Share via

Export Logs from Log Analytics Workspace to Blob Storage

Adriaan Boshoff 0 Reputation points
2024-07-11T12:37:19.9733333+00:00

Hi all,

I have a Log Analytics Workspace that is linked to Sentinel.

I have a lot of logs that I need to export from the Workspace into Blob Storage.

Th logs date back 30 days and it is about 400GB, it is about 500 million logs.

Please let me know what the best way is to approach this.

Thank you

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,607 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,053 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. akinbade abiola 8,300 Reputation points
    2024-07-11T12:51:07.4533333+00:00

    Hello Adriaan Boshoff,

    Thanks for your question.

    You can leverage logic apps. See how to do so here:

    Export data from a Log Analytics workspace to a storage account by using Logic Apps

    You can mark it 'Accept Answer' and 'Upvote' if this helped you

    Regards,

    Abiola

  2. Carlos Solís Salazar 17,781 Reputation points MVP
    2024-07-11T12:56:44.12+00:00

    Hi,
    You can achieve your goal through Data Export, please follow this documentation

    I hope this helps!

    Remember to accept the answer if it is helpful.

  3. KarishmaTiwari-MSFT 18,857 Reputation points Microsoft Employee
    2024-07-12T00:00:25.23+00:00

    @Adriaan Boshoff

    You can also set up data export from your Log Analytics workspace to Azure Data Lake Storage (ADLS Gen2). Azure Synapse Analytics provides tools to query the exported data, including T-SQL scripts, Spark code, and machine learning models. You can analyze the data using Spark for machine learning or complex analytics or use the serverless database for auditing scenarios2.

    https://techcommunity.microsoft.com/t5/azure-observability-blog/how-to-analyze-data-exported-from-log-analytics-data-using/ba-p/2547888