Differences between Azure monitor and LogAnalytics

Question

Differences between Azure monitor and LogAnalytics

kow1120 101

We are considering moving to AzureMonitor as LogAnalytics will be deprecated in August 2024.

Please let me know if there is any document or site that shows how the specifications of AzureMonitor and LogAnalytics are different.

Accepted answer

0 additional answers

Your answer

Answer 1

Maxim Sergeev 6,586 Microsoft Employee

Just to clarify - there is no deprecation for Log Analytics :)

Microsoft is going to deprecate an agent based on old architecture - Microsoft Monitoring Agent (or Log Analytics Agent in some documents)
Microsoft is adding more and more options to a new agent called Azure Monitoring Agent.

This doesn't impact on Log Analytics at all.

And yes, if you can it's time to migrate to Azure Monitoring Agent asap.

P.S. Azure Monitor is a mix of services including, but not limited to Log Analytics, Application Insights, Azure Alert Rules, Metrics, Logs, Workbooks etc

kow1120 101 Reputation points

2022-08-05T04:10:47.177+00:00

@Maxim Sergeev

Thanks for the quick reply!

I was very much mistaken.
You are correct, we are considering migrating from Log Analytics Agent to Azure Monitoring Agent.

Do you have any documents or websites that can help us compare and differentiate between LogAnalytics Agent and Azure Monitoring Agent?
Maxim Sergeev 6,586 Reputation points Microsoft Employee

2022-08-05T04:38:21.1+00:00
This is a most relevant document, I guess
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration

Benefits

Security and performance

AMA uses Managed Identity or Azure Active Directory (Azure AD) tokens (for clients), which are much more secure than the legacy authentication methods.

AMA provides a higher events per second (EPS) upload rate compared to legacy agents.

Cost savings using data collection using Data Collection Rules. This is one of the most useful advantages of using AMA.

DCRs lets you configure data collection for specific machines connected to a workspace as compared to the “all or nothing” mode that legacy agents have.

Using DCRs you can define which data to ingest and which data to filter out to reduce workspace clutter and save on costs.

Simpler management of data collection, including ease of troubleshooting

Easy multihoming on Windows and Linux.

Centralized, ‘in the cloud’ agent configuration makes every action, across the data collection lifecycle, simpler and more easily scalable, from onboarding to deployment to updates and changes over time.

Greater transparency and control of more capabilities and services, such as Sentinel, Defender for Cloud, and VM Insights.

A single agent that consolidates all features necessary to address all telemetry data collection needs across servers and client devices (running Windows 10, 11). This is the goal, though Azure Monitor Agent currently converges with the Log Analytics agents.
AnuragSingh-MSFT 21,546 Reputation points Moderator

2022-08-05T04:46:45.147+00:00

@kow1120 , you could also check the table available here: Compare to legacy agents

Hope this helps!

---
Please 'Accept as answer' and ‘Upvote’ for the answer above, if it helped so that it can help others in the community looking for help on similar topics.
kow1120 101 Reputation points

2022-08-05T05:19:26.25+00:00

@Maxim Sergeev
@AnuragSingh-MSFT

Thanks for getting back to me!

The information was very helpful!

Share via

Differences between Azure monitor and LogAnalytics

0 additional answers

Your answer