Hi Vik Lu,
To answer your questions:
- You need to configure diagnostic settings within the Azure resource to forward logs to a workspace and a 3rd party application. You can configure multiple destinations for diagnostic logs, including a Log Analytics workspace, Azure Storage account, Azure Event Hubs, and Azure Monitor partner integrations.
- Configuring diagnostic settings to forward logs to a workspace includes all logs it's ingesting from multiple resources. Diagnostic settings enable you to collect platform logs and metrics from multiple Azure resources and send them to a common destination, such as a Log Analytics workspace.
References:
- Diagnostic settings in Azure Monitor - Requirements and limitations
- Configure diagnostic settings and a workspace
- Collect and analyze resource logs from an Azure resource
- Azure resource logs
- https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-syslog
Let me know if you need more information.
Luis
If the information helped address your question, please Accept the answer.