-portal) to analyze data with log searches. |
54
+
| Analytics | Opens the [Advanced Analytics portal](log-analytics-log-search-portals.md) to analyze data with log queries. |
55
55
| Edit | Opens the view in View Designer to edit its contents and configuration. |
56
56
| Clone | Creates a new view and opens it in View Designer. The name of the new view is the same as the original name, but with *Copy* appended to it. |
57
57
| Date range | Set the date and time range filter for the data that's included in the view. |
0 commit comments