Set a table's log data plan to Basic or Analytics

Azure Monitor Logs offers two log data plans that let you reduce log ingestion and retention costs and take advantage of Azure Monitor's advanced features and analytics capabilities based on your needs:

  • The default Analytics log data plan provides full analysis capabilities and makes log data available for queries, Azure Monitor features, such as alerts, and use by other services.
  • The Basic log data plan lets you save on the cost of ingesting and storing high-volume verbose logs in your Log Analytics workspace for debugging, troubleshooting, and auditing, but not for analytics and alerts.

This article describes Azure Monitor's log data plans and explains how to configure the log data plan of the tables in your Log Analytics workspace.

Important

You can switch a table's plan once a week.
The Basic Logs feature isn't available for workspaces in legacy pricing tiers.

Compare the Basic and Analytics log data plans

The following table summarizes the two plans.

Category Analytics Basic
Ingestion Cost for ingestion. Reduced cost for ingestion.
Log queries No extra cost. Full query capabilities. Extra cost.
Subset of query capabilities.
Retention Configure retention from 30 days to 730 days. Retention fixed at eight days.
Alerts Supported. Not supported.

Note

The Basic log data plan isn't available for workspaces in legacy pricing tiers.

When should I use Basic Logs?

The decision whether to configure a table for Basic Logs is based on the following criteria:

  • The table currently supports Basic Logs.
  • You don't require more than eight days of data retention for the table.
  • You only require basic queries of the data using a limited version of the query language.
  • The cost savings for data ingestion over a month exceed the expected cost for any expected queries

Which tables support Basic Logs?

By default, all tables in your Log Analytics workspace are Analytics tables, and they're available for query and alerts. You can currently configure the following tables for Basic Logs:

 Table  Details
Custom tables All custom tables created with or migrated to the data collection rule (DCR)-based logs ingestion API.
ACSCallAutomationIncomingOperations Communication Services incoming requests Calls.
ACSCallRecordingSummary Communication Services recording summary logs.
ACSRoomsIncomingOperations Communication Services Rooms incoming requests operations.
AppTraces Application Insights Freeform traces.
AMSLiveEventOperations Azure Media Services encoder connects, disconnects, or discontinues.
AMSKeyDeliveryRequests Azure Media Services HTTP request details for key, or license acquisition.
AMSMediaAccountHealth Azure Media Services account health status.
AMSStreamingEndpointRequests Azure Media Services information about requests to streaming endpoints.
ContainerAppConsoleLogs Azure Container Apps logs, generated within a Container Apps environment.
ContainerLogV2 Used in Container insights and includes verbose text-based log records.
DevCenterDiagnosticLogs Data plane audit related to Dev Center resources; for example, dev boxes and environment stop, start, delete.

Note

Tables created with the Data Collector API don't support Basic Logs.

Set a table's log data plan

To configure a table for Basic Logs or Analytics Logs in the Azure portal:

  1. From the Log Analytics workspaces menu, select Tables.

    The Tables screen lists all the tables in the workspace.

  2. Select the context menu for the table you want to configure and select Manage table.

    Screenshot that shows the Manage table button for one of the tables in a workspace.

  3. From the Table plan dropdown on the table configuration screen, select Basic or Analytics.

    The Table plan dropdown is enabled only for tables that support Basic Logs.

    Screenshot that shows the Table plan dropdown on the table configuration screen.

  4. Select Save.

View a table's log data plan

To check table configuration in the Azure portal, you can open the table configuration screen, as described in Set table configuration.

Alternatively:

  1. From the Azure Monitor menu, select Logs and select your workspace for the scope. See the Log Analytics tutorial for a walkthrough.

  2. Open the Tables tab, which lists all tables in the workspace.

    Basic Logs tables have a unique icon:

    Screenshot that shows the Basic Logs table icon in the table list.

    You can also hover over a table name for the table information view, which indicates whether the table is configured as Basic Logs:

    Screenshot that shows the Basic Logs table indicator in the table details.

Retain and archive Basic Logs

Analytics tables retain data based on a retention and archive policy you set.

Basic Logs tables retain data for eight days. When you change an existing table's plan to Basic Logs, Azure archives data that's more than eight days old but still within the table's original retention period.

Next steps