Skip to content

Commit d64217c

Browse files
authored
Replace article
Replaced the article with the new feature that enables recovery of deleted workspace The links I used are full path since I didn't know how to get the short version, please advise how to modify.
1 parent 94d39b2 commit d64217c

File tree

1 file changed

+24
-11
lines changed

1 file changed

+24
-11
lines changed
Lines changed: 24 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Delete an Azure Log Analytics workspace | Microsoft Docs
2+
title: Delete and restore Azure Log Analytics workspace | Microsoft Docs
33
description: Learn how to delete your Log Analytics workspace if you created one in a personal subscription or restructure your workspace model.
44
services: log-analytics
55
documentationcenter: log-analytics
@@ -15,26 +15,39 @@ ms.date: 05/07/2018
1515
ms.author: magoedte
1616
---
1717

18-
# Delete an Azure Log Analytics workspace with the Azure portal
19-
This article shows how to use the Azure portal to delete a Log Analytics workspace that you may no longer require.
18+
# Delete and restore Azure Log Analytics workspace
19+
This article explains the concept of Azure Log Analytics workspace soft-delete and how to recover deleted workspace.
2020

21-
## To delete a workspace
22-
When you delete a Log Analytics workspace, all data related to your workspace is deleted from the service within 30 days. You want to exercise caution when you delete a workspace because there might be important data and configuration that may negatively impact your service operations. Consider the other Azure services and sources that store its data in Log Analytics, such as:
21+
## Considerations when deleting a workspace
22+
When you delete a Log Analytics workspace, a soft-delete operation is performed to allow the recovery of the workspace including its data and connected agents within 14 days, whether the deletion was accidental or intentional. After the soft-delete period, the workspace and its data are non-recoverable and are queued for permanent deletion within 30 days.
2323

24-
* Application Insights
25-
* Azure Security Center
24+
You want to exercise caution when you delete a workspace because there might be important data and configuration that may negatively impact your service operation. Review what agents, solutions, and other Azure services and sources that store their data in Log Analytics, such as:
25+
* Management solutions
2626
* Azure Automation
2727
* Agents running on Windows and Linux virtual machines
2828
* Agents running on Windows and Linux computers in your environment
2929
* System Center Operations Manager
30-
* Management solutions
3130

32-
Any agents and System Center Operations Manager management groups configured to report to the workspace continue to in an orphaned state. Inventory what agents, solutions, and other Azure services are integrated with the workspace before you proceed.
33-
34-
If you are an administrator and there are multiple users associated with the workspace, the association between those users and the workspace is broken. If the users are associated with other workspaces, then they can continue using Log Analytics with those other workspaces. However, if they are not associated with other workspaces then they need to create a workspace to use Log Analytics.
31+
The soft-delete operation deletes the workspace resource and any associated users’ permission is broken. If users are associated with other workspaces, then they can continue using Log Analytics with those other workspaces.
3532

33+
## Soft-delete behavior
34+
The workspace delete operation removes the workspace ARM resource, but its configuration and data are kept for 14 days, while giving the appearance that the workspace is deleted. Any agents and System Center Operations Manager management groups configured to report to the workspace remain in an orphaned state during the soft-delete period. The service further provides a mechanism for recovering the deleted workspace including its data and connected resources, essentially undoing the deletion.
35+
Note: Installed solutions and linked services like automation account are permanently removed from the workspace at deletion time and can’t be recovered. These should be reconfigured after the recovery operation to bring the workspace to its previous functionality.
36+
You can delete a workspace using [PowerShell](https://docs.microsoft.com/powershell/module/azurerm.operationalinsights/remove-azurermoperationalinsightsworkspace?view=azurermps-6.13.0), [API](https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces/delete), or in [Azure portal](https://portal.azure.com).
37+
38+
### Delete workspace in Azure portal
3639
1. Sign into the [Azure portal](https://portal.azure.com).
3740
2. In the Azure portal, click **More services** found on the lower left-hand corner. In the list of resources, type **Log Analytics**. As you begin typing, the list filters based on your input. Select **Log Analytics workspaces**.
3841
3. In the Log Analytics subscriptions pane, select a workspace and then click **Delete** from the top of the middle pane.<br><br> ![Delete option from Workspace properties pane](media/delete-workspace/log-analytics-delete-workspace.png)<br>
3942
4. When the confirmation message window appears asking you to confirm deletion of the workspace, click **Yes**.<br><br> ![Confirm deletion of workspace](media/delete-workspace/log-analytics-delete-workspace-confirm.png)
4043

44+
## Recover workspace
45+
If you have Contributor permissions to the subscription and resource group to where the workspace was associated before the soft-delete operation, you can recover it during its soft-delete period including its data, configuration and connected agents. After the soft-delete period, the workspace is non-recoverable and assigned for permanent deletion.
46+
You can recover a workspace by re-creating the workspace using any of the workspace create methods: PowerShell, API or in Azure Portal as long as these properties are populated with the deleted workspace’s details including:
47+
1. Subscription Id
48+
2. Resource Group name
49+
3. Workspace name
50+
4. Region
51+
52+
> [!NOTE]
53+
> Names of deleted workspaces are kept reserved for workspace recovery for the soft-delete period and these can’t be used for new workspace creation. These workspaces names are “released” and available for use for new workspace creation after the soft-delete period.

0 commit comments

Comments
 (0)