Set a table's log data plan in Azure Monitor Logs
Azure Monitor Logs offers two log data plans that let you reduce log ingestion and retention costs and take advantage of Azure Monitor's advanced features and analytics capabilities based on your needs:
- The default Analytics log data plan provides full analysis capabilities and makes log data available for queries, Azure Monitor features, such as alerts, and use by other services.
- The Basic log data plan lets you save on the cost of ingesting and storing high-volume verbose logs in your Log Analytics workspace for debugging, troubleshooting, and auditing, but not for analytics and alerts.
This article describes Azure Monitor's log data plans and explains how to configure the log data plan of the tables in your Log Analytics workspace.
You can switch a table's plan once a week.
The Basic Logs feature isn't available for workspaces in legacy pricing tiers.
Compare the Basic and Analytics log data plans
The following table summarizes the two plans.
|Ingestion||Cost for ingestion.||Reduced cost for ingestion.|
|Log queries||No extra cost. Full query capabilities.||Extra cost.
Subset of query capabilities.
|Retention||Configure retention from 30 days to 730 days.||Retention fixed at eight days.|
The Basic log data plan isn't available for workspaces in legacy pricing tiers.
When should I use Basic Logs?
The decision whether to configure a table for Basic Logs is based on the following criteria:
- The table currently supports Basic Logs.
- You don't require more than eight days of data retention for the table.
- You only require basic queries of the data using a limited version of the query language.
- The cost savings for data ingestion over a month exceed the expected cost for any expected queries
Which tables support Basic Logs?
By default, all tables in your Log Analytics workspace are Analytics tables, and they're available for query and alerts. You can currently configure the following tables for Basic Logs:
|Custom tables||All custom tables created with or migrated to the data collection rule (DCR)-based logs ingestion API.|
|ACSCallAutomationIncomingOperations||Communication Services incoming requests Calls.|
|ACSCallRecordingSummary||Communication Services recording summary logs.|
|ACSRoomsIncomingOperations||Communication Services Rooms incoming requests operations.|
|AppTraces||Application Insights Freeform traces.|
|AMSLiveEventOperations||Azure Media Services encoder connects, disconnects, or discontinues.|
|AMSKeyDeliveryRequests||Azure Media Services HTTP request details for key, or license acquisition.|
|AMSMediaAccountHealth||Azure Media Services account health status.|
|AMSStreamingEndpointRequests||Azure Media Services information about requests to streaming endpoints.|
|ContainerAppConsoleLogs||Azure Container Apps logs, generated within a Container Apps environment.|
|ContainerLogV2||Used in Container insights and includes verbose text-based log records.|
|DevCenterDiagnosticLogs||Data plane audit related to Dev Center resources, e.g. dev boxes and environments stop, start, deletes.|
Tables created with the Data Collector API don't support Basic Logs.
Set a table's log data plan
To configure a table for Basic Logs or Analytics Logs in the Azure portal:
From the Log Analytics workspaces menu, select Tables.
The Tables screen lists all the tables in the workspace.
Select the context menu for the table you want to configure and select Manage table.
From the Table plan dropdown on the table configuration screen, select Basic or Analytics.
The Table plan dropdown is enabled only for tables that support Basic Logs.
View a table's log data plan
To check table configuration in the Azure portal, you can open the table configuration screen, as described in Set table configuration.
Open the Tables tab, which lists all tables in the workspace.
Basic Logs tables have a unique icon:
You can also hover over a table name for the table information view, which indicates whether the table is configured as Basic Logs:
Retain and archive Basic Logs
Analytics tables retain data based on a retention and archive policy you set.
Basic Logs tables retain data for eight days. When you change an existing table's plan to Basic Logs, Azure archives data that's more than eight days old but still within the table's original retention period.
Submit and view feedback for