Move audit log data from Storage Account to Log Analytics Workspace

Shawn Goodwin 156 Reputation points
2022-11-14T21:47:16.047+00:00

Is there a way to move log data from a Storage Account to a Log Analytics Workspace? I setup a Storage Account almost a month ago to capture audit data, with the intention of running audit queries against that data for our compliance requirements. Yes, I did it wrong. I should have sent the data to a Log Analytics Workspace, run the queries, then push the data to a Storage Account for long-term storage. I have 1 month of data in the Storage Account and want to move it to the Log Analytics Workspace. I found this post saying no formal method exists to move from Storage (Blob) to Log Analytics; however, this post is almost 4 years old (Feb 2019). Does Azure have any tools to move logs from Storage to Log Analytics? Thank you.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,811 questions
0 comments No comments
{count} votes

Accepted answer
  1. Maxim Sergeev 6,566 Reputation points Microsoft Employee
    2022-11-14T21:55:41.1+00:00

    Hi there,

    You can move the data by using API, but the data will be stored in a custom table instead of a standard table AzureDiagnostics.
    Are you ok with that?


0 additional answers

Sort by: Most helpful