Collect and analyze resource logs from an Azure resource

Prerequisites: An Azure resource to monitor. You can use any resource in your Azure subscription that supports diagnostic settings. To determine whether a resource supports diagnostic settings, go to its menu in the Azure portal and verify that there’s a Diagnostic settings option in the Monitoring section of the menu.

1. From All services in the Azure portal, select Log Analytics workspaces.
   
2. Click Create to create a new workspace.
   
3. On the Basics tab, select a Subscription, Resource group, and Region for the workspace. These do not need to be the same as the resource being monitored. Provide a Name that must be globally unique across all Azure Monitor subscriptions.
   
4. Click Review + Create to create the workspace.

Create a diagnostic setting

1. Under the Monitoring section of your resource’s menu, select Diagnostic settings and click Add diagnostic setting.
   
2. Each diagnostic setting has three basic parts
   
3. Click Save to save the diagnostic settings.

Use a log query to retrieve logs

1. Select Logs from your resource’s menu. Log Analytics opens with the Queries window that includes prebuilt queries for your Resource type.
   
2. Browse through the available queries. Identify one to run and click Run. The query is added to the query window and the results returned.