Front Door Log Analytics Workspace Cost

Casey 0

Hi,

I have a question about Diagnostic Settings in Azure Front Door Premium.

Currently the Azure Front Door Premium resource has Diagnostic Settings configured to use Log Analytic Workspace and its costing nearly one third of our total Azure spend. So I need to see what options I have I reduce this cost.

We only require a 30 day retention period. Nearly, if not all our log checking is done via the "Logs" option under "Front Door and CDN profile" -> "Monitoring" -> "Logs" (We are not directly opening the Log Analytic Workspace.

As we only retain the data for 30 days, we don't have any storage charges, however we do have very high Analytics Logs data ingestion charge. While Basic Logs data ingestion is far cheaper per GB but is at 0 usage. Is there another option available so we only use Basic Ingestion?

To give you an idea of how the data is being used.

Alert threshold when we exceed XX amount of requests.
Queries on resource providers:
- ResourceProvider == "MICROSOFT.CDN" and Category == "FrontDoorAccessLog"
- where ResourceProvider == "MICROSOFT.CDN" and Category == "FrontDoorWebApplicationFirewallLog

I feel there is a configuration error around the logging, purely due to its costs.

hossein jalilian 8,150 Reputation points

2024-09-13T16:21:16.1766667+00:00
Hello Casey,

Thanks for posting your question in the Microsoft Q&A forum.

There are a few options you can consider to reduce the costs:

Ensure you're only collecting the necessary logs and metrics, consider disabling or reducing the frequency of logs that aren't critical for your operations.

Implement data collection rules to filter and aggregate logs before ingestion, potentially reducing the volume of data sent to Log Analytics

For certain types of logs, you may be able to use Basic logs instead of Analytics logs, which are significantly cheaper

Instead of sending all logs to Log Analytics, consider archiving them to Azure Storage, which is generally less expensive, you can still query these logs when needed, albeit with some additional steps.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-09-18T08:06:22.3733333+00:00

Hello Casey,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Adding to the points provided by @hossein jalilian,

To effectively manage your data costs, it’s recommended to set the immediatePurgeDataOn30Days property to true. This ensures that any data exceeding retention limits is promptly removed.

For your reference: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-retention-configure?tabs=portal-3%2Cportal-1%2Cportal-2#:~:text=Workspaces%20with%2030,Update%20API.

Best Regards,

Sai Prasanna.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-09-19T09:38:11.5633333+00:00

Hi @Casey,

Hope you are having a great day!

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

We are happy to assist you.

Thanks,

Sai Prasanna.
Casey 0 Reputation points

2024-09-19T09:58:14.5566667+00:00

Hi,

The suggestions above all make sense and already in practise.

I suppose my question is more aimed at, if we are only using 30 days worth of logs, which is included within the default scope. Do we need to ingest these logs into Workspace or Storage at all?
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-09-20T06:29:10.49+00:00
Hi @Casey,

Good day! Thanks for the reply.

To answer the query, "Do we need to ingest these logs into Workspace or Storage at all?"

This depends on your requirement

If you ingest logs into Storage, I am not sure you will be able to query logs as easily as with Workspace.

The pricing details is given here: Pricing - Azure Monitor | Microsoft Azure

If you feel that there is a mismatch in Billing and the quantity of logs stored, we can assist you.

If not, the prices apply as per the region.

Kindly let us know if the above helps or you need further assistance on this issue.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-09-23T00:57:11.5833333+00:00

Hi @Casey,

Hope you are having a great day.

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If you are still facing any further issues, please don't hesitate to reach out to us. We are happy to assist you.

Looking forward to your response and appreciate your time on this.

Thanks.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-09-24T01:12:41.55+00:00

Hi @Casey,

Hope you are having a great day.

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.

Thanks,

Sai Prasanna Sinde.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-10-04T10:15:18.8666667+00:00

Hi @Casey,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted answer.

If you feel that your queries have been resolved, please accept the answer by clicking the "Upvote" and "Accept Answer" on the post.

Thanks.
Casey 0 Reputation points

2024-10-04T10:23:51.95+00:00

Hi,

I have reviewed and to be honest, it does not address the issue.

The issue is due to the amount we are charged for log ingestion to workspace. We only retain the logs for 30 days, so there is no storage cost associated, it is 100% ingestion cost.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-10-07T09:19:47.8633333+00:00

Hi @Casey,

Thanks for the reply.

I hope you are having a great day!

To troubleshoot further, we will need a specialized 1:1 session, where a support engineer could help you with your issue. If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

P.S : We will be able to provide you one-time support if and only if your subscription is not managed by a CSP.

Thanks,

Sai Prasanna.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-10-09T03:32:15.5166667+00:00

Hi @Casey,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.

Thanks,

Sai Prasanna.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-10-10T02:18:52.74+00:00

Hi @Casey,

Just checking in to see if you had a chance to see the above suggestion, kindly let us know if it is helpful or reply with more details so that we could assist you better.

Thanks.
Sai Prasanna Sinde 1,080 Reputation points Microsoft Vendor

2024-10-14T02:04:16.5433333+00:00

Hi @Casey,

Just following up to see if you had to chance to review the above suggestion, if you still need support, we are here to help you.

Regards,

Sai Prasanna.

Share via

Front Door Log Analytics Workspace Cost

Your answer