Query data in Azure Data Explorer and Azure Resource Graph from Azure Monitor

Posted by

This post has been republished via RSS; it originally appeared at: Microsoft Tech Community - Latest Blogs - .

Azure Monitor lets you query data in Azure Data Explorer and Azure Resource Graph from your Log Analytics workspace and Application Insights resources.

You can run cross-service queries by using any client tools that support Kusto Query Language (KQL) queries, including the Log Analytics web UI, workbooks, PowerShell, and the REST API.

Query data in Azure Data Explorer

Enter the identifier for an Azure Data Explorer cluster in a query within the adx pattern, followed by the database name and table.

adx('https://help.kusto.windows.net/Samples').StormEvents

Query data in Azure Resource Graph

  • Enter the arg("") pattern, followed by the Azure Resource Graph table name.
    arg(״״).<Azure-Resource-Graph-table-name>

OREN_SALZBERG_1-1693722953337.png

 

Limitations

  • Database names are case sensitive.

  • Identifying the Timestamp column in the cluster isn't supported. The Log Analytics Query API won't pass along the time filter.

  • The cross-service query ability is used for data retrieval only.

  • Private Link does not support cross-service queries.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.