Skip to content

Commit ff4eaee

Browse files
committed
Update summary-rules.md
1 parent fafbcd9 commit ff4eaee

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

articles/azure-monitor/logs/summary-rules.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -43,15 +43,15 @@ Summary rules perform batch processing directly in your Log Analytics workspace.
4343

4444
:::image type="content" source="media/summary-rules/ingestion-flow.png" alt-text="A diagram that shows how data is ingested from various data sources to a Log Analytics workspace and is aggregated and reingested into the workspace by using a summary rule." lightbox="media/summary-rules/ingestion-flow.png":::
4545

46-
You can aggregate data from any table, regardless of whether the table has an [Analytics or Basic data plan](basic-logs-query.md). Azure Monitor creates the destination table schema based on the query you define. If the destination table already exists, Azure Monitor adds any columns required to support the query results.
47-
48-
You can configure up to 30 active rules to aggregate data from multiple tables and send the aggregated data to separate destination tables or the same table. All destination tables include a set of standard fields with summary rule information, including:
46+
You can aggregate data from any table, regardless of whether the table has an [Analytics or Basic data plan](basic-logs-query.md). Azure Monitor creates the destination table schema based on the query you define. If the destination table already exists, Azure Monitor adds any columns required to support the query results. All destination tables also include a set of standard fields with summary rule information, including:
4947

5048
- `_RuleName`: The summary rule that generated the aggregated log entry.
5149
- `_RuleLastModifiedTime`: When the rule was last modified.
5250
- `_BinSize`: The aggregation interval.
5351
- `_BinStartTime` The aggregation start time.
5452

53+
You can configure up to 30 active rules to aggregate data from multiple tables and send the aggregated data to separate destination tables or the same table.
54+
5555
You can export summarized data from a custom log table to a storage account or Event Hubs for further integrations by defining a [data export rule](logs-data-export.md).
5656

5757
### Example: Summarize ContainerLogsV2 data
@@ -104,19 +104,19 @@ The cost you incur for summary rules consists of the cost of the query on the so
104104
| Analytics | No cost | Analytics ingested GB |
105105
| Basic | Scanned GB | Analytics ingested GB |
106106

107-
For example, this is the cost calculation for hourly rule that returns 100 records per bin:
107+
For example, this is the cost calculation for an hourly rule that returns 100 records per bin:
108108

109-
| Rule configuration | Monthly price calculation
109+
| Source table plan | Monthly price calculation
110110
| --- | --- |
111-
| Query Analytics table | Ingestion price x record size x number of records x 24 hours x 30 days |
112-
| Query Basic table | Scanned GB price x scanned size + Ingestion price x record size x number of records x 24 hours x 30 days |
111+
| Analytics | Ingestion price x record size x number of records x 24 hours x 30 days |
112+
| Basic | Scanned GB price x scanned size + Ingestion price x record size x number of records x 24 hours x 30 days |
113113

114114
For more information, see [Azure Monitor pricing](https://azure.microsoft.com/pricing/details/monitor/).
115115

116116

117117
## Create or update a summary rule
118118

119-
Before you create a rule, experiment with the query in [Log Analytics](log-analytics-overview.md). Verify that the query doesn't reach or near the query limit. Confirm the query produces the intended schema and expected results. If the query is close to the query limits, consider using a smaller `binSize` to process less data per bin. You can also modify the query to return fewer records or remove fields with higher volume.
119+
Before you create a rule, experiment with the query in [Log Analytics](log-analytics-overview.md). Verify that the query doesn't reach or near the query limit. Check that the query produces the intended schema and expected results. If the query is close to the query limits, consider using a smaller `binSize` to process less data per bin. You can also modify the query to return fewer records or remove fields with higher volume.
120120

121121
When you update a query and remove output fields from the results set, Azure Monitor doesn't automatically remove the columns from the destination table. You need to [delete columns from your table](create-custom-table.md#add-or-delete-a-custom-column) manually.
122122

@@ -433,7 +433,7 @@ LASummaryLogs | where QueryDurationMs > 0.9 * 600000
433433

434434
### Verify data completeness
435435

436-
Summary rules are designed for scale, and include a retry mechanism to overcome transient service or query failures related to [query limits](../service-limits.md#log-analytics-workspaces), for example. The retry mechanism includes 10 attempts within eight hours and skips a bin, if exhausted. The rule is set to `isActive: false` and put on hold after eight consecutive bin retries. If you enable [monitor summary rules](#monitor-summary-rules), Azure Monitor logs an event in the `LASummaryLogs` table in your workspace.
436+
Summary rules are designed for scale, and include a retry mechanism to overcome transient service or query failures related to [query limits](../service-limits.md#log-analytics-workspaces), for example. The retry mechanism makes 10 attempts to aggregate a failed bin within eight hours, and skips a bin, if exhausted. The rule is set to `isActive: false` and put on hold after eight consecutive bin retries. If you enable [monitor summary rules](#monitor-summary-rules), Azure Monitor logs an event in the `LASummaryLogs` table in your workspace.
437437

438438
You can't rerun a failed bin run, but you can use the following query to view failed runs:
439439

0 commit comments

Comments
 (0)